Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/ADqOf27SLPwwto-ocjpqEJw2IBQ.roa
File: ADqOf27SLPwwto-ocjpqEJw2IBQ.roa (raw, json)
Hash identifier: 02wXRVyX5qgq4n1cyEf0Py4Rh/FGrWnnS89Dg9FX4vA=
Subject key identifier: 00:3A:8E:7F:6E:D2:2C:FC:30:B6:8F:A8:72:3A:6A:10:9C:36:20:14
Certificate issuer: /CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Certificate serial: 01A1582A29A008121B7E361BDCFE0362DBFD
Authority key identifier: 38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/ADqOf27SLPwwto-ocjpqEJw2IBQ.roa
Signing time: Tue 20 Oct 2026 07:15:20 +0000
ROA not before: Tue 20 Oct 2026 07:15:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214944
IP address blocks: 2a13:3f40:cafe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:2a:29:a0:08:12:1b:7e:36:1b:dc:fe:03:62:db:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Validity
Not Before: Oct 20 07:15:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=003a8e7f6ed22cfc30b68fa8723a6a109c362014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:e7:79:ae:02:88:71:f9:23:8d:ae:c9:f7:
e8:c3:e0:1d:53:ef:ea:df:c0:27:bd:35:b4:bb:d4:
91:ee:4a:dd:80:ed:03:a2:1d:a1:94:d3:28:15:1a:
77:be:37:df:71:e7:8b:6f:c9:3b:87:b2:4c:b0:b1:
75:0e:06:03:b7:57:45:61:1d:12:4f:8b:33:88:aa:
3d:bb:4b:14:62:d7:1c:fa:ac:8f:9b:cb:bf:39:7f:
91:05:14:07:ff:f3:ea:db:4e:d8:09:59:4f:ad:49:
6c:30:c9:2f:50:e5:d0:e2:08:78:06:79:3b:9a:d1:
d1:63:31:f5:ae:6b:43:cb:13:76:ce:5a:bc:e1:b5:
0c:d0:89:d6:95:16:1e:34:e0:ae:7c:55:54:e7:6c:
33:b3:ff:9b:06:d4:1e:90:fd:01:27:40:81:a9:a1:
c4:7c:3f:5d:71:dc:4b:f4:a3:a3:73:bf:8b:8e:65:
7f:ba:43:bc:e7:10:d5:06:01:62:8e:ee:ce:15:f6:
06:e9:07:3f:1f:99:5d:8c:9f:e0:f9:a7:61:9d:b1:
70:27:74:a1:6a:6e:b5:c7:23:a4:ce:92:2d:30:de:
08:27:64:fe:ca:8f:93:f0:36:1a:54:28:3a:0f:0d:
57:de:85:a9:74:2f:ec:74:f9:66:4b:e2:23:d0:47:
6d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3A:8E:7F:6E:D2:2C:FC:30:B6:8F:A8:72:3A:6A:10:9C:36:20:14
X509v3 Authority Key Identifier:
keyid:38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/ADqOf27SLPwwto-ocjpqEJw2IBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3f40:cafe::/48
Signature Algorithm: sha256WithRSAEncryption
4c:46:88:a1:7f:fb:c3:45:db:a0:7b:75:e1:8f:0d:33:ed:26:
7e:d2:c0:e9:e3:06:5d:56:75:59:44:70:24:ab:5b:cb:d5:6b:
12:65:bb:57:57:45:34:b8:e8:54:01:c1:3b:f5:fb:9c:cd:08:
ec:0e:ea:8d:a0:26:45:36:bc:b8:d5:db:d8:7c:95:ce:86:98:
8c:ec:d7:28:ed:99:97:e6:32:71:4b:f9:86:d0:b4:d6:21:35:
61:c0:f1:b3:50:7f:2c:1d:98:33:a1:fa:4a:65:ea:9f:23:22:
71:ae:72:48:e1:ab:e2:25:cb:24:13:1c:b2:c3:e3:98:c1:cb:
bc:81:6a:a5:96:f0:89:52:15:1d:1e:49:7b:42:bf:7f:6d:ea:
0d:05:66:14:c6:35:16:de:2c:8a:2e:eb:9f:a8:8c:61:6b:56:
38:92:93:cc:30:a7:3b:bb:c6:6d:2e:af:ff:59:61:81:7f:39:
91:bd:04:68:94:c6:c9:f3:d0:78:44:9e:80:96:fa:1e:e8:24:
2a:2d:53:ff:de:8f:2b:38:99:9e:63:03:e8:12:72:7a:1d:aa:
35:c0:e4:35:7f:3a:fb:d2:5e:8c:ff:da:c9:c1:ee:5f:2a:94:
91:dd:53:98:d6:ed:b7:b1:be:a1:0c:d9:15:24:00:7f:97:3b:
6d:ff:4e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:14 2026 by rpki-client