Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/_-sNSVgMVHTkwF52fWBR2nPArfo.roa
File: _-sNSVgMVHTkwF52fWBR2nPArfo.roa (raw, json)
Hash identifier: TTf+rBGoGojRakxIJn9QwbEKEeEyborA+p/3hkjWeic=
Subject key identifier: FF:EB:0D:49:58:0C:54:74:E4:C0:5E:76:7D:60:51:DA:73:C0:AD:FA
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 019E2249A9D4E7AF10FE399695F676E185D4
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/_-sNSVgMVHTkwF52fWBR2nPArfo.roa
Signing time: Wed 13 May 2026 17:01:53 +0000
ROA not before: Wed 13 May 2026 17:01:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63293
IP address blocks: 2a03:2887:ff00::/48 maxlen: 48
2a03:2887:ff02::/48 maxlen: 48
2a03:2887:ff03::/48 maxlen: 48
2a03:2887:ff04::/48 maxlen: 48
2a03:2887:ff05::/48 maxlen: 48
2a03:2887:ff06::/48 maxlen: 48
2a03:2887:ff07::/48 maxlen: 48
2a03:2887:ff08::/48 maxlen: 48
2a03:2887:ff09::/48 maxlen: 48
2a03:2887:ff0a::/48 maxlen: 48
2a03:2887:ff18::/48 maxlen: 48
2a03:2887:ff19::/48 maxlen: 48
2a03:2887:ff1b::/48 maxlen: 48
2a03:2887:ff1c::/48 maxlen: 48
2a03:2887:ff1d::/48 maxlen: 48
2a03:2887:ff1e::/48 maxlen: 48
2a03:2887:ff1f::/48 maxlen: 48
2a03:2887:ff20::/48 maxlen: 48
2a03:2887:ff21::/48 maxlen: 48
2a03:2887:ff22::/48 maxlen: 48
2a03:2887:ff23::/48 maxlen: 48
2a03:2887:ff24::/48 maxlen: 48
2a03:2887:ff25::/48 maxlen: 48
2a03:2887:ff27::/48 maxlen: 48
2a03:2887:ff28::/48 maxlen: 48
2a03:2887:ff29::/48 maxlen: 48
2a03:2887:ff2a::/48 maxlen: 48
2a03:2887:ff2b::/48 maxlen: 48
2a03:2887:ff2e::/48 maxlen: 48
2a03:2887:ff2f::/48 maxlen: 48
2a03:2887:ff30::/48 maxlen: 48
2a03:2887:ff33::/48 maxlen: 48
2a03:2887:ff35::/48 maxlen: 48
2a03:2887:ff36::/48 maxlen: 48
2a03:2887:ff37::/48 maxlen: 48
2a03:2887:ff38::/48 maxlen: 48
2a03:2887:ff39::/48 maxlen: 48
2a03:2887:ff3a::/48 maxlen: 48
2a03:2887:ff3b::/48 maxlen: 48
2a03:2887:ff3f::/48 maxlen: 48
2a03:2887:ff40::/48 maxlen: 48
2a03:2887:ff41::/48 maxlen: 48
2a03:2887:ff42::/48 maxlen: 48
2a03:2887:ff43::/48 maxlen: 48
2a03:2887:ff44::/48 maxlen: 48
2a03:2887:ff45::/48 maxlen: 48
2a03:2887:ff48::/48 maxlen: 48
2a03:2887:ff49::/48 maxlen: 48
2a03:2887:ff4a::/48 maxlen: 48
2a03:2887:ff4b::/48 maxlen: 48
2a03:2887:ff4d::/48 maxlen: 48
2a03:2887:ff4e::/48 maxlen: 48
2a03:2887:ff4f::/48 maxlen: 48
2a03:2887:ff51::/48 maxlen: 48
2a03:2887:ff52::/48 maxlen: 48
2a03:2887:ff53::/48 maxlen: 48
2a03:2887:ff54::/48 maxlen: 48
2a03:2887:ff55::/48 maxlen: 48
2a03:2887:ff56::/48 maxlen: 48
2a03:2887:ff57::/48 maxlen: 48
2a03:2887:ff58::/48 maxlen: 48
2a03:2887:ff59::/48 maxlen: 48
2a03:2887:ff5a::/48 maxlen: 48
2a03:2887:ff5f::/48 maxlen: 48
2a03:2887:ff60::/48 maxlen: 48
2a03:2887:ff61::/48 maxlen: 48
2a03:2887:ff62::/48 maxlen: 48
2a03:2887:ff63::/48 maxlen: 48
2a03:2887:ff64::/48 maxlen: 48
2a03:2887:ff65::/48 maxlen: 48
2a03:2887:ff66::/48 maxlen: 48
2a03:2887:ff67::/48 maxlen: 48
2a03:2887:ff68::/48 maxlen: 48
2a03:2887:ff69::/48 maxlen: 48
2a03:2887:ff6a::/48 maxlen: 48
2a03:2887:ff6b::/48 maxlen: 48
2a03:2887:ff6c::/48 maxlen: 48
2a03:2887:ff6f::/48 maxlen: 48
2a03:2887:ff70::/48 maxlen: 48
2a03:2887:ff71::/48 maxlen: 48
