Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/1-ux1oLvxQ54rvQPeE0zWzB98naw.roa
File: 1-ux1oLvxQ54rvQPeE0zWzB98naw.roa (raw, json)
Hash identifier: IyMcqeMB5UkUtcbizVs1yCWBGpz+dtXBiQBIraz7iIU=
Subject key identifier: FA:EC:75:A0:BB:F1:43:9E:2B:BD:03:DE:13:4C:D6:CC:1F:7C:9D:AC
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 01A12C56D995EA8F8C65D841C2020C6765AA
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/1-ux1oLvxQ54rvQPeE0zWzB98naw.roa
Signing time: Sun 11 Oct 2026 19:00:51 +0000
ROA not before: Sun 11 Oct 2026 19:00:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6517
IP address blocks: 2a09:3f00:3c20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:56:d9:95:ea:8f:8c:65:d8:41:c2:02:0c:67:65:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Oct 11 19:00:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=faec75a0bbf1439e2bbd03de134cd6cc1f7c9dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:13:e3:92:1d:6f:9e:fb:b9:08:82:d0:cb:
f1:29:30:c2:d7:79:e9:85:6f:54:66:6f:59:b2:9c:
75:46:e3:60:bb:53:22:5d:35:c1:a8:33:b5:02:0c:
8c:87:84:31:20:65:9c:3f:a8:0f:96:c5:4c:a3:c5:
33:c2:7c:1f:3f:ce:db:0c:0d:ce:c5:8e:0e:53:3f:
24:81:ea:05:3b:10:9b:ac:82:e3:6f:af:c8:7d:39:
ee:f4:fe:84:d7:9a:ca:c6:bf:73:0a:34:93:0a:05:
e5:f4:2e:8e:bf:a8:29:14:13:f9:03:a5:ee:84:b7:
3a:bb:93:ae:78:64:e4:d6:b4:81:49:03:35:e6:d1:
5c:a1:0e:bd:76:b4:61:9d:d9:81:bf:a6:c0:bc:6a:
a1:61:d3:3c:3a:8f:f0:7e:25:ab:2c:1e:f0:8e:6c:
d1:7e:37:a1:b9:e1:5a:f8:8b:f0:9d:fd:2b:f7:b7:
2f:c7:1f:39:cf:ef:b0:00:01:1c:cd:66:a5:29:5d:
49:9b:40:08:56:c1:dc:81:77:bc:82:d7:b8:d1:e4:
cf:38:44:de:30:1c:d4:c7:27:c5:85:2b:60:c3:91:
d0:66:43:2c:f0:bf:3e:ff:a5:35:57:06:ab:ad:fe:
06:19:22:ea:fc:3a:25:d6:39:9b:13:27:42:ed:83:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EC:75:A0:BB:F1:43:9E:2B:BD:03:DE:13:4C:D6:CC:1F:7C:9D:AC
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/1-ux1oLvxQ54rvQPeE0zWzB98naw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:3c20::/44
Signature Algorithm: sha256WithRSAEncryption
66:10:bd:fd:5f:6e:5a:42:5b:a3:6d:f8:88:8e:a2:1c:31:34:
6b:13:a4:7e:73:3b:a8:f3:56:85:0c:30:72:85:e1:60:0e:5b:
30:70:29:27:0b:54:be:76:cb:ea:0b:f8:8e:35:9e:86:e2:e4:
3d:79:f7:fc:d1:fc:ae:1b:ff:f6:81:c4:e0:fa:a0:cb:5d:23:
65:91:5d:fc:6f:1b:5f:b8:06:a0:f9:c0:2d:cf:ee:0f:d0:03:
06:85:fe:2f:84:bb:b6:c5:d2:8a:39:ed:44:ce:52:7a:e9:2e:
9c:6e:5e:c8:f1:1c:dd:c0:71:5a:60:ab:92:f7:1a:ea:f7:5a:
dc:18:9b:c8:1e:fa:60:b4:c7:43:13:94:49:94:3c:05:b3:a5:
93:0f:28:ee:62:00:83:a4:a4:23:a3:08:bd:cb:c6:16:0c:e4:
11:13:1f:9b:00:ca:df:9f:19:6b:38:42:39:0b:50:98:fa:87:
44:86:dd:7f:bb:45:1a:40:55:19:04:22:1d:25:d8:6a:30:15:
7f:9a:69:4a:70:e1:a2:7a:bf:73:1b:98:66:df:48:c9:2c:ed:
9f:9b:e2:6b:16:b1:74:9a:6f:e8:b4:d8:02:46:e8:c0:a3:90:
b4:39:2c:de:a4:7c:7d:ef:af:4f:31:18:22:a3:ba:d8:d6:94:
96:cc:ca:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 11:57:38 2026 by rpki-client