Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/U2YFzSn0v-79FDGC0Q4zA7S9Ri8.roa
File: U2YFzSn0v-79FDGC0Q4zA7S9Ri8.roa (raw, json)
Hash identifier: UnN6CGkp1R8D+zFvY7G4rqq4ze4Riq73yQxnv8zFwKM=
Subject key identifier: 53:66:05:CD:29:F4:BF:EE:FD:14:31:82:D1:0E:33:03:B4:BD:46:2F
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01A13A5B23F40ACD3A85C5D393D03D3079DB
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/U2YFzSn0v-79FDGC0Q4zA7S9Ri8.roa
Signing time: Wed 14 Oct 2026 12:20:13 +0000
ROA not before: Wed 14 Oct 2026 12:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219100
IP address blocks: 2a06:b3c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:5b:23:f4:0a:cd:3a:85:c5:d3:93:d0:3d:30:79:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Oct 14 12:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=536605cd29f4bfeefd143182d10e3303b4bd462f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a9:22:19:de:c4:34:a4:0d:9b:6b:5e:40:ef:
33:c0:5d:24:2b:e1:0a:e2:d7:fc:36:a9:6d:b0:d7:
b6:c7:92:0e:85:25:3d:3e:bf:98:5d:03:5c:ff:49:
aa:b3:b7:97:f4:ba:62:21:5c:eb:33:b3:cd:b3:c4:
35:5f:89:c7:91:56:c5:e5:61:ef:60:a9:5e:cf:92:
01:a3:c5:e4:60:c4:a1:9e:8d:5d:2b:3a:08:f8:09:
fd:d0:39:eb:54:22:47:d2:8f:63:a8:27:fa:82:cf:
c7:36:5b:27:19:86:2a:d5:8c:bc:84:95:03:d3:11:
55:94:1b:a9:e4:3d:9c:28:a9:8c:8c:05:02:fb:46:
be:59:15:45:7c:97:19:3b:74:f3:e5:a7:16:04:b8:
6d:73:7f:d3:f3:6a:37:86:a3:c8:fe:7e:32:c1:a2:
cf:ac:ff:fc:97:9b:42:33:50:99:2d:06:9e:19:62:
47:f8:1d:b0:38:24:61:75:9c:61:20:b8:e1:d5:54:
6c:b2:db:7d:9c:0f:c1:fb:e2:0c:20:f5:66:04:81:
0d:dc:6b:f5:52:97:4c:c4:96:b4:89:27:49:ce:28:
ff:0d:f0:68:a4:d9:f7:b1:5c:9b:62:79:0e:80:38:
a0:4e:22:c9:77:d1:63:b5:d2:06:1d:b6:60:5c:20:
10:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:66:05:CD:29:F4:BF:EE:FD:14:31:82:D1:0E:33:03:B4:BD:46:2F
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/U2YFzSn0v-79FDGC0Q4zA7S9Ri8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b3c0::/29
Signature Algorithm: sha256WithRSAEncryption
85:ed:0b:65:26:65:df:aa:7f:45:bb:1b:5b:b0:a9:6e:d7:d2:
fc:f9:29:d6:cc:d6:b9:9f:6e:18:30:a3:42:2f:8f:a9:70:64:
a6:01:43:43:6c:ed:85:5b:52:a3:5f:eb:8d:06:b4:46:03:e2:
ac:97:1a:b1:84:5a:69:17:71:d0:b4:8d:f7:05:6c:b7:42:06:
ae:a8:47:27:66:31:c8:67:01:a1:9d:90:19:4a:48:a6:7a:c6:
a5:26:2b:d8:2d:22:35:32:e8:41:7f:31:1d:30:24:b7:19:8a:
43:e3:85:0b:01:75:ef:4c:1a:3d:94:b7:d2:15:1c:4e:5e:72:
d1:66:0e:bb:46:ff:9e:f8:4a:a7:77:02:3a:91:31:d5:21:84:
7c:a2:07:be:28:53:ce:f0:88:47:82:a3:30:94:c3:fa:de:53:
7a:45:79:28:a0:ea:28:29:cc:b3:4e:87:ec:89:ae:8e:e2:3a:
52:61:f5:43:4d:47:ab:d1:0b:9d:62:b2:0f:0e:81:e1:34:ab:
76:0c:a3:63:0d:e0:4d:b0:a3:41:e8:7c:60:58:9e:07:5d:c3:
c4:86:cc:1e:7d:2a:16:9b:e0:b0:8f:59:90:e0:ef:9e:35:2c:
9b:e8:75:d1:63:4b:21:a3:ec:3f:bb:5e:f2:db:2e:53:7a:cc:
61:eb:88:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:07:13 2026 by rpki-client