Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/RlN0Dq7hGgMP8pxBtia3ZQby3ko.roa
File: RlN0Dq7hGgMP8pxBtia3ZQby3ko.roa (raw, json)
Hash identifier: vZmcY7gVEf2TwEIyCfuX8c2SA/YSETq5nDg4P1TwZk8=
Subject key identifier: 46:53:74:0E:AE:E1:1A:03:0F:F2:9C:41:B6:26:B7:65:06:F2:DE:4A
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019E2845177323637D0C28C5D05E20E7FF69
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/RlN0Dq7hGgMP8pxBtia3ZQby3ko.roa
Signing time: Thu 14 May 2026 20:54:37 +0000
ROA not before: Thu 14 May 2026 20:54:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34567
IP address blocks: 2a0d:8cc0::/29 maxlen: 29
2a0d:b840::/29 maxlen: 29
2a0e:af40::/29 maxlen: 29
2a0e:e9c0::/29 maxlen: 29
2a0f:e180::/29 maxlen: 29
2a11:17c0::/29 maxlen: 29
2a11:1c80::/29 maxlen: 29
2a11:2d00::/29 maxlen: 29
2a11:4540::/29 maxlen: 29
2a11:4f00::/29 maxlen: 29
2a11:64c0::/29 maxlen: 29
2a11:6b80::/29 maxlen: 29
2a11:77c0::/29 maxlen: 29
2a11:81c0::/29 maxlen: 29
2a11:86c0::/29 maxlen: 29
2a11:8740::/29 maxlen: 29
2a11:8980::/29 maxlen: 29
2a11:9580::/29 maxlen: 29
2a11:9640::/29 maxlen: 29
2a11:9f00::/29 maxlen: 29
2a11:a040::/29 maxlen: 29
2a11:a140::/29 maxlen: 29
2a11:b0c0::/29 maxlen: 29
2a11:b700::/29 maxlen: 29
2a11:bb00::/29 maxlen: 29
2a11:bbc0::/29 maxlen: 29
2a11:bdc0::/29 maxlen: 29
2a11:be40::/29 maxlen: 29
2a11:bf80::/29 maxlen: 29
2a11:c240::/29 maxlen: 29
2a11:c580::/29 maxlen: 29
2a11:c680::/29 maxlen: 29
2a11:cec0::/29 maxlen: 29
2a11:d340::/29 maxlen: 29
2a11:d880::/29 maxlen: 29
2a11:dac0::/29 maxlen: 29
2a11:df00::/29 maxlen: 29
2a11:e640::/29 maxlen: 29
2a11:e6c0::/29 maxlen: 29
2a11:e8c0::/29 maxlen: 29
2a11:eac0::/29 maxlen: 29
2a11:fa40::/29 maxlen: 29
2a11:fc40::/29 maxlen: 29
2a11:ff40::/29 maxlen: 29
2a12:580::/29 maxlen: 29
2a12:900::/29 maxlen: 29
2a12:dc0::/29 maxlen: 29
2a12:e40::/29 maxlen: 29
2a12:e80::/29 maxlen: 29
2a12:11c0::/29 maxlen: 29
2a12:12c0::/29 maxlen: 29
2a12:1a80::/29 maxlen: 29
2a12:2b80::/29 maxlen: 29
2a12:2e80::/29 maxlen: 29
2a12:3c00::/29 maxlen: 29
2a12:6480::/29 maxlen: 29
2a12:8380::/29 maxlen: 29
2a12:8480::/29 maxlen: 29
2a12:8a00::/29 maxlen: 29
2a12:9200::/29 maxlen: 29
2a12:aa00::/29 maxlen: 29
2a12:af00::/29 maxlen: 29
2a12:b400::/29 maxlen: 29
2a12:b700::/29 maxlen: 29
2a12:bb00::/29 maxlen: 29
2a12:bc80::/29 maxlen: 29
2a12:c980::/29 maxlen: 29
2a12:d080::/29 maxlen: 29
2a12:d200::/29 maxlen: 29
2a12:d800::/29 maxlen: 29
2a12:f980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:45:17:73:23:63:7d:0c:28:c5:d0:5e:20:e7:ff:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: May 14 20:54:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4653740eaee11a030ff29c41b626b76506f2de4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1f:e7:1e:c8:b1:97:57:53:30:e6:7c:4f:73:
91:fb:14:ed:2a:6a:b4:76:a5:0f:ff:c3:d4:8e:95:
9d:0a:db:13:bb:52:d3:04:8c:ed:79:f5:46:d4:71:
