Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/mAkRf6Otg5T04BVS8gpCkWHV_L8.roa
File: mAkRf6Otg5T04BVS8gpCkWHV_L8.roa (raw, json)
Hash identifier: Q3gRNt3Wo1xjzYCeCwMnXykTpwVUVPWG3O2EM2KOpco=
Subject key identifier: 98:09:11:7F:A3:AD:83:94:F4:E0:15:52:F2:0A:42:91:61:D5:FC:BF
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A10B22908FA6456413F95A3E746F4A91C1
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/mAkRf6Otg5T04BVS8gpCkWHV_L8.roa
Signing time: Mon 05 Oct 2026 08:16:16 +0000
ROA not before: Mon 05 Oct 2026 08:16:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42375
IP address blocks: 2a0a:cd40::/29 maxlen: 29
2a0b:3c00::/29 maxlen: 29
2a11:59c0::/29 maxlen: 29
2a11:5ac0::/29 maxlen: 29
2a11:70c0::/29 maxlen: 29
2a11:8340::/29 maxlen: 29
2a11:8640::/29 maxlen: 29
2a11:9c40::/29 maxlen: 29
2a11:a8c0::/29 maxlen: 29
2a11:d7c0::/29 maxlen: 29
2a11:f540::/29 maxlen: 29
2a12:4c0::/29 maxlen: 29
2a12:1f00::/29 maxlen: 29
2a12:4200::/29 maxlen: 29
2a12:4600::/29 maxlen: 29
2a12:6800::/29 maxlen: 29
2a12:9800::/29 maxlen: 29
2a12:be80::/29 maxlen: 29
2a12:db80::/29 maxlen: 29
2a12:e980::/29 maxlen: 29
2a12:f880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:22:90:8f:a6:45:64:13:f9:5a:3e:74:6f:4a:91:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Oct 5 08:16:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9809117fa3ad8394f4e01552f20a429161d5fcbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:32:57:06:e6:7a:80:2b:06:6b:96:2f:e9:
8c:21:76:ac:46:b1:02:f9:eb:e8:03:19:3e:b0:3d:
f7:ff:42:e0:b8:72:ec:50:9b:26:38:b2:68:d8:9e:
69:fc:4e:86:8e:62:a8:02:7a:7a:f5:99:03:d6:c1:
d8:08:d2:fb:88:5c:8d:ed:c5:24:bf:ed:a0:05:e6:
30:6f:9e:17:e7:07:30:9b:35:8a:13:c8:01:66:73:
44:25:15:c7:f7:d7:4d:36:3a:dd:6f:07:ed:31:dd:
2e:d0:69:db:56:0d:29:e6:15:72:25:52:3f:0d:f4:
02:ac:44:28:7b:4b:ef:15:ed:9b:23:08:7f:c1:9c:
70:c2:d5:26:f1:9a:11:c3:af:6f:c3:d1:0c:c2:fc:
16:6f:18:d0:88:b7:a0:a3:b5:9c:a3:ed:c4:96:3e:
3b:27:3a:0a:7b:d4:ac:27:60:7a:c9:3e:dd:ad:ae:
2e:78:3b:e6:e5:79:d6:15:77:8d:b0:80:2e:d4:92:
f2:ad:55:06:19:ef:cf:f3:d2:54:d8:9a:d2:fc:c7:
f4:4e:99:c4:5a:18:84:85:73:25:24:2a:ca:e0:f9:
8d:89:dc:25:51:a5:99:e8:64:6b:28:80:38:3a:e3:
91:f8:96:7a:77:a1:fe:9b:02:a6:38:28:36:4a:3f:
9c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:09:11:7F:A3:AD:83:94:F4:E0:15:52:F2:0A:42:91:61:D5:FC:BF
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/mAkRf6Otg5T04BVS8gpCkWHV_L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:cd40::/29
2a0b:3c00::/29
2a11:59c0::/29
2a11:5ac0::/29
2a11:70c0::/29
2a11:8340::/29
2a11:8640::/29
2a11:9c40::/29
2a11:a8c0::/29
2a11:d7c0::/29
2a11:f540::/29
2a12:4c0::/29
2a12:1f00::/29
2a12:4200::/29
2a12:4600::/29
2a12:6800::/29
2a12:9800::/29
2a12:be80::/29
2a12:db80::/29
2a12:e980::/29
2a12:f880::/29
Signature Algorithm: sha256WithRSAEncryption
01:6e:79:d1:20:53:b8:f3:49:08:16:34:66:a2:40:8c:54:75:
af:78:71:22:27:67:22:9b:e3:99:84:2d:96:aa:de:2b:f7:d7:
4a:35:31:0e:59:f1:ac:e6:12:de:ac:00:9e:a5:5a:ab:5c:7d:
96:c8:b8:0e:08:18:d2:17:55:36:37:99:25:ca:92:fb:b4:66:
2e:4b:0d:0e:5e:29:91:64:90:d2:3b:47:4f:fa:0f:22:60:0e:
5c:7e:2e:0a:5f:57:0c:e7:d2:58:64:00:27:8c:a1:cb:f7:52:
11:a6:b3:5d:e0:fa:cb:fd:f2:ab:a7:93:88:85:ef:70:c2:51:
5d:cf:ac:02:2c:7a:86:9c:0c:24:c9:05:7e:83:06:02:7f:d6:
bf:fb:a1:4d:5f:2b:dd:57:25:67:47:e1:c5:6a:28:07:7e:ee:
a9:3c:12:47:47:0f:26:a5:f6:bf:9c:4c:73:86:1c:9e:5f:70:
c2:62:9f:12:6d:59:41:a6:6e:a2:0d:fa:bb:b8:10:d7:49:f1:
df:4c:c9:fe:ea:46:b1:f3:bf:87:04:98:c5:31:e5:2b:4c:5e:
f3:4d:23:84:1f:dc:88:77:6f:b1:a6:22:4b:b9:cf:df:21:4f:
f8:b7:40:11:bb:b4:e6:80:58:ff:d6:95:62:9b:eb:22:04:24:
14:0a:71:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:12:29 2026 by rpki-client