Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/dFJgElWQXUaN6oRf27W9_w-Hkzk.roa
File: dFJgElWQXUaN6oRf27W9_w-Hkzk.roa (raw, json)
Hash identifier: ZOJpqzHbbh31q4bCeBvyBD6UKLdT9LpjJ4Y0W2zhvAY=
Subject key identifier: 74:52:60:12:55:90:5D:46:8D:EA:84:5F:DB:B5:BD:FF:0F:87:93:39
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 01A14082D58CD0C109C5A9252B9D113EBCCD
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/dFJgElWQXUaN6oRf27W9_w-Hkzk.roa
Signing time: Thu 15 Oct 2026 17:01:18 +0000
ROA not before: Thu 15 Oct 2026 17:01:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63293
IP address blocks: 2a03:2887:ff00::/48 maxlen: 48
2a03:2887:ff02::/48 maxlen: 48
2a03:2887:ff03::/48 maxlen: 48
2a03:2887:ff04::/48 maxlen: 48
2a03:2887:ff05::/48 maxlen: 48
2a03:2887:ff06::/48 maxlen: 48
2a03:2887:ff07::/48 maxlen: 48
2a03:2887:ff08::/48 maxlen: 48
2a03:2887:ff09::/48 maxlen: 48
2a03:2887:ff0a::/48 maxlen: 48
2a03:2887:ff18::/48 maxlen: 48
2a03:2887:ff19::/48 maxlen: 48
2a03:2887:ff1b::/48 maxlen: 48
2a03:2887:ff1c::/48 maxlen: 48
2a03:2887:ff1d::/48 maxlen: 48
2a03:2887:ff1e::/48 maxlen: 48
2a03:2887:ff1f::/48 maxlen: 48
2a03:2887:ff20::/48 maxlen: 48
2a03:2887:ff21::/48 maxlen: 48
2a03:2887:ff22::/48 maxlen: 48
2a03:2887:ff23::/48 maxlen: 48
2a03:2887:ff24::/48 maxlen: 48
2a03:2887:ff25::/48 maxlen: 48
2a03:2887:ff27::/48 maxlen: 48
2a03:2887:ff28::/48 maxlen: 48
2a03:2887:ff29::/48 maxlen: 48
2a03:2887:ff2a::/48 maxlen: 48
2a03:2887:ff2b::/48 maxlen: 48
2a03:2887:ff2e::/48 maxlen: 48
2a03:2887:ff2f::/48 maxlen: 48
2a03:2887:ff30::/48 maxlen: 48
2a03:2887:ff33::/48 maxlen: 48
2a03:2887:ff35::/48 maxlen: 48
2a03:2887:ff36::/48 maxlen: 48
2a03:2887:ff37::/48 maxlen: 48
2a03:2887:ff38::/48 maxlen: 48
2a03:2887:ff39::/48 maxlen: 48
2a03:2887:ff3a::/48 maxlen: 48
2a03:2887:ff3b::/48 maxlen: 48
2a03:2887:ff3e::/48 maxlen: 48
2a03:2887:ff3f::/48 maxlen: 48
2a03:2887:ff40::/48 maxlen: 48
2a03:2887:ff41::/48 maxlen: 48
2a03:2887:ff42::/48 maxlen: 48
2a03:2887:ff43::/48 maxlen: 48
2a03:2887:ff44::/48 maxlen: 48
2a03:2887:ff45::/48 maxlen: 48
2a03:2887:ff48::/48 maxlen: 48
2a03:2887:ff49::/48 maxlen: 48
2a03:2887:ff4a::/48 maxlen: 48
2a03:2887:ff4b::/48 maxlen: 48
2a03:2887:ff4d::/48 maxlen: 48
2a03:2887:ff4e::/48 maxlen: 48
2a03:2887:ff4f::/48 maxlen: 48
2a03:2887:ff51::/48 maxlen: 48
2a03:2887:ff52::/48 maxlen: 48
2a03:2887:ff53::/48 maxlen: 48
2a03:2887:ff54::/48 maxlen: 48
2a03:2887:ff55::/48 maxlen: 48
2a03:2887:ff56::/48 maxlen: 48
2a03:2887:ff57::/48 maxlen: 48
2a03:2887:ff58::/48 maxlen: 48
2a03:2887:ff59::/48 maxlen: 48
2a03:2887:ff5a::/48 maxlen: 48
2a03:2887:ff5b::/48 maxlen: 48
2a03:2887:ff5f::/48 maxlen: 48
2a03:2887:ff60::/48 maxlen: 48
2a03:2887:ff61::/48 maxlen: 48
2a03:2887:ff62::/48 maxlen: 48
2a03:2887:ff63::/48 maxlen: 48
2a03:2887:ff64::/48 maxlen: 48
2a03:2887:ff65::/48 maxlen: 48
2a03:2887:ff66::/48 maxlen: 48
2a03:2887:ff67::/48 maxlen: 48
2a03:2887:ff68::/48 maxlen: 48
2a03:2887:ff69::/48 maxlen: 48
2a03:2887:ff6a::/48 maxlen: 48
2a03:2887:ff6b::/48 maxlen: 48
2a03:2887:ff6c::/48 maxlen: 48
2a03:2887:ff6f::/48 maxlen: 48
2a03:2887:ff70::/48 maxlen: 48