6a:a2:51:0a:88:ec:c1:84:48:df:a3:f0:16:c6:c2:
5c:c4:e9:92:e1:61:1a:a6:6e:ca:7e:b7:a7:e3:d0:
68:52:99:ea:3b:0b:31:d0:59:1e:06:8d:65:01:c8:
b0:a1:9a:58:fa:f1:60:2f:36:ee:e6:67:52:5f:b6:
94:db:fc:5e:af:83:b4:6d:91:8c:a9:e2:5e:d8:c8:
4d:e7:80:04:a4:b4:ba:fc:e3:49:d1:65:92:11:f0:
4e:0f:0b:20:c2:cd:5e:76:d3:46:a4:54:99:e0:ce:
e2:ac:67:aa:d8:45:ea:54:d4:5c:de:f8:bb:f3:d0:
3b:5d:aa:9a:6a:86:82:b1:ef:3d:3c:37:bc:92:3c:
c9:e0:5e:49:da:51:08:ef:b6:64:63:03:04:eb:46:
37:98:6c:3c:d5:9e:71:39:f9:6a:6d:a3:7d:ea:07:
a7:f4:2d:36:65:0c:07:e1:d8:8a:d5:ef:8f:7e:ef:
cc:a9:72:0d:ef:05:0f:1b:c7:19:09:2b:7a:3c:c2:
ba:15:22:73:b4:d6:a5:8b:95:91:9b:f4:c0:ab:90:
ae:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:53:74:0E:AE:E1:1A:03:0F:F2:9C:41:B6:26:B7:65:06:F2:DE:4A
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/RlN0Dq7hGgMP8pxBtia3ZQby3ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:8cc0::/29
2a0d:b840::/29
2a0e:af40::/29
2a0e:e9c0::/29
2a0f:e180::/29
2a11:17c0::/29
2a11:1c80::/29
2a11:2d00::/29
2a11:4540::/29
2a11:4f00::/29
2a11:64c0::/29
2a11:6b80::/29
2a11:77c0::/29
2a11:81c0::/29
2a11:86c0::/29
2a11:8740::/29
2a11:8980::/29
2a11:9580::/29
2a11:9640::/29
2a11:9f00::/29
2a11:a040::/29
2a11:a140::/29
2a11:b0c0::/29
2a11:b700::/29
2a11:bb00::/29
2a11:bbc0::/29
2a11:bdc0::/29
2a11:be40::/29
2a11:bf80::/29
2a11:c240::/29
2a11:c580::/29
2a11:c680::/29
2a11:cec0::/29
2a11:d340::/29
2a11:d880::/29
2a11:dac0::/29
2a11:df00::/29
2a11:e640::/29
2a11:e6c0::/29
2a11:e8c0::/29
2a11:eac0::/29
2a11:fa40::/29
2a11:fc40::/29
2a11:ff40::/29
2a12:580::/29
2a12:900::/29
2a12:dc0::/29
2a12:e40::/29
2a12:e80::/29
2a12:11c0::/29
2a12:12c0::/29
2a12:1a80::/29
2a12:2b80::/29
2a12:2e80::/29
2a12:3c00::/29
2a12:6480::/29
2a12:8380::/29
2a12:8480::/29
2a12:8a00::/29
2a12:9200::/29
2a12:aa00::/29
2a12:af00::/29
2a12:b400::/29
2a12:b700::/29
2a12:bb00::/29
2a12:bc80::/29
2a12:c980::/29
2a12:d080::/29
2a12:d200::/29
2a12:d800::/29
2a12:f980::/29
Signature Algorithm: sha256WithRSAEncryption
34:de:5c:0f:57:6f:5d:15:3d:d3:fc:2a:5f:f3:b6:ac:5f:6b:
e5:19:fd:55:c9:71:08:cf:60:a5:aa:86:99:e4:a8:2a:8c:39:
9d:6a:33:c4:b5:67:89:2c:56:65:07:86:45:39:b7:9d:05:8b:
c7:76:44:9a:49:a5:1d:bd:41:d3:a7:c4:c2:d9:b5:73:fe:a8:
42:00:42:f8:47:b8:66:97:8f:56:be:63:85:4d:c0:bd:6b:3a:
01:8f:77:b4:7a:93:c7:aa:dd:ff:dd:d0:18:f5:34:8b:6c:6c:
ba:80:f1:85:06:23:93:a7:41:6b:ac:ec:e0:e4:ee:55:77:a1:
00:1f:73:23:7b:9d:c5:39:b5:0b:51:86:a1:f9:7d:fc:d4:5f:
2b:00:b7:96:b3:8f:08:bd:64:16:ed:dd:50:90:c4:38:c1:e5:
52:17:05:85:47:43:5f:21:36:c4:62:5f:39:80:30:49:44:32:
52:a2:c2:a0:46:ae:16:ec:82:ad:80:44:88:d7:df:1b:53:36:
cb:87:31:fa:fb:f7:d2:70:05:76:fa:7b:6e:94:30:ec:91:95:
03:53:2d:69:c8:b7:42:d5:44:16:27:18:20:b0:38:55:d0:0a:
2f:84:7d:99:88:29:18:7e:d5:f3:34:d2:ca:60:97:ce:41:dd:
b4:da:c1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:23 2026 by rpki-client