Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/5zotdGhZ0Gcpf2HDWEZZph8FuoQ.roa
File: 5zotdGhZ0Gcpf2HDWEZZph8FuoQ.roa (raw, json)
Hash identifier: afXTpzJq9rxMK5xJS3Z+9ZinT0vt97roqaPsDO9jUn4=
Subject key identifier: E7:3A:2D:74:68:59:D0:67:29:7F:61:C3:58:46:59:A6:1F:05:BA:84
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A125E4D1D09902F2B4E5AF622D1CA16EAC
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/5zotdGhZ0Gcpf2HDWEZZph8FuoQ.roa
Signing time: Sat 10 Oct 2026 12:58:35 +0000
ROA not before: Sat 10 Oct 2026 12:58:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40115
IP address blocks: 2a0e:4005:ff00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:e4:d1:d0:99:02:f2:b4:e5:af:62:2d:1c:a1:6e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Oct 10 12:58:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e73a2d746859d067297f61c3584659a61f05ba84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e3:aa:b0:e6:41:54:af:54:3d:17:39:69:4c:
d0:06:19:d9:78:f3:0c:ea:45:7e:fc:a5:3c:b6:82:
76:79:d6:33:f2:97:8d:40:47:8d:09:68:5d:71:c2:
4f:db:30:49:6e:47:d8:86:5d:3b:1f:07:6f:f1:9c:
e6:36:3c:c3:91:26:99:5c:32:e1:07:48:0a:eb:50:
7c:a3:3e:9f:a8:5e:d4:60:88:39:75:97:36:6b:ad:
dc:71:1d:4f:a8:bc:9b:f6:32:d2:78:1a:77:e4:c5:
8b:56:fb:3d:b1:59:6b:18:d8:b9:fd:83:cd:45:81:
0d:cb:ff:cb:3a:48:db:85:ff:64:5e:90:56:d4:ea:
7b:4e:57:ec:46:95:db:9d:b5:6e:d4:da:b8:e1:cd:
7b:29:41:ed:f6:71:cc:3c:5c:64:2c:5b:55:ab:21:
ee:d0:cb:ee:60:7d:55:6c:55:2d:09:fa:7e:59:02:
27:f0:37:93:ad:51:60:ed:aa:a9:e0:ec:40:b8:91:
18:41:90:46:25:75:af:72:e8:a7:1e:d2:26:f7:49:
9c:a8:60:ac:03:13:de:48:45:10:e2:ba:8f:27:54:
4a:b3:51:41:41:44:10:05:41:90:9c:d0:b5:5a:20:
7f:3d:33:72:30:82:f2:5c:4f:5a:fd:79:ca:19:5b:
75:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3A:2D:74:68:59:D0:67:29:7F:61:C3:58:46:59:A6:1F:05:BA:84
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/5zotdGhZ0Gcpf2HDWEZZph8FuoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4005:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
79:66:52:0d:b6:ab:25:b1:0d:8c:b1:ce:e4:e3:19:76:ae:fd:
1a:f0:94:92:83:25:86:fd:5a:39:19:4d:b3:21:81:1a:e1:dc:
88:1c:d0:c9:2f:ae:f9:34:8a:b7:18:70:ac:92:12:ca:d9:06:
b7:7e:1b:d4:77:a8:a4:9f:e4:4a:0c:23:fc:69:75:ee:ad:8d:
3e:b5:b9:fe:fa:29:27:93:2b:d8:db:ed:ad:0d:29:e5:50:8e:
ab:84:40:57:0a:40:ca:6e:cc:15:de:c3:e3:24:32:98:a5:7e:
e4:f8:ad:ea:fe:6c:4e:fb:ee:65:55:79:75:03:4f:ca:33:22:
b5:ee:63:0c:8c:71:68:e9:9e:74:cf:02:3a:71:f9:45:95:be:
76:4f:08:cc:dd:d1:13:d7:82:20:a9:91:e3:85:4e:67:74:a4:
a9:46:73:ce:71:35:01:5f:91:bb:0b:fa:2d:0b:24:35:8c:68:
5f:0f:ef:78:51:be:e7:60:b0:2a:01:fb:cb:48:54:12:26:d9:
d7:39:c3:96:8c:8c:56:87:8a:87:58:03:03:85:02:54:f6:30:
60:4b:a1:8b:5f:a3:4f:3f:9d:d3:65:a2:b5:cd:f8:1d:d0:07:
ea:a5:b1:ff:70:7b:3b:83:7d:e1:c4:66:4d:9a:76:0d:1d:c0:
a9:c7:48:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 09:24:08 2026 by rpki-client