Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/AmQFWYdCZox0ikoPTMU_Z72hWWw.roa
File: AmQFWYdCZox0ikoPTMU_Z72hWWw.roa (raw, json)
Hash identifier: obhjoJXVh/S+SipDvxGPXjkWhKgzl+Ojk/T4Oh1czk4=
Subject key identifier: 02:64:05:59:87:42:66:8C:74:8A:4A:0F:4C:C5:3F:67:BD:A1:59:6C
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A153CEB8154ABC7EEEF197F8992A7CC70D
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/AmQFWYdCZox0ikoPTMU_Z72hWWw.roa
Signing time: Mon 19 Oct 2026 10:56:58 +0000
ROA not before: Mon 19 Oct 2026 10:56:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213586
IP address blocks: 2a0e:4001:a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:ce:b8:15:4a:bc:7e:ee:f1:97:f8:99:2a:7c:c7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Oct 19 10:56:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=026405598742668c748a4a0f4cc53f67bda1596c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:36:26:9b:72:3a:e8:4a:6c:60:25:61:de:f1:
9f:78:1c:6b:d0:c6:da:dd:dd:2a:29:68:f0:d0:0e:
86:2c:cd:13:49:37:67:a9:18:9a:95:3a:f4:5b:11:
36:2f:27:bc:20:d6:62:25:4e:84:02:55:0c:9f:1c:
af:c8:67:1f:f2:03:b2:71:d1:e6:76:7e:ae:a2:2c:
d6:6e:a0:fd:86:b6:32:7e:a3:3c:ea:8f:3c:3a:f7:
12:af:b5:71:d0:85:2c:5c:4b:09:51:0a:e7:90:f6:
d9:d5:3c:d8:11:ff:0b:94:5c:dd:87:50:da:28:74:
0d:62:4a:59:33:6b:39:0e:31:b0:1a:9c:60:0c:86:
50:7c:aa:d9:b9:32:12:ec:fc:ee:9b:3d:8d:cf:b5:
e2:11:37:63:7c:78:7f:89:06:5f:1a:b1:e0:15:5c:
78:af:8d:b0:9a:57:8b:d9:23:dd:2d:b4:ec:1a:a1:
f1:ab:64:eb:aa:3f:8e:e4:0f:75:ae:64:c9:5a:5b:
23:5d:c9:57:9c:c6:f0:6a:75:2f:30:75:63:d8:ea:
94:f2:96:85:7e:40:a6:e3:32:31:ad:2b:88:1a:c5:
48:bf:2d:9a:1a:f9:60:c0:f5:bb:41:ca:a4:15:85:
95:e6:fc:aa:d4:79:bd:37:6e:a8:18:96:b0:70:6e:
e8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:64:05:59:87:42:66:8C:74:8A:4A:0F:4C:C5:3F:67:BD:A1:59:6C
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/AmQFWYdCZox0ikoPTMU_Z72hWWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4001:a0::/44
Signature Algorithm: sha256WithRSAEncryption
04:5a:1d:b0:20:a9:89:2c:b7:50:20:4b:3f:0a:9a:3a:6d:9a:
01:eb:1d:cf:64:ba:08:92:a9:e1:31:21:dc:da:49:7d:fd:97:
7d:ac:22:b2:dc:51:fb:33:eb:43:d6:57:38:d2:8f:38:0f:fb:
6a:7e:98:63:8a:cf:48:07:dd:9d:53:64:90:b3:cd:07:6e:83:
ef:02:4b:2c:47:4c:ae:58:da:dc:9f:33:9f:49:a9:6d:2c:7f:
4c:07:77:d7:8b:25:f8:00:c5:e1:a9:29:1b:91:ee:40:50:8b:
96:1c:b3:a4:10:6f:3d:98:04:fc:2d:44:a8:50:b0:fd:8c:45:
f3:23:81:05:37:33:6f:9d:bf:97:43:c9:99:70:bb:2a:a2:6a:
ec:73:09:ca:dc:dc:11:a0:3d:bc:c7:ff:ac:c9:2b:6b:18:24:
cc:5c:4d:ae:bd:5f:d8:ed:6b:41:ee:a6:7f:9f:dc:f7:3a:8d:
29:9a:24:16:9c:e5:05:6a:f2:91:59:ed:99:62:01:9d:45:07:
1f:1b:fc:c9:ae:a9:ba:78:08:f0:45:cd:a5:79:5c:4b:87:43:
56:db:bc:0a:51:98:cd:c6:ed:49:a8:ee:74:05:a2:81:28:06:
a8:a6:8c:e0:63:9b:65:a8:bd:9a:bd:3c:17:6f:da:c4:e1:6b:
1f:1d:14:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:54:59 2026 by rpki-client