Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/AUbnnWRSTuIizWEuB6fWmw9L7Eg.roa
File: AUbnnWRSTuIizWEuB6fWmw9L7Eg.roa (raw, json)
Hash identifier: Q2YBwbpN6/e+Nj62OLlXySl8pB87N/bNtbTiKl3Eias=
Subject key identifier: 01:46:E7:9D:64:52:4E:E2:22:CD:61:2E:07:A7:D6:9B:0F:4B:EC:48
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019CD937B1E2F32AA7D95A168DCFC75DEB1B
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/AUbnnWRSTuIizWEuB6fWmw9L7Eg.roa
Signing time: Tue 10 Mar 2026 19:27:11 +0000
ROA not before: Tue 10 Mar 2026 19:27:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215290
IP address blocks: 2a0d:b846::/32 maxlen: 32
2a12:8786::/32 maxlen: 32
2a12:a502::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d9:37:b1:e2:f3:2a:a7:d9:5a:16:8d:cf:c7:5d:eb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Mar 10 19:27:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0146e79d64524ee222cd612e07a7d69b0f4bec48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:05:37:40:e9:1a:6c:4c:b3:82:28:83:89:
0c:39:75:cc:d5:6a:1b:39:ed:0e:3e:38:ba:1d:dd:
1a:15:ff:c3:b9:9b:7f:90:1c:e1:7a:60:0a:0b:96:
b2:c0:72:4a:7d:56:f6:fd:bf:24:28:41:47:41:88:
2f:06:08:6c:4c:54:81:10:4c:68:be:c1:f5:0a:e2:
2c:66:26:a0:73:c3:ac:13:56:a9:c2:96:7d:b7:c8:
e9:c1:94:c9:8f:5f:1c:80:91:03:00:17:f3:1a:a2:
25:63:b5:8a:6b:32:31:b4:7f:75:ff:df:b0:c6:7b:
53:44:60:d7:b7:bf:06:74:d8:a1:a9:9c:83:2d:88:
d6:32:16:77:fe:41:98:74:23:42:79:e8:09:01:95:
a0:aa:d2:5a:b8:6d:10:75:21:ec:7e:7f:41:6f:0f:
34:8c:6f:b3:ad:38:76:92:c5:8b:bd:e7:01:1d:a8:
1c:b1:b5:7b:bc:be:d0:b1:4c:31:cb:e5:0e:6a:e6:
2c:89:41:fa:da:91:64:5f:0c:c5:b2:98:3b:38:55:
2d:b8:5b:a3:3a:09:ac:56:27:ed:b2:85:99:00:65:
72:1b:0d:81:46:7e:18:9b:c1:53:78:1c:f7:57:f3:
b5:5a:91:5b:44:e8:bc:a4:b4:68:7f:73:35:24:f7:
f0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:46:E7:9D:64:52:4E:E2:22:CD:61:2E:07:A7:D6:9B:0F:4B:EC:48
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/AUbnnWRSTuIizWEuB6fWmw9L7Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b846::/32
2a12:8786::/32
2a12:a502::/32
Signature Algorithm: sha256WithRSAEncryption
4b:c8:d8:a3:df:1b:d7:28:bd:e9:78:d1:5c:2e:80:4e:48:7a:
30:0a:00:6c:71:5c:f0:f9:4f:c0:18:62:19:4b:88:9e:e1:02:
82:1d:f9:41:5f:dd:a0:53:18:c1:94:8d:1c:02:c5:8f:d9:1e:
75:d4:6c:6f:62:43:34:33:64:f9:d1:98:32:91:49:18:b4:14:
a9:8e:45:9d:89:48:b9:ae:e4:34:46:b1:11:82:72:03:23:de:
5c:c4:22:13:17:7a:02:54:fa:ad:14:ac:76:b5:fc:40:d7:f8:
5c:39:1d:4c:1b:af:40:79:e3:9f:4f:76:8d:e3:36:95:a9:03:
b4:4f:10:19:9c:2e:92:c3:7f:52:8c:2d:82:10:7a:67:62:ed:
63:d6:4a:00:1c:ae:d8:f5:dd:df:74:4c:71:e3:53:2b:d2:5f:
26:0b:95:fe:df:0a:92:c8:bc:55:2b:3f:1c:59:03:26:99:73:
fa:eb:80:42:28:d2:b2:10:7d:f9:55:73:54:74:e0:55:33:9a:
74:be:5d:d5:c9:94:f8:35:07:b1:37:48:df:56:ab:68:f4:0c:
8c:46:e5:82:63:d3:a3:61:fc:fb:eb:f3:22:30:2b:32:e0:23:
41:35:63:86:42:ab:ef:58:8f:02:b2:9d:af:90:b0:d7:6a:e0:
ba:43:23:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 11:15:32 2026 by rpki-client