Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/u8wyHbnQcLW6yNcfoq6y17IuDGg.roa
File: u8wyHbnQcLW6yNcfoq6y17IuDGg.roa (raw, json)
Hash identifier: LbGPoqb7wxuKeUdWZltRcluDmZWS91XBoGOdLuur+rE=
Subject key identifier: BB:CC:32:1D:B9:D0:70:B5:BA:C8:D7:1F:A2:AE:B2:D7:B2:2E:0C:68
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A12892EC9F74EB0751AD683EAAE6ED9353
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/u8wyHbnQcLW6yNcfoq6y17IuDGg.roa
Signing time: Sun 11 Oct 2026 01:27:59 +0000
ROA not before: Sun 11 Oct 2026 01:27:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218458
IP address blocks: 2a0c:9a40:e160::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:92:ec:9f:74:eb:07:51:ad:68:3e:aa:e6:ed:93:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Oct 11 01:27:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbcc321db9d070b5bac8d71fa2aeb2d7b22e0c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:26:a3:13:3e:2b:a5:d5:f2:ee:ba:74:85:34:
9b:7d:cb:a8:a4:ef:9c:fd:58:54:d9:71:e2:de:73:
2d:8c:ad:0d:4e:2b:c6:a2:0e:19:52:56:03:fc:4f:
b4:b4:1c:87:0c:4f:ad:c0:9f:6c:8a:04:c9:63:1b:
e9:63:ba:18:a3:35:c2:f9:f0:40:0a:a2:3e:67:d0:
77:5c:bd:84:53:49:8b:47:e3:67:05:aa:79:b5:4d:
cb:fa:13:d6:1b:92:16:93:b0:15:bb:5b:26:22:65:
1f:14:0e:04:8b:0b:4e:8a:15:12:b1:90:51:ea:f1:
6d:44:0c:86:13:ad:51:1c:97:af:5b:04:3b:50:5b:
b7:b5:42:33:f2:12:56:4f:67:bc:2e:2e:29:4d:c4:
a3:de:7e:e5:f9:1e:0e:0c:d7:44:5d:54:f8:21:0a:
ee:d1:2c:d6:a7:89:a8:23:2c:e8:57:94:d8:18:f0:
8d:ba:a5:ff:10:1b:e0:97:8f:85:9b:3a:cd:67:c8:
7d:5f:fe:b6:12:f3:37:d7:66:95:d3:2c:22:50:3e:
33:b2:f9:02:14:6b:e0:22:5c:e7:8f:f4:d8:a9:81:
38:af:07:96:b0:42:6b:22:73:f5:8a:38:06:9e:f9:
72:4c:ce:ea:50:b8:9d:4e:d0:c1:28:6b:78:f8:54:
d8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CC:32:1D:B9:D0:70:B5:BA:C8:D7:1F:A2:AE:B2:D7:B2:2E:0C:68
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/u8wyHbnQcLW6yNcfoq6y17IuDGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:e160::/48
Signature Algorithm: sha256WithRSAEncryption
2a:81:81:d0:f4:b9:59:a1:c0:ad:23:ea:e3:32:d9:75:3b:2d:
f1:b9:cf:ee:d0:84:e4:d8:ff:8e:37:d2:69:0a:5a:41:09:64:
ff:21:56:ff:6a:c6:73:55:1c:fb:f3:91:d1:32:f9:7d:d2:9e:
be:bd:fb:88:75:73:45:bd:d4:27:e5:c8:17:0d:0d:9d:f2:d7:
f3:32:48:6f:dc:b8:ad:5a:48:89:fb:a8:35:2b:49:2e:74:59:
fe:d8:e0:d4:b6:76:6d:b9:38:18:5f:d2:fe:2d:88:84:1b:68:
e7:f7:37:fa:43:7c:b1:6a:2b:91:fa:eb:71:81:f2:92:98:6f:
5f:45:5d:05:c1:9c:27:c4:3c:a8:eb:c3:40:6a:18:c0:86:85:
84:d5:a6:33:74:f2:91:ae:b9:23:2f:4c:87:d4:c1:73:b1:be:
5a:ea:8b:1d:b8:91:54:8f:64:a0:43:2e:52:c8:a5:6b:90:94:
9b:cb:80:55:f5:d6:2d:b3:50:70:4a:3f:1e:22:b0:82:e0:00:
7a:32:37:e0:34:58:73:b0:70:8f:54:03:0c:8c:cf:43:42:d7:
69:9f:9f:a1:da:72:d2:6d:cd:0e:77:21:f2:1d:87:6b:0c:29:
04:10:01:23:37:b1:4f:df:70:38:33:a7:46:7f:7b:86:de:23:
2d:a6:a1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:24 2026 by rpki-client