Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/68b014-c779-464b-a4d5-578ce19f7e90/1/R1BZJ0o1UCvlW73kX0btm80Oons.roa
File: R1BZJ0o1UCvlW73kX0btm80Oons.roa (raw, json)
Hash identifier: O23x5RvVIFRhlXNBYcxF0TF5rR7lEM3CrE1vW8YAqV0=
Subject key identifier: 47:50:59:27:4A:35:50:2B:E5:5B:BD:E4:5F:46:ED:9B:CD:0E:A2:7B
Certificate issuer: /CN=c355b258cb67f03659a2c8673ae8197f68956e39
Certificate serial: 01A0FD16E3BE23CCECE43918670647E2A84E
Authority key identifier: C3:55:B2:58:CB:67:F0:36:59:A2:C8:67:3A:E8:19:7F:68:95:6E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1WyWMtn8DZZoshnOugZf2iVbjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/68b014-c779-464b-a4d5-578ce19f7e90/1/R1BZJ0o1UCvlW73kX0btm80Oons.roa
Signing time: Fri 02 Oct 2026 14:48:50 +0000
ROA not before: Fri 02 Oct 2026 14:48:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a0e:6980:3e8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/68b014-c779-464b-a4d5-578ce19f7e90/1/w1WyWMtn8DZZoshnOugZf2iVbjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/68b014-c779-464b-a4d5-578ce19f7e90/1/w1WyWMtn8DZZoshnOugZf2iVbjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/w1WyWMtn8DZZoshnOugZf2iVbjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:16:e3:be:23:cc:ec:e4:39:18:67:06:47:e2:a8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c355b258cb67f03659a2c8673ae8197f68956e39
Validity
Not Before: Oct 2 14:48:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=475059274a35502be55bbde45f46ed9bcd0ea27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:cc:57:05:87:0a:02:2a:12:5a:22:dd:6b:
0c:ba:a0:11:f7:5d:af:39:04:01:37:b1:7c:a6:d0:
43:cd:5d:46:2c:5f:38:33:cf:73:da:f4:c8:a4:12:
69:e3:1a:0c:37:60:7e:3f:a0:db:2d:36:76:af:b3:
92:ec:61:21:00:19:89:80:b7:70:bd:0b:77:15:5f:
5e:40:57:af:73:16:33:d5:44:54:77:ae:7d:64:85:
d0:82:ef:24:40:3e:0e:b1:a4:a5:1c:36:e9:f7:f9:
98:0e:86:98:b8:60:06:70:b5:e0:0b:35:c8:3d:89:
01:f3:f8:01:b5:5b:12:5c:27:df:9e:9e:29:cd:7a:
d3:4e:34:62:0d:6a:56:88:15:12:27:9b:ba:91:e8:
4c:08:1e:17:b5:63:44:ac:d1:bf:a2:e3:2d:1d:1a:
49:36:47:25:f0:22:8d:02:5a:4b:9e:6e:68:c2:45:
a2:f8:b3:8b:8a:bf:28:00:55:37:40:ec:7e:f6:04:
14:2a:57:66:5a:94:6b:21:76:9f:db:91:4b:1c:f3:
6a:61:da:e2:d3:06:6c:41:9f:93:ed:48:93:f2:df:
30:3b:ac:8d:0f:88:40:fe:0a:0d:fe:a8:e3:70:fe:
c7:c8:28:70:33:fe:82:78:7d:bd:71:a9:ff:19:9f:
8a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:50:59:27:4A:35:50:2B:E5:5B:BD:E4:5F:46:ED:9B:CD:0E:A2:7B
X509v3 Authority Key Identifier:
keyid:C3:55:B2:58:CB:67:F0:36:59:A2:C8:67:3A:E8:19:7F:68:95:6E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1WyWMtn8DZZoshnOugZf2iVbjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/68b014-c779-464b-a4d5-578ce19f7e90/1/R1BZJ0o1UCvlW73kX0btm80Oons.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/68b014-c779-464b-a4d5-578ce19f7e90/1/w1WyWMtn8DZZoshnOugZf2iVbjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:6980:3e8::/48
Signature Algorithm: sha256WithRSAEncryption
6d:dc:65:05:38:35:93:cd:10:6a:25:70:04:e2:21:02:e6:f7:
c5:d5:7d:2a:f0:fc:6a:a9:b2:6a:69:b0:2d:3d:99:21:ac:6c:
9d:bc:92:df:ff:df:96:b1:84:85:8b:89:90:61:5f:49:5c:1b:
01:3d:c4:d8:0c:52:99:bd:59:40:d3:54:1d:01:07:c6:cf:6d:
0e:de:48:e7:2c:bb:7d:5f:e2:ea:b9:e4:2e:33:9e:0d:53:c7:
d3:9f:74:0b:21:ec:17:21:e9:a6:c0:52:87:89:fd:f7:a4:5b:
b1:e6:25:46:40:0a:02:93:9e:47:2b:28:cd:48:5f:dd:62:0a:
e0:3b:87:2f:96:3b:35:9d:7a:12:61:9d:5f:14:1b:0f:0b:3b:
9c:c1:5f:b8:78:24:28:38:55:30:c6:0c:78:5f:90:28:3d:85:
04:69:67:48:6d:a5:92:67:57:ff:e2:f0:66:32:a4:58:4d:80:
a0:d2:db:e2:aa:dc:d8:e7:49:98:44:a5:e6:8f:0b:7f:da:94:
a0:be:7c:33:b6:38:8e:29:01:13:d2:75:4b:b4:58:4b:11:74:
56:1c:06:6e:89:16:bb:4a:8b:d1:ce:12:3b:38:63:cf:2d:a6:
99:e6:f0:98:3e:a1:3b:88:b3:59:f1:9f:84:c9:16:cf:b8:da:
12:02:0f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:48:38 2026 by rpki-client