Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/AAoThdHzlzur8Q1UMfJEcWKVrcA.roa
File: AAoThdHzlzur8Q1UMfJEcWKVrcA.roa (raw, json)
Hash identifier: qR3s9ohpasYqFdKmUqM1ulZrgTeOLq3yCHEP8XHr0iE=
Subject key identifier: 00:0A:13:85:D1:F3:97:3B:AB:F1:0D:54:31:F2:44:71:62:95:AD:C0
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01A10BF6F5D20B2D58BAC5B1D393409DCBE4
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/AAoThdHzlzur8Q1UMfJEcWKVrcA.roa
Signing time: Mon 05 Oct 2026 12:08:16 +0000
ROA not before: Mon 05 Oct 2026 12:08:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 403024
IP address blocks: 2a12:bec3:10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:f6:f5:d2:0b:2d:58:ba:c5:b1:d3:93:40:9d:cb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Oct 5 12:08:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=000a1385d1f3973babf10d5431f244716295adc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:ed:e7:4d:7f:01:a9:5b:a4:ef:a9:7f:37:
2b:59:33:51:8f:48:22:04:94:aa:ed:9e:09:5f:9a:
b7:d3:63:21:c7:35:b0:36:0e:80:78:a5:70:ec:57:
85:28:0e:45:4d:f8:ab:f2:0d:b3:cd:2a:6f:a5:d6:
42:d6:91:e6:2b:d3:97:55:59:fa:20:cd:ff:8b:5c:
9b:cf:b6:60:13:96:96:e4:44:c3:65:77:52:29:42:
50:fa:88:ab:80:3d:d9:aa:4a:43:58:81:e2:a1:b2:
02:a4:a6:fa:e9:c4:09:84:e5:c7:c1:28:9d:ea:12:
43:cb:68:24:29:24:98:76:ab:38:95:7c:70:ba:e1:
94:e6:83:20:b0:bf:19:0f:a4:1c:2d:68:10:37:fb:
bf:66:2f:35:18:83:c9:af:c7:04:50:75:7b:61:13:
7d:3b:eb:3c:a0:12:78:3a:fe:c1:da:be:73:71:36:
8a:18:13:76:77:09:39:17:76:db:a6:41:32:6a:1b:
11:7c:f8:a2:f5:33:e3:76:3b:fa:96:89:5b:97:fe:
31:47:42:a0:93:d0:e6:aa:c1:3a:10:d8:f4:87:7c:
c9:57:49:da:cc:df:b2:e1:20:7a:72:8a:c6:0a:f3:
b7:83:ef:9b:5b:00:98:21:7e:b6:93:d3:1a:a6:f8:
e3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0A:13:85:D1:F3:97:3B:AB:F1:0D:54:31:F2:44:71:62:95:AD:C0
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/AAoThdHzlzur8Q1UMfJEcWKVrcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec3:10::/44
Signature Algorithm: sha256WithRSAEncryption
96:36:a5:27:fa:7f:fb:b8:2f:8f:79:c4:a7:b4:fc:a9:69:cb:
ce:54:e0:5a:77:e0:c7:ce:f0:b4:cb:52:95:73:25:ea:eb:5d:
e1:6c:c4:64:2c:19:57:e5:a5:c5:b8:62:b5:84:9c:7c:5e:96:
19:7c:d3:2c:de:c9:45:0d:08:17:2e:bb:51:fc:df:d3:05:6f:
5d:0d:ce:1a:ec:5e:0e:e4:09:de:95:01:ef:a2:91:0f:24:0b:
5d:e6:94:76:50:a4:b3:1a:da:1d:38:1e:4e:33:97:69:3e:08:
7a:4c:5d:e5:6f:11:de:dc:ae:58:f4:7c:40:85:ca:d4:a9:04:
3c:f4:be:2d:8a:e0:ad:08:4b:92:6a:20:67:d7:b1:2b:d7:b6:
1f:56:b4:49:dc:bc:22:45:24:32:9a:55:23:1a:48:61:43:54:
5a:03:17:80:39:de:8a:45:e3:4b:10:86:95:6b:9f:67:b9:37:
43:75:ff:f8:d7:c2:26:77:9d:81:7d:14:ff:01:21:6f:ec:40:
83:a7:02:f6:29:41:d4:54:ec:e8:d7:ee:77:73:7e:9c:b9:aa:
11:62:a2:c9:45:db:5c:5f:45:2b:55:e7:5f:4b:09:c9:9f:f8:
a1:cb:57:89:bc:3b:87:6b:32:3c:6c:20:ad:08:24:b4:80:27:
aa:7e:64:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 14:37:40 2026 by rpki-client