Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/xkCFgW6AhRTzlPFYxIdYyO_Kfgc.roa
File: xkCFgW6AhRTzlPFYxIdYyO_Kfgc.roa (raw, json)
Hash identifier: ujOmUW3uo+zC741aDRMzurWVfgMAgyR64bWgpanO+zs=
Subject key identifier: C6:40:85:81:6E:80:85:14:F3:94:F1:58:C4:87:58:C8:EF:CA:7E:07
Certificate issuer: /CN=3b53867284132eeccd56e6b155cf7f627d264f40
Certificate serial: 01A0A974ED2AE04DD7C9060D6156014C66AD
Authority key identifier: 3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/xkCFgW6AhRTzlPFYxIdYyO_Kfgc.roa
Signing time: Wed 16 Sep 2026 09:03:27 +0000
ROA not before: Wed 16 Sep 2026 09:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215382
IP address blocks: 2a0a:3e45:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:74:ed:2a:e0:4d:d7:c9:06:0d:61:56:01:4c:66:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b53867284132eeccd56e6b155cf7f627d264f40
Validity
Not Before: Sep 16 09:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c64085816e808514f394f158c48758c8efca7e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:f7:94:2b:d3:a6:ad:0c:ac:13:d5:a6:cb:
8f:a0:ac:ef:af:2f:e1:f5:99:8b:6b:80:62:0f:87:
a2:a9:bb:76:ef:59:a9:26:29:d4:9c:9a:bd:fe:fe:
75:fb:09:49:df:21:cc:53:81:9f:71:f7:3a:e5:96:
d6:94:dc:8b:80:db:d2:34:41:dd:44:47:e8:7f:d4:
37:58:8e:f7:08:6d:09:e6:6e:e3:3b:93:34:fc:00:
22:37:e3:9e:3c:f1:c2:72:b5:08:9c:2c:6a:11:84:
5d:27:4a:94:5b:44:6f:d8:32:7f:b9:61:98:f3:6f:
04:5a:fa:bb:bd:29:9c:c6:29:ad:74:ed:f5:42:cd:
a6:0d:a0:38:26:1a:a5:89:f4:3f:7f:1d:8f:73:ef:
da:f8:b7:2c:b0:f8:82:a6:86:a2:b0:d8:0a:a1:18:
c4:3a:86:27:05:cf:68:ed:1d:1b:bf:a1:ed:a0:99:
e4:68:36:28:5e:fd:94:ee:ef:cf:7e:2a:8d:f0:9f:
6b:0c:69:c0:ad:e4:d1:3f:cb:3a:47:9a:ba:17:d5:
24:08:89:c5:82:83:d8:2f:06:e6:3d:18:a1:74:26:
43:0f:0e:23:a2:ac:51:63:3f:86:d4:3e:90:b2:cc:
d2:cd:11:e6:6b:f9:6b:99:5c:e7:d1:f7:3e:32:13:
4b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:40:85:81:6E:80:85:14:F3:94:F1:58:C4:87:58:C8:EF:CA:7E:07
X509v3 Authority Key Identifier:
keyid:3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/xkCFgW6AhRTzlPFYxIdYyO_Kfgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:3e45:b000::/40
Signature Algorithm: sha256WithRSAEncryption
95:44:4c:c0:14:48:f9:e6:19:3d:7a:e0:ba:37:18:99:09:d8:
d6:f9:a4:12:2a:91:87:67:b9:08:29:e0:a9:7b:91:a7:0d:bd:
02:7d:77:63:d5:ec:b8:34:8c:20:a1:a8:17:8d:ed:95:bb:e5:
3c:2a:d1:d7:cb:7e:5c:17:59:92:6b:e5:18:e0:08:77:41:6e:
3b:41:74:f3:ad:4c:1f:e7:f3:df:b4:a8:75:94:d4:02:c1:09:
29:87:86:ad:b3:68:8b:09:fd:90:f5:e3:19:f2:04:03:18:4a:
72:d6:cc:e3:d8:9f:b3:95:1c:c4:4e:b7:18:a7:17:b8:0d:c7:
72:7d:e1:61:58:89:24:be:ca:04:4f:2b:15:3d:ba:78:13:40:
ac:97:c9:96:db:4e:f0:6a:10:c6:ef:08:4b:ed:45:fe:50:e3:
9b:0d:a0:1d:ef:9e:ae:b8:30:03:23:9b:ab:4f:67:6a:0e:17:
f4:8a:58:08:01:d0:66:91:48:88:46:25:f9:bf:61:6b:cd:da:
d0:27:84:4e:70:a8:f5:85:fc:a3:72:0f:9f:70:44:4e:5b:e9:
81:23:0a:2f:db:de:8d:0e:96:a9:8b:91:1f:70:59:22:78:f2:
d3:b7:55:28:a7:85:3e:d5:47:e8:42:6e:86:3a:d7:c6:67:34:
32:b7:95:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:34:47 2026 by rpki-client