2a03:2887:ff71::/48 maxlen: 48
2a03:2887:ff72::/48 maxlen: 48
2a03:2887:ff73::/48 maxlen: 48
2a03:2887:ff74::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:82:d5:8c:d0:c1:09:c5:a9:25:2b:9d:11:3e:bc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Oct 15 17:01:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7452601255905d468dea845fdbb5bdff0f879339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2c:f1:0a:0d:40:c7:51:aa:95:77:e3:9e:bb:
2c:b1:c1:11:ce:15:11:ac:6f:5b:ff:eb:b0:22:94:
dc:41:09:94:e5:49:02:41:9a:a2:49:8b:52:3b:7a:
01:c9:3f:fe:e3:c1:0e:6f:d0:7b:da:54:05:0d:0d:
19:f2:56:72:d4:c0:30:95:3e:e9:c8:e4:58:49:2c:
64:59:a0:f1:2c:f5:f1:91:0e:44:53:17:73:e7:aa:
a2:34:4e:55:88:9f:81:80:ba:ef:30:bc:02:6d:37:
97:a7:2c:07:f0:6d:ca:8d:1f:14:b1:22:03:bc:e5:
5e:7f:8a:5d:e6:43:0c:dc:7d:28:ae:4d:22:8c:71:
a0:3d:a7:8d:5d:65:a1:62:8b:8a:d1:6e:39:91:fc:
6b:7f:eb:58:6a:74:f5:ae:e2:e2:30:a7:50:ce:df:
70:9c:dd:99:8f:69:25:06:2d:d8:db:67:9e:72:12:
0e:e6:66:5e:b9:e7:b6:50:99:e3:1d:ed:e1:8a:ee:
f9:8d:19:17:d6:c6:d8:fa:23:76:46:63:3e:66:f5:
dc:23:07:08:86:8d:be:4a:86:31:04:ad:a0:44:1d:
c5:50:f2:94:eb:42:88:66:f3:f4:e2:32:e2:07:54:
99:0b:21:e3:63:bf:aa:9b:39:46:30:43:5f:35:1f:
e0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:52:60:12:55:90:5D:46:8D:EA:84:5F:DB:B5:BD:FF:0F:87:93:39
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/dFJgElWQXUaN6oRf27W9_w-Hkzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2887:ff00::/48
2a03:2887:ff02::-2a03:2887:ff0a:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff18::/47
2a03:2887:ff1b::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff27::-2a03:2887:ff2b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff2e::-2a03:2887:ff30:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff33::/48
2a03:2887:ff35::-2a03:2887:ff3b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff3e::-2a03:2887:ff45:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff48::/46
2a03:2887:ff4d::-2a03:2887:ff4f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff51::-2a03:2887:ff5b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff5f::-2a03:2887:ff6c:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff6f::-2a03:2887:ff74:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5b:6d:92:ac:1e:97:b7:02:2b:fc:f2:2d:0b:21:45:58:e0:3d:
80:8c:fd:46:78:dc:87:04:18:c2:d5:a2:72:74:0f:30:8b:70:
72:11:80:18:56:fb:f3:19:76:16:23:15:b6:e9:ac:75:3e:ef:
c5:1b:dd:36:85:19:09:0b:84:b8:67:72:b3:3e:ce:3a:14:55:
0c:2d:ee:1f:79:b5:6a:91:e3:03:80:0c:43:37:50:88:f9:a4:
ff:18:3e:56:bd:cd:51:1a:57:90:13:df:73:d1:e1:b7:42:93:
ce:80:57:d8:c8:77:c6:8c:7f:bc:5e:68:c2:43:5a:6c:b8:32:
2f:dd:f1:86:40:ce:76:95:74:6e:0d:58:db:c4:48:66:19:e1:
b0:17:14:e8:77:3a:7c:fb:46:09:85:5e:62:7f:ed:8c:c6:1d:
e3:44:9a:d7:5d:aa:32:99:73:b6:d5:e2:82:d4:fa:fc:7e:cb:
24:ae:9e:69:da:e8:e4:1d:b9:8e:6f:10:e9:69:44:f5:03:2a:
15:03:fa:b3:8a:1f:c1:55:97:11:a4:d4:74:7b:f9:e0:a0:9b:
08:f3:2d:69:16:03:ce:3e:bb:a2:cc:85:5c:35:91:c3:74:4e:
15:ac:10:6b:1f:eb:9b:8a:f3:80:cf:a0:88:ce:55:01:18:44:
51:67:b4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:43:54 2026 by rpki-client