2a03:2887:ff72::/48 maxlen: 48
2a03:2887:ff73::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 May 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:49:a9:d4:e7:af:10:fe:39:96:95:f6:76:e1:85:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: May 13 17:01:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffeb0d49580c5474e4c05e767d6051da73c0adfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:f9:ab:99:2d:a3:22:02:e8:3e:ce:2f:16:
7d:8e:59:b2:92:ae:6a:8c:d4:56:6f:6e:be:63:ec:
40:6f:73:46:f7:eb:32:2c:61:d3:4e:6a:9f:af:32:
66:83:8f:8c:fa:dc:f4:52:8a:31:ab:06:8e:33:fd:
d4:cc:1a:22:79:43:92:e9:3b:45:76:0f:b2:a6:58:
2a:2d:49:fc:e3:0b:3a:b4:de:61:eb:96:5c:f5:e9:
6e:98:cc:ba:b8:a4:ab:0b:b9:a7:a7:77:9b:e2:77:
fb:5c:17:9e:51:0a:cd:db:5c:e9:f0:53:71:5d:f6:
6c:69:cd:f3:69:e4:38:8c:1a:9e:30:44:d8:52:fb:
8f:9a:cf:d1:d6:2c:49:05:89:61:ed:b6:ce:e1:5c:
ab:92:03:05:7d:43:f4:a7:a7:31:56:eb:de:db:13:
a1:e6:dc:a7:81:37:ec:8d:0a:43:10:a1:34:5d:6c:
b8:b4:50:ba:db:4c:0c:08:96:c2:52:f0:9b:dc:fb:
60:80:b3:52:04:03:db:c5:33:a8:02:f2:5a:cf:97:
db:4d:7a:8e:fe:5a:31:71:28:50:d3:96:7c:0b:5e:
85:39:97:2f:33:a2:06:7a:4d:c9:f4:20:ac:64:a5:
9b:e7:ce:3c:43:27:4b:f4:93:77:f3:5a:3c:48:95:
3b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EB:0D:49:58:0C:54:74:E4:C0:5E:76:7D:60:51:DA:73:C0:AD:FA
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/_-sNSVgMVHTkwF52fWBR2nPArfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2887:ff00::/48
2a03:2887:ff02::-2a03:2887:ff0a:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff18::/47
2a03:2887:ff1b::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff27::-2a03:2887:ff2b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff2e::-2a03:2887:ff30:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff33::/48
2a03:2887:ff35::-2a03:2887:ff3b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff3f::-2a03:2887:ff45:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff48::/46
2a03:2887:ff4d::-2a03:2887:ff4f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff51::-2a03:2887:ff5a:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff5f::-2a03:2887:ff6c:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff6f::-2a03:2887:ff73:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9d:04:db:8e:dd:ff:19:38:f2:2e:11:b5:7b:4e:c2:23:2d:3e:
cb:8c:3b:e8:1b:61:93:87:16:32:4b:f7:2e:f9:e4:b9:d9:b6:
25:9d:c9:0e:72:3e:bb:bb:cd:70:34:16:c4:fb:3f:e3:45:83:
c6:12:69:d9:1e:4e:31:e4:aa:3f:b5:89:8f:0e:ab:07:78:0b:
80:c2:82:93:c5:03:d2:57:0f:26:ce:b8:11:8c:f8:c8:2c:ca:
69:44:5c:c4:8a:36:8f:bc:b0:9f:63:0b:78:82:67:bf:0b:7e:
03:06:ad:f3:96:fb:f5:e1:c7:14:f7:0f:74:41:c7:13:09:60:
f5:f8:d6:d5:f9:fe:d0:62:7e:43:91:f2:60:ed:93:95:ec:01:
fd:14:39:59:53:82:8f:25:73:9a:05:1c:b5:80:6f:4f:71:e6:
7a:fb:54:0a:9b:25:91:6d:89:f6:83:8e:cc:60:cf:e8:34:82:
68:e4:02:68:cd:48:9d:78:be:62:b7:58:dc:05:b2:76:3d:7a:
35:2a:e7:7d:a2:66:5b:51:27:ba:67:6c:33:b3:37:89:f8:23:
38:f5:94:9e:e2:48:9d:2e:4e:67:d5:8a:f0:f7:59:53:69:34:
b5:0d:10:6d:98:00:8b:f8:e3:53:1d:ae:cd:6e:48:d0:f9:c2:
38:bc:a9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 05:31:27 2026 by rpki-client