Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/aK2caXgiTdhjJ5cZTLiK586wp5o.roa
File: aK2caXgiTdhjJ5cZTLiK586wp5o.roa (raw, json)
Hash identifier: CWGI7cfauke7j1zYlGR2iltqsATVGq747uVl2VkPg4c=
Subject key identifier: 68:AD:9C:69:78:22:4D:D8:63:27:97:19:4C:B8:8A:E7:CE:B0:A7:9A
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01A135E967A4F339353D4DB31D7022B86094
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/aK2caXgiTdhjJ5cZTLiK586wp5o.roa
Signing time: Tue 13 Oct 2026 15:37:31 +0000
ROA not before: Tue 13 Oct 2026 15:37:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205923
IP address blocks: 2a0f:f44::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:e9:67:a4:f3:39:35:3d:4d:b3:1d:70:22:b8:60:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Oct 13 15:37:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68ad9c6978224dd8632797194cb88ae7ceb0a79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:7f:61:48:d1:39:b2:b9:9d:c7:8a:a3:2c:
6c:08:ee:2e:48:3a:e4:c1:9a:94:41:8f:22:45:e7:
ef:2d:7c:60:09:2c:cd:01:6e:b8:fe:9c:dd:2b:f8:
0d:27:2e:67:d6:23:48:aa:69:2b:16:04:b5:b1:05:
79:64:fe:e6:77:f3:7c:74:5a:be:50:2f:81:cc:47:
1f:70:f1:cd:83:71:e6:55:57:3f:de:0d:cf:0f:01:
0a:91:19:74:bd:26:33:fa:6f:72:31:17:7c:40:4d:
72:2c:07:84:91:08:ad:ff:f7:c5:ac:23:5e:99:7b:
bb:7c:be:d4:85:74:b2:15:26:35:7c:eb:54:62:d3:
98:64:49:0e:fc:ad:ae:17:f4:94:b2:d8:37:4f:0f:
4e:7c:fe:22:44:87:f6:23:d4:a9:6b:00:08:ee:08:
84:ad:b7:e0:85:5b:b5:98:af:fb:5c:fc:46:47:f7:
bd:0d:c0:3a:36:14:f4:06:f7:fd:54:64:14:ff:b7:
3f:4a:83:0c:e4:11:98:c5:a4:a4:c8:d6:a8:35:b8:
65:a9:ee:7e:35:80:a7:8b:e6:b0:49:ac:9a:ad:3c:
14:87:89:1f:9c:97:b1:ae:d7:12:ab:09:6c:b8:88:
1d:4f:0d:3b:cc:58:4c:28:8c:be:03:91:16:3d:d2:
15:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AD:9C:69:78:22:4D:D8:63:27:97:19:4C:B8:8A:E7:CE:B0:A7:9A
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/aK2caXgiTdhjJ5cZTLiK586wp5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:f44::/32
Signature Algorithm: sha256WithRSAEncryption
3e:12:89:2f:46:6d:8c:ca:59:be:4b:59:7b:9a:6d:13:8f:a6:
72:58:24:2e:18:7c:11:cb:b5:9b:3e:44:ea:90:c6:e8:f4:3a:
12:82:d5:98:b4:8d:ab:d1:7e:f4:ff:98:be:02:95:31:7a:87:
a7:49:18:46:e0:c5:cb:21:b3:21:1f:7f:a1:ce:81:b6:ae:0b:
7b:ef:ac:70:7e:b0:8a:b9:b0:44:2b:d9:07:f9:2f:cb:68:37:
11:45:61:3d:20:ce:fa:fd:8f:40:03:77:d1:ce:a7:1a:c5:7f:
2d:8b:3b:dd:a0:f2:24:ed:06:ca:2f:72:71:6f:c2:00:29:c1:
00:f6:64:19:9a:1f:df:8f:25:2d:ef:cf:14:90:e6:c5:55:50:
b8:44:54:43:3d:32:41:1e:0d:ff:cc:1e:9a:1c:66:8a:01:cf:
96:c8:74:9c:d0:97:d4:bf:04:06:01:a8:d2:5e:9a:88:e6:d5:
f7:0f:4b:36:d4:f0:4f:d9:ff:14:11:bf:1e:d9:a4:25:d7:d8:
07:b9:4e:5f:cc:fa:c2:c2:74:5f:5c:8d:6a:c6:fe:1a:5a:ca:
c9:03:34:15:07:1c:2b:57:ea:b6:e8:50:75:8a:1e:ca:ac:d0:
8e:84:a1:a8:1d:5b:04:74:da:52:e2:a3:b6:37:91:9f:30:3a:
9b:9a:b4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:36:25 2026 by rpki-client