Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/piJSswQfIqs3HoYsozf8wWJQu_Y.roa
File: piJSswQfIqs3HoYsozf8wWJQu_Y.roa (raw, json)
Hash identifier: 1ovHBWqaD1eU80Df7k4Dvy2LhX6Hg1bDFw1LN2vMbtM=
Subject key identifier: A6:22:52:B3:04:1F:22:AB:37:1E:86:2C:A3:37:FC:C1:62:50:BB:F6
Certificate issuer: /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial: 01A013D88395714C62BC049357EAB0D22D86
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/piJSswQfIqs3HoYsozf8wWJQu_Y.roa
Signing time: Tue 18 Aug 2026 07:49:11 +0000
ROA not before: Tue 18 Aug 2026 07:49:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206495
IP address blocks: 2a0b:7c80:2::/48 maxlen: 48
2a0b:7c80:3::/48 maxlen: 48
2a0b:7c80:4::/48 maxlen: 48
2a0b:7c80:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:d8:83:95:71:4c:62:bc:04:93:57:ea:b0:d2:2d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Validity
Not Before: Aug 18 07:49:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a62252b3041f22ab371e862ca337fcc16250bbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:79:ee:39:ef:37:ff:fa:a3:c8:be:31:a2:
0b:0a:c4:28:1c:4c:9d:c0:77:c4:4b:77:b6:30:b4:
65:a2:63:d3:05:24:8d:a6:7b:38:c8:85:14:a9:81:
75:1f:6e:9a:22:bb:1e:c2:cc:ae:ee:05:b7:8c:f7:
71:51:8a:a7:00:a7:7a:80:c8:85:51:af:a4:d7:97:
63:5a:24:9a:58:73:6a:78:19:c8:2c:e0:c0:df:a2:
91:86:b4:55:ac:28:df:61:c5:d1:14:7f:f1:bb:ad:
62:8d:6c:c7:bc:ed:b8:65:b5:b4:af:96:3f:93:22:
30:b9:11:7a:31:f5:42:b8:87:4d:f2:ea:21:9f:26:
a5:ff:e7:bf:5c:cb:00:1d:97:8f:7a:b7:4b:66:17:
2e:86:ce:e3:d5:3c:56:ed:98:95:c3:74:b6:ec:38:
ab:be:8b:b2:fc:00:85:5e:4e:16:4d:3a:69:70:13:
6a:71:64:06:42:bf:6a:57:54:c7:c0:f0:b4:ee:88:
f7:77:f5:10:28:1c:8d:1e:84:a9:ea:e1:f4:ce:99:
1e:0c:31:65:e5:cf:d3:fd:d1:c8:f5:30:77:55:0b:
d8:18:96:5c:2c:4e:28:2a:e1:5e:e1:2b:10:d7:58:
e1:33:f8:0b:6e:c1:71:93:85:8b:ed:ff:84:9b:28:
26:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:22:52:B3:04:1F:22:AB:37:1E:86:2C:A3:37:FC:C1:62:50:BB:F6
X509v3 Authority Key Identifier:
keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/piJSswQfIqs3HoYsozf8wWJQu_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:7c80:2::-2a0b:7c80:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
20:50:45:d8:b8:1a:8a:ec:8e:48:b9:8a:f3:71:62:64:13:e3:
30:21:d5:ee:a0:cd:41:34:c7:a7:94:47:3f:bd:58:e3:93:a2:
b7:f5:01:2f:b2:f2:d7:60:14:50:b9:d5:03:88:2c:b2:68:09:
2e:06:0c:e0:80:16:1c:43:c7:42:90:bf:81:c7:d7:11:f9:d1:
84:38:60:64:fc:50:80:60:a8:e8:3f:14:7c:7d:60:87:99:da:
99:e3:f3:71:9a:7a:05:04:61:91:0d:9e:b3:b5:55:18:dc:29:
a4:a7:33:a6:70:48:7c:48:e2:16:e2:e2:ea:e9:f1:8f:a4:65:
16:81:71:79:12:7a:a6:6d:1e:e6:eb:ca:3e:2e:ca:bb:b6:ac:
6b:2e:f9:52:40:fe:7f:6b:70:0d:28:b8:1e:5f:28:91:35:81:
28:53:06:a9:76:7f:d1:1f:03:da:31:47:0f:c4:eb:9d:04:4e:
aa:8e:91:28:1f:11:93:fb:76:7d:7e:5c:ce:d4:78:67:95:12:
d3:f2:f1:6d:2e:65:2d:ad:b6:df:9c:bb:22:1a:2d:12:0c:9b:
ba:60:49:1e:50:a3:06:72:51:0e:97:e1:e4:01:1e:6e:21:a8:
17:64:f3:d3:8c:07:bf:e6:ee:7d:14:4a:39:6c:ef:40:86:80:
b6:22:4d:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 12 02:02:05 2026 by rpki-client