Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/p-WSA9KhkYSSOtbbM1c3do7TCKc.roa
File: p-WSA9KhkYSSOtbbM1c3do7TCKc.roa (raw, json)
Hash identifier: rQ+bNLeEkXsgaeff8oE/JfhsJJmP7fkVCvTrpWAQJss=
Subject key identifier: A7:E5:92:03:D2:A1:91:84:92:3A:D6:DB:33:57:37:76:8E:D3:08:A7
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A13F153F447E9A9E7FD0289C6D0035510A
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/p-WSA9KhkYSSOtbbM1c3do7TCKc.roa
Signing time: Thu 15 Oct 2026 10:21:59 +0000
ROA not before: Thu 15 Oct 2026 10:21:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a0e:4001:100::/40 maxlen: 128
2a0e:4001:1000::/36 maxlen: 128
2a0e:4001:2000::/36 maxlen: 36
2a0e:4001:5530::/44 maxlen: 128
2a0e:4001:d320::/44 maxlen: 128
2a10:2ec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:15:3f:44:7e:9a:9e:7f:d0:28:9c:6d:00:35:51:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Oct 15 10:21:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7e59203d2a19184923ad6db335737768ed308a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:d3:d7:76:3b:29:55:96:8d:d3:fd:a3:69:
87:d4:d5:8a:1b:7e:5c:13:56:c8:f3:54:7a:ba:ef:
5b:e2:f7:ec:60:e4:34:2c:5d:86:51:fc:a3:8f:0e:
d8:30:ee:81:88:40:4c:30:92:c9:8d:77:67:60:bb:
b2:81:68:ae:dd:a0:65:40:ec:15:47:53:c9:40:5b:
b3:a7:b9:d3:24:1f:3b:61:95:a2:e3:df:01:f7:10:
c0:81:a1:5f:0e:3d:56:ac:c3:d5:94:b7:cd:f4:18:
bc:27:f9:22:16:38:62:fe:f1:46:5b:8b:d9:7d:63:
51:e7:98:c1:d1:df:df:82:60:2b:3b:ce:f8:78:e2:
4a:59:92:ef:26:1d:6d:4a:07:05:24:5e:d5:10:3b:
fb:f8:07:48:7c:5d:23:6c:7f:ab:08:39:af:bd:fb:
61:94:0a:d6:b3:3a:68:8c:e8:bf:9c:52:0d:c0:62:
1c:bd:9f:9c:f6:c2:c4:fe:eb:fd:ae:ec:4e:7b:c2:
fb:49:23:04:9a:51:53:2e:cf:06:45:5c:08:0d:cf:
e3:ac:83:7c:78:62:75:30:e2:41:1d:dc:b5:ec:a4:
fc:9e:d6:8e:c0:8f:a8:19:9d:f4:36:e5:06:79:cf:
85:6a:3d:74:93:51:e7:bc:4e:47:27:6e:5d:60:78:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E5:92:03:D2:A1:91:84:92:3A:D6:DB:33:57:37:76:8E:D3:08:A7
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/p-WSA9KhkYSSOtbbM1c3do7TCKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4001:100::/40
2a0e:4001:1000::-2a0e:4001:2fff:ffff:ffff:ffff:ffff:ffff
2a0e:4001:5530::/44
2a0e:4001:d320::/44
2a10:2ec0::/29
Signature Algorithm: sha256WithRSAEncryption
69:9d:0b:74:d5:6a:04:d9:44:1f:32:c4:31:f7:bf:a1:f4:88:
1f:90:06:da:e7:05:67:5d:2a:71:fd:86:7a:65:a1:e5:38:05:
8e:fc:6f:fe:ed:26:bc:03:34:6e:97:e8:cf:8f:cf:08:40:b2:
29:9e:4c:36:90:a6:67:75:8d:29:43:51:7f:60:f9:35:0e:57:
d7:a5:f2:1f:64:2c:e2:63:87:e8:a1:14:53:3c:30:fa:a0:e6:
10:09:7a:f4:11:46:34:7c:5d:c8:d6:56:36:13:eb:7c:ba:4f:
95:3e:86:d3:13:7a:ea:b6:44:62:42:cf:64:48:6b:b9:15:e8:
86:2c:15:44:e4:94:fe:98:69:a6:a4:de:f9:c6:ff:c9:68:2e:
47:29:3c:ce:30:0d:56:a9:40:88:4f:55:c3:ec:f2:cd:98:14:
e0:7f:e7:45:45:35:23:c7:10:00:f4:87:f8:6a:ca:94:8a:59:
69:21:9c:94:5c:1b:1f:85:84:7a:60:68:5c:ff:ba:55:4e:80:
01:e0:0e:90:66:60:22:e6:f3:9a:21:79:20:03:43:e3:8d:4a:
a6:2a:35:52:8c:a9:5b:2a:f3:0e:d0:97:ee:ef:96:b9:33:50:
f1:ef:7f:db:e5:57:1c:f3:95:07:8b:a7:09:8b:3c:5f:ae:c3:
03:73:1a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 02:43:04 2026 by rpki-client