Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/VlV4i9ZGwi9P5sKFGFky4nRxPs0.roa
File: VlV4i9ZGwi9P5sKFGFky4nRxPs0.roa (raw, json)
Hash identifier: +RPRUuuJFYC4pSxbAuD8zGuQxc2Kb28z2+9xpvA2o6o=
Subject key identifier: 56:55:78:8B:D6:46:C2:2F:4F:E6:C2:85:18:59:32:E2:74:71:3E:CD
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 01A14FD7F215FE8B1B2C43B0F07FEEEB08A8
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/VlV4i9ZGwi9P5sKFGFky4nRxPs0.roa
Signing time: Sun 18 Oct 2026 16:28:34 +0000
ROA not before: Sun 18 Oct 2026 16:28:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206540
IP address blocks: 2a13:a5c7:1330::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:d7:f2:15:fe:8b:1b:2c:43:b0:f0:7f:ee:eb:08:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Oct 18 16:28:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5655788bd646c22f4fe6c285185932e274713ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d5:e8:c5:cd:a9:1a:ca:be:63:7b:9f:19:39:
21:c7:32:38:32:a2:45:37:af:89:4b:12:6f:04:2b:
48:2b:6b:8e:4e:4e:29:bc:7d:11:c8:d4:b7:cd:75:
47:28:38:25:83:18:35:be:94:e4:c8:68:c4:67:d2:
12:61:de:86:ec:1e:ff:c0:48:44:ab:e8:fd:1e:02:
0a:ad:f0:2b:54:4b:99:45:01:1a:4f:b7:6a:5b:93:
2f:51:a6:90:dd:d1:23:5c:99:c2:27:6c:d4:0e:4b:
78:da:96:b8:21:a0:2f:52:4e:c7:b0:a2:89:df:02:
ce:f5:45:d9:42:2b:2e:fd:eb:7f:83:f9:29:c4:13:
62:7c:c0:02:9c:cf:7c:cb:a9:dd:d2:8d:df:6b:12:
63:69:05:7c:1a:54:6e:d3:8e:76:43:61:1d:90:47:
df:8c:5a:cc:76:5f:b3:46:06:4f:7c:f5:b4:9e:1f:
c9:ea:23:14:f6:5d:b3:ef:43:a6:0d:5a:a9:01:1c:
e0:00:f3:33:3f:ec:75:6f:68:61:7a:eb:ce:a4:08:
f6:22:80:6b:3f:dc:42:34:0e:4c:2a:07:87:9b:00:
9a:ce:27:d8:7d:08:9b:58:61:62:15:42:18:52:9d:
ae:fa:55:d4:6f:59:23:70:cb:ed:e4:3a:3c:c1:b6:
de:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:55:78:8B:D6:46:C2:2F:4F:E6:C2:85:18:59:32:E2:74:71:3E:CD
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/VlV4i9ZGwi9P5sKFGFky4nRxPs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:1330::/44
Signature Algorithm: sha256WithRSAEncryption
33:53:37:d8:36:96:1f:83:7f:55:79:39:41:3d:d5:b8:34:f4:
1e:83:1a:06:dc:26:43:ad:88:02:09:32:0f:2e:cc:c9:ee:64:
39:de:3a:58:d0:78:04:b3:94:00:88:98:53:b1:68:7f:33:fa:
a9:53:da:49:d5:1a:75:e9:10:bc:ae:0c:4b:ac:16:74:ee:2f:
7f:7d:e6:de:78:4c:62:3b:a9:22:35:52:09:2c:a0:ae:37:f3:
5b:16:d8:42:ca:13:25:07:ca:b7:e6:f3:60:80:b1:f9:b2:06:
3b:55:ce:48:c6:cb:57:e9:cc:75:f3:01:a8:2f:b0:2d:8d:db:
83:ac:cd:bd:c1:72:fa:97:eb:62:c3:64:70:2f:17:7d:d3:f4:
5b:ba:17:ba:37:98:07:b0:05:c1:94:ba:d9:86:12:04:ca:d9:
46:d3:3d:1f:f2:99:9c:ea:7c:6b:00:26:a6:10:6d:28:60:29:
b4:f0:58:72:4d:3e:f8:99:02:04:f3:0a:31:81:4e:09:58:4f:
17:02:85:15:ff:78:fe:78:6e:b9:82:2f:08:3e:5e:41:cd:80:
83:b8:26:2a:d4:10:69:d9:bc:2f:4c:08:df:c6:51:fa:c6:b5:
68:dd:ee:8e:eb:57:8c:02:49:bf:37:76:02:ea:fb:bb:dc:d9:
69:47:33:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:24:32 2026 by rpki-client