Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/1edFc-o9F5jJCZYksn9xZQnVQAw.roa
File: 1edFc-o9F5jJCZYksn9xZQnVQAw.roa (raw, json)
Hash identifier: 2PKq/Bai+X8nPDopecT7t2UP+BLOcpgo1NmQEoGfU4o=
Subject key identifier: D5:E7:45:73:EA:3D:17:98:C9:09:96:24:B2:7F:71:65:09:D5:40:0C
Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial: 01A1413C65E801F0A6BBF6153E9468F9A5E3
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/1edFc-o9F5jJCZYksn9xZQnVQAw.roa
Signing time: Thu 15 Oct 2026 20:23:59 +0000
ROA not before: Thu 15 Oct 2026 20:23:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401163
IP address blocks: 2a04:8cc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:3c:65:e8:01:f0:a6:bb:f6:15:3e:94:68:f9:a5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Validity
Not Before: Oct 15 20:23:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5e74573ea3d1798c9099624b27f716509d5400c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:e8:5b:d6:10:6c:47:02:55:ac:de:89:7e:
79:ed:cc:8f:e2:5e:85:52:26:02:0f:f8:17:54:b9:
9b:c8:9f:65:32:26:2f:86:54:5c:ce:00:3a:7c:bb:
79:29:d6:82:9f:2f:86:ca:88:f0:2d:0e:52:f7:31:
7f:49:ec:e9:dc:76:83:ff:dc:99:73:e1:c5:95:e5:
b0:35:9d:f0:f6:ba:1a:c1:7c:60:df:43:4a:68:fd:
eb:4f:c4:02:2c:71:11:40:d7:1d:f4:5e:d7:d7:de:
1a:cc:57:f6:0f:d7:5f:e8:0e:67:f4:38:68:94:95:
a0:27:3e:53:a2:85:c7:02:ab:6a:6f:29:6c:06:10:
7c:9b:f2:b2:f0:4f:31:aa:3d:0d:62:24:76:ec:fe:
dd:f5:c8:8e:00:56:25:42:a6:8f:0f:e9:45:b1:54:
01:81:e5:7f:4a:bc:af:e0:cb:12:48:94:32:7d:fc:
56:34:44:a5:a7:d2:61:f7:fb:9a:f5:9f:dd:81:8a:
ac:12:9f:aa:bc:ff:a5:93:55:73:fa:9d:3f:2f:ba:
09:d5:2a:9c:98:80:94:97:36:e6:8d:8f:f9:0a:ba:
d7:50:48:fb:80:b5:41:be:cc:c3:24:07:4a:16:70:
0a:3a:48:66:4a:ca:dd:89:b2:aa:37:99:06:03:d3:
df:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E7:45:73:EA:3D:17:98:C9:09:96:24:B2:7F:71:65:09:D5:40:0C
X509v3 Authority Key Identifier:
keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/1edFc-o9F5jJCZYksn9xZQnVQAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:8cc0::/29
Signature Algorithm: sha256WithRSAEncryption
5d:cf:31:4f:ba:59:c6:af:84:ab:c7:06:48:58:dd:93:f4:e4:
fb:3b:37:8a:12:1d:2d:87:74:d9:1e:93:d0:6f:dd:f8:2d:8d:
89:a0:67:8d:49:18:29:ca:1f:cc:7b:f8:70:af:6b:12:a8:32:
67:5f:ba:eb:31:a7:bc:34:1f:65:5a:74:bc:6f:89:7e:1a:bb:
8d:58:c1:a9:2e:45:92:77:73:29:7c:af:3d:7a:24:47:29:0b:
5f:bf:85:62:a3:16:c3:c9:61:73:2f:84:bd:0c:e4:d9:a2:47:
4b:e8:9f:92:37:4e:48:07:fb:f9:5f:81:2b:b7:fb:3d:33:01:
48:ed:4a:80:46:55:cf:ed:dd:b3:19:57:37:7f:0e:14:86:52:
7b:57:9d:9b:de:c7:1c:65:f8:05:c6:c6:3a:e3:74:8b:81:7e:
f0:26:49:5c:f0:85:59:0a:fc:7c:1f:29:33:3e:6c:fd:72:03:
60:78:95:3d:bd:e2:9b:b9:64:32:45:e9:c9:5d:6c:11:dd:37:
64:7a:19:86:ae:48:3c:94:c8:e4:4a:44:ea:2d:59:26:5a:de:
a0:ed:b8:ed:f0:7d:ba:a6:44:40:6d:97:6f:44:2f:fa:e8:ac:
f3:53:d8:1e:ab:bc:33:b7:d6:90:7e:bb:f8:08:25:d1:ca:7d:
26:33:85:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:12 2026 by rpki-client