Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/QOKKxWJJ2nlGQqyN_qX5Wx2uBG4.roa
File: QOKKxWJJ2nlGQqyN_qX5Wx2uBG4.roa (raw, json)
Hash identifier: SoJsxlZMpMV14+cn8CYkWrTa/Yry4NxyxHr63eGgSw4=
Subject key identifier: 40:E2:8A:C5:62:49:DA:79:46:42:AC:8D:FE:A5:F9:5B:1D:AE:04:6E
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019FEBFCA8C70E1D88207DA550445C7CAFC1
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/QOKKxWJJ2nlGQqyN_qX5Wx2uBG4.roa
Signing time: Mon 10 Aug 2026 14:03:51 +0000
ROA not before: Mon 10 Aug 2026 14:03:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23383
IP address blocks: 2a05:a780::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:fc:a8:c7:0e:1d:88:20:7d:a5:50:44:5c:7c:af:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 10 14:03:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40e28ac56249da794642ac8dfea5f95b1dae046e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:f9:a5:bf:ba:24:82:c4:31:11:ab:c4:d8:
e9:54:32:fb:82:72:9b:43:f5:f3:b9:1e:ea:a6:e3:
b4:81:02:05:41:e7:fa:6e:22:74:bf:aa:bb:69:a1:
df:63:c2:6c:e9:0c:bf:6f:34:99:db:60:85:9b:6f:
d9:6a:27:af:8b:bf:a1:73:e2:23:28:63:a6:f7:1b:
7c:df:57:89:aa:43:27:e3:12:8b:25:ba:13:55:29:
9a:b2:f7:d7:43:57:bc:5f:b8:5f:ad:55:09:5d:3c:
d6:76:65:fa:69:a1:34:39:a6:51:91:13:4c:d7:a7:
14:4b:aa:7c:12:21:3c:61:92:b3:ea:8e:23:75:98:
2f:77:a4:24:43:2c:6c:dc:55:fb:ba:36:f3:93:58:
3a:f4:ff:62:b7:fd:9e:e6:d7:88:23:ab:a7:5a:06:
06:f4:cb:3d:92:29:d0:13:79:01:a8:a9:41:0d:6d:
14:37:fe:2d:46:93:fc:6a:47:eb:c0:5a:64:78:19:
e9:6a:e2:e8:79:e4:03:c4:62:36:52:1d:57:ae:41:
12:a5:90:0b:d4:db:a6:2f:cb:cc:e5:a5:73:77:60:
eb:e3:c5:12:d5:3c:82:77:25:fa:6e:64:86:e3:3e:
8c:ef:ce:90:ef:42:b3:fd:51:a3:62:50:17:92:23:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E2:8A:C5:62:49:DA:79:46:42:AC:8D:FE:A5:F9:5B:1D:AE:04:6E
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/QOKKxWJJ2nlGQqyN_qX5Wx2uBG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:a780::/48
Signature Algorithm: sha256WithRSAEncryption
2a:34:f2:5e:4b:59:6a:29:86:26:96:37:dc:d8:37:f8:84:06:
5c:4d:98:e4:36:c2:3e:e9:b0:72:fe:91:33:aa:39:dd:ce:82:
eb:40:35:a5:c4:44:88:12:c2:fe:c2:0d:e2:f6:c2:e2:e5:dd:
a6:07:60:71:8d:b8:e3:b7:9e:0d:19:26:45:3d:57:2a:7c:ef:
d5:60:38:1d:0c:3f:76:c5:d0:7e:97:24:ea:07:a0:0c:19:47:
b8:3e:08:d2:a6:66:12:b2:1b:99:b2:82:5e:16:27:77:75:93:
81:54:40:5a:61:7c:36:f9:98:79:70:29:3f:f6:8f:64:d7:d6:
09:5d:8a:09:94:6c:e3:e1:d0:48:b9:df:e7:02:1b:04:77:b7:
a5:7f:ec:68:92:df:4e:58:06:00:05:6f:90:56:ec:a5:f2:bb:
bc:4a:8e:21:9e:45:44:56:69:df:43:e8:e0:0c:99:8e:37:82:
bf:8d:c5:3b:1a:ac:31:19:cb:67:26:81:a4:85:80:df:b4:d2:
67:18:87:0d:fa:a2:8f:67:ae:86:55:cb:c5:85:b5:58:99:b1:
65:68:67:84:36:cb:7e:1f:03:4f:bc:31:7f:ad:86:d9:a2:18:
7c:2f:48:18:30:04:66:0a:93:58:d8:7e:d1:56:81:4f:af:85:
84:4f:3e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 11:48:04 2026 by rpki-client