Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/fds8fcyyz7LI0qBWMp78GxBLZmU.roa
File: fds8fcyyz7LI0qBWMp78GxBLZmU.roa (raw, json)
Hash identifier: kKV2Ou5x7lMuWvflNep3aKGmdcoYeCDeKBrEtAsBauQ=
Subject key identifier: 7D:DB:3C:7D:CC:B2:CF:B2:C8:D2:A0:56:32:9E:FC:1B:10:4B:66:65
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A13AECB3B9EE810626F62820343E60B922
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/fds8fcyyz7LI0qBWMp78GxBLZmU.roa
Signing time: Wed 14 Oct 2026 14:59:13 +0000
ROA not before: Wed 14 Oct 2026 14:59:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219283
IP address blocks: 2a0e:4001:9000::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:ec:b3:b9:ee:81:06:26:f6:28:20:34:3e:60:b9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Oct 14 14:59:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ddb3c7dccb2cfb2c8d2a056329efc1b104b6665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cb:c6:f2:1a:b7:2a:09:67:8c:04:ae:a2:da:
59:29:71:da:58:5e:19:e0:99:a3:69:ff:e3:ed:1f:
dc:fb:23:17:3c:bb:7d:d9:7f:29:64:ef:16:4e:6f:
82:e1:f6:eb:fa:81:83:97:95:89:53:96:55:93:ec:
27:e1:60:9b:2c:62:55:c1:c0:a1:9c:8e:e6:c0:20:
9b:32:4d:30:5d:2a:0a:3e:fd:b9:87:6c:6a:2f:92:
a2:9e:4b:4f:56:55:0c:d0:3a:59:21:1c:65:7a:49:
db:04:1f:e5:9a:88:d4:3d:9b:7f:4a:fb:95:c4:ee:
9d:de:05:a5:cb:eb:7e:17:97:2e:c4:69:40:d9:2d:
1f:f0:e5:5a:e1:45:43:5a:ae:23:30:12:85:7c:98:
3a:93:88:9b:d3:45:7b:af:37:17:08:df:09:c9:4a:
46:d8:71:3a:2e:5c:c3:5b:f2:4e:b3:65:02:8b:e5:
a9:ba:4f:92:66:a0:37:c0:f6:c1:f9:d0:d5:d5:88:
de:15:67:6f:a7:76:fe:86:be:17:b7:3d:21:81:b1:
a8:3f:a0:42:8d:01:18:70:29:63:ed:1d:24:35:9b:
70:8b:99:ba:ec:c7:cb:0f:29:1f:ce:90:69:1f:2d:
4a:cc:6f:58:ec:6a:f3:05:23:87:e1:98:46:b5:ce:
57:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DB:3C:7D:CC:B2:CF:B2:C8:D2:A0:56:32:9E:FC:1B:10:4B:66:65
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/fds8fcyyz7LI0qBWMp78GxBLZmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4001:9000::/37
Signature Algorithm: sha256WithRSAEncryption
37:7f:84:38:93:2a:34:d2:f5:e9:15:e1:db:1a:f1:ae:41:5a:
e7:d7:38:5a:c1:f5:51:ef:ba:b7:62:18:8d:cd:b8:a7:7b:63:
c6:dd:9d:2e:37:0a:30:2f:5f:15:a4:52:48:b1:c5:af:80:8f:
2d:8d:77:0c:66:6d:39:00:86:f0:a9:59:92:9a:64:a1:73:bf:
10:de:6e:95:63:b5:f8:34:ca:2d:66:05:27:f7:a9:8b:23:64:
60:fe:dd:2b:a0:81:13:f3:be:e1:40:86:b4:0e:c6:b2:a1:d6:
38:f6:fb:37:91:3c:26:c5:32:b4:7f:9d:83:9b:f3:f1:db:c4:
99:b2:36:d4:13:64:19:6c:00:e8:9c:45:5a:a6:58:fc:9b:15:
32:6d:ab:b9:c2:aa:c8:e8:96:2e:6e:ef:7c:cc:8d:50:79:0e:
31:2b:15:a3:97:ac:a3:a4:54:79:a6:25:f7:d6:e6:56:80:c0:
7a:4c:73:61:c5:c8:e0:be:96:ec:9f:2f:85:7f:d1:0b:e9:4c:
5e:bf:70:45:ff:fe:2d:36:35:b9:a0:fc:c1:3f:16:87:02:b5:
49:e2:a1:c1:5d:a6:d8:ef:d8:d3:7f:02:f9:e2:11:eb:35:fb:
d8:2d:1a:b1:62:fd:2b:8b:a2:59:2f:67:6f:03:e6:20:86:f3:
d4:d3:5c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:49 2026 by rpki-client