Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DSYDR6RvLWAhuVXC_QvIxS22nj8.roa
File: DSYDR6RvLWAhuVXC_QvIxS22nj8.roa (raw, json)
Hash identifier: oU+hp+2JJJ7jPhRySMnSQBZ4yG0qR2XROVsgHsfYhnQ=
Subject key identifier: 0D:26:03:47:A4:6F:2D:60:21:B9:55:C2:FD:0B:C8:C5:2D:B6:9E:3F
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A1779795FF51D408E70DACD75211F5396A
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DSYDR6RvLWAhuVXC_QvIxS22nj8.roa
Signing time: Mon 26 Oct 2026 09:43:05 +0000
ROA not before: Mon 26 Oct 2026 09:43:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204628
IP address blocks: 2001:4030::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:97:95:ff:51:d4:08:e7:0d:ac:d7:52:11:f5:39:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Oct 26 09:43:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d260347a46f2d6021b955c2fd0bc8c52db69e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2e:7e:b8:7d:6c:74:76:65:a0:74:71:de:7a:
db:31:6f:a6:a2:77:45:2f:c7:33:9b:d4:b1:27:8d:
d3:3e:06:ed:2b:3b:2c:93:06:fa:d2:f6:95:36:cf:
75:a2:52:6a:bb:bf:8a:43:d6:56:e7:41:78:8e:c4:
d9:f7:07:a8:5f:e6:e9:b6:44:8a:0e:33:18:2c:2e:
6b:5b:20:1a:62:47:b8:f9:9d:b1:f7:ee:a6:a6:c9:
5d:22:80:ac:38:2f:31:22:ee:35:bb:8b:fa:54:1f:
41:cf:b8:85:cf:0f:78:66:04:4a:42:c7:cf:f1:20:
11:e5:15:f2:5b:e4:6b:69:eb:7e:df:80:58:e6:47:
40:a3:2b:f1:86:56:ab:78:ae:98:51:61:74:84:a8:
c0:13:29:97:ff:fd:3d:a9:ac:fb:fa:78:44:c9:ab:
1c:51:94:ff:04:f0:d1:57:ce:d9:fc:11:f3:d3:5f:
2e:02:b6:1e:9d:9e:40:1f:0c:68:18:be:f5:c5:f8:
48:18:64:5c:3d:50:9f:24:2f:6a:81:a5:69:e5:4f:
93:20:7d:0b:6e:93:4c:77:f7:74:3f:1c:79:39:9c:
46:67:a6:7c:ec:7b:60:60:9c:c1:4a:e6:34:9f:0e:
de:bf:2d:22:5d:fe:f2:63:38:8f:83:18:10:d8:8e:
38:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:26:03:47:A4:6F:2D:60:21:B9:55:C2:FD:0B:C8:C5:2D:B6:9E:3F
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DSYDR6RvLWAhuVXC_QvIxS22nj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4030::/33
Signature Algorithm: sha256WithRSAEncryption
55:6c:5a:dd:b9:31:4d:94:c7:c6:02:6b:13:33:41:8a:44:46:
fa:e4:92:09:59:d6:08:61:42:7b:29:e0:81:f5:1e:93:8f:0a:
08:98:cb:0c:a3:16:3d:51:5e:83:99:ff:09:21:2e:17:05:48:
5b:7a:74:a4:bf:26:2f:6c:e2:3d:a0:d9:b8:f9:a4:54:84:c0:
3b:4f:46:f5:37:52:a5:bd:30:84:27:15:eb:ae:a2:8c:de:46:
f8:9a:e3:3e:db:5f:a1:55:ff:bd:01:24:2c:27:a1:30:b3:d9:
a3:85:a5:c2:68:70:9d:de:20:a7:37:fa:9b:8a:ac:e2:5d:c0:
18:ab:20:80:22:ef:39:e1:f0:35:97:fa:37:db:15:b1:2b:06:
0c:c4:1e:19:6e:7a:ba:ae:94:5c:78:b7:7b:12:6a:d9:23:8d:
3e:89:39:55:9e:9d:60:3c:77:19:14:5b:23:4b:f3:c9:61:ed:
a8:14:c9:d2:09:f2:d0:cc:49:b6:b1:18:f9:5e:fb:45:93:6f:
d3:d4:6f:a1:54:d2:cc:36:88:a8:5f:1c:f1:8e:13:1c:57:fe:
2d:b0:a6:c7:78:a0:91:71:cd:3b:d4:73:89:d7:59:86:39:33:
96:cb:02:21:a2:5a:85:ef:ff:2f:62:eb:0b:85:46:09:86:cb:
e2:97:fd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:14:46 2026 by rpki-client