Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/h2ZUA9TwJrpWxOXA3lTyOY9Tw_s.roa
File: h2ZUA9TwJrpWxOXA3lTyOY9Tw_s.roa (raw, json)
Hash identifier: 5SLVRWOGvDLADbtyYHIxEzFzsBdemdaARz1cRFIMQYQ=
Subject key identifier: 87:66:54:03:D4:F0:26:BA:56:C4:E5:C0:DE:54:F2:39:8F:53:C3:FB
Certificate issuer: /CN=3c138f36c0960d8c4d6361e7ced4c1598e61ed5a
Certificate serial: 01A0001AE2D1C5C8F861AE64F612A7F7410C
Authority key identifier: 3C:13:8F:36:C0:96:0D:8C:4D:63:61:E7:CE:D4:C1:59:8E:61:ED:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBOPNsCWDYxNY2HnztTBWY5h7Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/h2ZUA9TwJrpWxOXA3lTyOY9Tw_s.roa
Signing time: Fri 14 Aug 2026 11:49:16 +0000
ROA not before: Fri 14 Aug 2026 11:49:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211854
IP address blocks: 2001:678:1088::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBOPNsCWDYxNY2HnztTBWY5h7Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:1a:e2:d1:c5:c8:f8:61:ae:64:f6:12:a7:f7:41:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c138f36c0960d8c4d6361e7ced4c1598e61ed5a
Validity
Not Before: Aug 14 11:49:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87665403d4f026ba56c4e5c0de54f2398f53c3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b3:4f:6c:c8:f4:21:39:a3:89:0d:e9:a3:fb:
92:6f:46:d5:5f:2b:41:ed:5e:57:d6:0b:b2:5a:16:
70:49:19:16:a6:c8:8c:6f:2a:cf:54:1c:d9:b6:e6:
c3:f4:ce:fb:0d:8b:bf:a1:bd:e5:65:73:c6:fd:4d:
3d:09:88:e1:f2:aa:18:a2:42:a1:55:47:36:36:a9:
5a:d0:a5:e0:a6:be:fa:31:b5:9a:96:c2:68:71:f7:
5b:bf:92:1e:4f:08:8a:37:6b:b6:da:9f:c3:f9:02:
dd:2c:34:b7:71:ec:ce:1f:c2:92:91:d7:dd:98:53:
94:9b:02:cb:72:68:6c:47:02:0c:54:fd:18:39:bd:
01:e6:39:4f:1a:51:35:17:11:c4:66:66:b4:11:ff:
8f:4c:df:0f:a5:7f:6d:da:30:55:b7:fa:8e:94:b0:
9b:5c:91:4b:34:fe:69:3c:74:1e:c6:c0:c8:1f:6e:
0a:0a:3a:5e:f4:26:6c:23:6a:6a:a9:66:e7:93:4c:
f1:71:7c:c5:2b:99:82:df:a3:f2:5c:1e:d7:d2:0c:
c1:87:da:84:d8:60:23:69:e7:0c:5c:b4:fe:1e:36:
78:f0:86:f8:3c:01:20:0c:95:bd:6f:b5:fc:01:bf:
69:30:f5:77:2b:82:92:de:e8:ea:25:31:41:6c:2b:
5b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:66:54:03:D4:F0:26:BA:56:C4:E5:C0:DE:54:F2:39:8F:53:C3:FB
X509v3 Authority Key Identifier:
keyid:3C:13:8F:36:C0:96:0D:8C:4D:63:61:E7:CE:D4:C1:59:8E:61:ED:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBOPNsCWDYxNY2HnztTBWY5h7Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/h2ZUA9TwJrpWxOXA3lTyOY9Tw_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6cc7d7-3b5a-4dea-86c1-93c59420c931/1/PBOPNsCWDYxNY2HnztTBWY5h7Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1088::/48
Signature Algorithm: sha256WithRSAEncryption
84:5c:e3:28:78:41:d0:e3:a2:fd:a2:22:a1:ed:77:b0:27:a5:
1d:3c:bc:70:e6:04:b5:86:54:8d:6a:44:95:cc:87:fc:d6:52:
42:82:83:9a:70:e4:83:02:00:1c:03:2d:c2:57:05:15:bd:9f:
1e:f4:20:0b:ba:a4:2e:cd:b5:83:51:bc:e5:91:ae:6f:68:6c:
ab:d0:81:f6:20:17:5b:d2:8a:6e:8d:43:b2:ad:30:7e:f9:65:
62:18:e9:cb:f5:77:90:06:84:a0:28:ee:7d:fa:ac:68:94:8c:
22:47:6c:74:f4:23:4e:8d:da:34:d7:f0:fa:49:ce:98:8d:ac:
23:7f:0c:c6:bf:ec:55:d8:e2:eb:66:30:d0:74:ff:70:db:f6:
5a:bd:0f:b4:d9:91:3b:64:2d:97:4e:8e:c2:c9:30:9a:07:b5:
4b:af:fa:22:bc:54:80:d3:3b:52:9c:e4:91:31:5b:05:95:86:
27:f2:0c:e2:75:6a:bd:33:e1:71:b1:d9:bd:30:20:ab:91:16:
ca:50:fc:aa:89:7f:61:fd:0b:46:20:da:38:e0:2d:d0:f8:02:
41:cf:51:31:91:f7:8b:f0:b1:36:8b:10:1a:fc:03:39:64:51:
c1:e1:4b:12:22:48:60:70:ec:03:2d:6a:02:31:68:f8:1e:3a:
2f:82:79:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 06:48:21 2026 by rpki-client