Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/17Nh1fcYjBDg86wYEgmW_eqcKx4.roa
File: 17Nh1fcYjBDg86wYEgmW_eqcKx4.roa (raw, json)
Hash identifier: BdUFXl2ZIxPBzkmQkWn3oawOieiSzL7WiHm0ydQgZBo=
Subject key identifier: D7:B3:61:D5:F7:18:8C:10:E0:F3:AC:18:12:09:96:FD:EA:9C:2B:1E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FEEFE9E88FD1D8F3BF84E36B68FF9F496
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/17Nh1fcYjBDg86wYEgmW_eqcKx4.roa
Signing time: Tue 11 Aug 2026 04:04:51 +0000
ROA not before: Tue 11 Aug 2026 04:04:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215760
IP address blocks: 2a02:2fc0:2a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ee:fe:9e:88:fd:1d:8f:3b:f8:4e:36:b6:8f:f9:f4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 11 04:04:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7b361d5f7188c10e0f3ac18120996fdea9c2b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:d0:9f:d9:03:9f:25:7e:47:50:e5:b0:5a:
b5:9e:2a:7b:55:a5:87:03:08:01:5a:e1:88:01:c6:
a7:d9:2d:23:8a:07:a4:ad:30:25:f9:99:a0:be:f7:
d4:c2:5d:9b:1f:12:79:cc:bb:ca:6b:57:ab:6c:4e:
04:f8:b8:51:bb:72:82:03:a4:eb:f9:c3:b8:3a:de:
8e:c2:a5:e9:e8:83:f6:56:a9:f6:62:3c:b9:62:7c:
8a:33:32:ed:d2:a6:4b:bc:60:c4:22:f8:ae:f6:d6:
df:c0:c9:93:bd:ac:2a:5a:59:c3:f3:53:3f:f6:6f:
40:58:c5:82:c8:a5:d8:13:de:1e:3e:21:7d:0d:e5:
3c:9b:7e:a3:18:f1:94:56:01:3b:60:05:50:05:0c:
9f:5c:7c:29:e4:4e:16:b5:d8:67:a3:ca:2d:88:6e:
68:75:62:c5:d3:34:8f:7c:fe:b7:3b:6d:30:f3:2c:
c1:fd:41:97:f2:b0:90:dc:02:e1:78:ba:b7:f5:dc:
1a:7e:b5:c4:d3:8f:53:8c:b7:2c:92:13:81:c6:3e:
97:9f:f6:26:f5:0e:18:3e:bc:10:a5:62:a8:76:c5:
df:cf:d3:e8:88:14:a3:3c:d0:cb:d7:17:a7:f3:f2:
fd:91:d6:25:3e:85:f6:90:40:88:5b:f4:90:49:6c:
cf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B3:61:D5:F7:18:8C:10:E0:F3:AC:18:12:09:96:FD:EA:9C:2B:1E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/17Nh1fcYjBDg86wYEgmW_eqcKx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2fc0:2a::/48
Signature Algorithm: sha256WithRSAEncryption
8f:b5:fa:eb:2d:f8:1a:03:e8:71:23:e6:76:4b:e8:e4:ef:aa:
d5:8a:b0:ae:36:81:c5:43:3f:06:3d:a1:19:b0:a0:0b:aa:23:
65:89:53:08:22:69:48:32:fa:23:97:d2:15:1c:92:3b:7a:9d:
a3:ee:08:a0:96:7a:b2:b9:1c:f2:30:7e:d4:ba:52:92:f7:1a:
d7:d9:7b:5d:27:cb:f7:6c:3a:c8:0e:06:97:c0:44:1a:b2:fb:
25:d7:40:da:ac:68:9d:64:de:6c:49:01:7a:27:72:83:b7:08:
ff:06:21:b3:b6:9d:e8:36:5f:2e:0f:38:28:1c:3a:8c:09:04:
b9:de:9a:f8:cf:78:6d:e8:09:4c:e0:47:57:a9:01:31:04:a2:
76:31:fe:8a:6f:3c:8d:bd:5e:37:44:87:bd:f1:c5:8a:4b:08:
7d:c6:48:dd:85:9c:df:2e:6e:c6:7a:50:c5:d8:a6:08:a7:4b:
c8:a7:49:8b:b4:65:f1:bd:73:c9:b7:2e:6f:cf:7a:37:54:84:
b6:3d:1e:bc:d9:57:f6:f8:95:d4:09:c4:dd:c2:98:11:75:0f:
87:3d:d1:3e:d4:46:df:b9:fa:b7:01:2c:06:08:54:da:3b:d6:
50:24:df:04:04:4f:db:ba:5c:8e:7f:f1:84:1e:e8:c5:a5:44:
89:c0:54:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:57:11 2026 by rpki-client