Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/r4AxeNiXZH1s0J5JcuVNjehtikw.roa
File: r4AxeNiXZH1s0J5JcuVNjehtikw.roa (raw, json)
Hash identifier: /OumfCheIzUqIkwWX/7s3n2xxZ1gJ5xQV/jWzzgc4YY=
Subject key identifier: AF:80:31:78:D8:97:64:7D:6C:D0:9E:49:72:E5:4D:8D:E8:6D:8A:4C
Certificate issuer: /CN=86ef506521b4f9bd1fa17f3087659fb2c546e0d8
Certificate serial: 01A14709002E32A3ADA893DFD72701998FC0
Authority key identifier: 86:EF:50:65:21:B4:F9:BD:1F:A1:7F:30:87:65:9F:B2:C5:46:E0:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/r4AxeNiXZH1s0J5JcuVNjehtikw.roa
Signing time: Fri 16 Oct 2026 23:25:34 +0000
ROA not before: Fri 16 Oct 2026 23:25:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399670
IP address blocks: 2a0b:a500:1010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:09:00:2e:32:a3:ad:a8:93:df:d7:27:01:99:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ef506521b4f9bd1fa17f3087659fb2c546e0d8
Validity
Not Before: Oct 16 23:25:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af803178d897647d6cd09e4972e54d8de86d8a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0e:03:03:b3:87:a2:2d:f0:6b:f7:34:34:5e:
01:af:e9:85:46:3d:99:ca:6f:d5:5b:d6:38:5e:86:
57:35:1e:34:ca:30:09:e1:49:12:9e:17:52:9c:e1:
12:5f:92:3a:38:82:6b:4f:33:d1:b1:ef:ea:c5:49:
12:5f:1d:dd:9c:93:62:52:37:2f:39:69:85:98:d0:
f1:4a:84:a0:f3:ed:26:23:75:62:4d:cf:8d:15:08:
a0:09:5c:22:c8:e1:9d:5d:5e:1e:75:54:9c:51:f5:
4a:d5:d8:02:35:71:94:7e:7a:25:ba:d5:77:39:ce:
21:71:3b:98:bf:e6:86:4f:85:65:04:83:7f:18:2c:
10:30:12:dd:39:8d:c3:66:dc:97:71:b8:5f:9b:c6:
79:52:bb:55:b6:50:a8:70:8f:ba:c7:25:b3:82:29:
c2:34:20:3f:65:5f:f9:48:ad:5a:48:ae:2e:2e:98:
74:74:de:6d:8d:14:28:2e:dc:de:8d:7b:97:87:08:
b4:21:9f:11:27:78:2e:83:32:ce:e4:0f:e7:25:f4:
66:9f:a0:0d:cb:d5:58:b1:b4:28:f0:80:1c:75:54:
9f:12:a5:c1:31:4a:72:52:a7:18:4e:82:7f:57:46:
87:6c:0d:fa:b9:4a:13:51:c5:11:dc:5c:60:06:e5:
49:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:80:31:78:D8:97:64:7D:6C:D0:9E:49:72:E5:4D:8D:E8:6D:8A:4C
X509v3 Authority Key Identifier:
keyid:86:EF:50:65:21:B4:F9:BD:1F:A1:7F:30:87:65:9F:B2:C5:46:E0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/r4AxeNiXZH1s0J5JcuVNjehtikw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:a500:1010::/48
Signature Algorithm: sha256WithRSAEncryption
42:54:4c:e2:12:0b:29:95:0f:33:d3:ec:5b:bb:34:b2:85:bd:
59:23:bf:1b:62:5f:50:b1:96:19:8f:a3:07:88:01:16:56:8e:
96:f4:14:f4:dd:da:08:ef:a5:dd:17:c6:0d:99:69:20:7a:01:
1d:e2:3b:bd:22:96:b2:eb:89:bd:94:f0:92:b2:12:1f:6a:83:
43:8e:a9:96:57:ec:0c:68:09:01:f6:55:aa:ed:b3:51:a2:71:
d6:13:74:b5:46:a3:58:47:86:1a:bb:8c:9d:68:9d:7d:2b:cc:
e6:0b:c2:e4:24:c0:40:89:bb:03:00:a1:16:76:05:16:12:26:
93:4a:de:9d:d7:d6:c6:b5:bd:0f:80:dd:59:b5:68:80:55:47:
dd:73:97:d3:97:2d:ab:82:99:f6:bb:f7:c9:74:5f:71:9d:a5:
e1:5e:15:71:ca:d8:75:2b:99:9e:d3:c5:a1:4d:05:78:a4:33:
2b:fb:fa:15:f4:66:97:f7:cc:44:0f:ef:b8:d3:f0:06:90:e9:
c1:2b:b4:12:bf:a4:28:99:97:4d:68:f9:e8:e3:2c:fa:62:99:
ba:12:47:8f:2a:92:8e:df:19:93:e0:cc:2e:9e:2a:8a:b8:5e:
0d:aa:5e:3f:43:d7:56:e1:62:a5:d4:f4:50:67:48:df:1f:5e:
1c:98:d2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:40:30 2026 by rpki-client