Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/25NsAy6Zb4V4wHw8SuBQtO4YPmQ.roa
File: 25NsAy6Zb4V4wHw8SuBQtO4YPmQ.roa (raw, json)
Hash identifier: SS4nLGek4h+Xt7yyCWu7xQQN6LKOYslAoHoc3QSuLEY=
Subject key identifier: DB:93:6C:03:2E:99:6F:85:78:C0:7C:3C:4A:E0:50:B4:EE:18:3E:64
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A134C643E839A304927533F2E6E9A769C8
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/25NsAy6Zb4V4wHw8SuBQtO4YPmQ.roa
Signing time: Tue 13 Oct 2026 10:19:31 +0000
ROA not before: Tue 13 Oct 2026 10:19:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215567
IP address blocks: 2a0a:37c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:c6:43:e8:39:a3:04:92:75:33:f2:e6:e9:a7:69:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Oct 13 10:19:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db936c032e996f8578c07c3c4ae050b4ee183e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:81:b4:09:3f:f0:de:52:4f:68:a2:e6:57:95:
6f:c4:a4:f2:94:e8:1e:03:b3:d5:76:7f:b2:40:e6:
a0:a2:e4:74:4b:20:35:22:da:df:4d:c6:25:6a:ee:
91:96:c9:bc:73:c3:8c:77:b6:fa:f4:13:09:df:18:
6a:86:01:cc:8b:09:cb:10:d9:e1:a5:e7:ed:a3:c0:
be:ec:9e:f8:a1:b7:bd:66:6c:ff:fe:01:b9:01:3a:
bc:09:59:6c:ff:51:99:d5:c3:75:6d:01:43:40:ab:
47:ab:bd:19:a1:6d:a3:76:4a:b2:86:f2:ec:4d:e0:
28:c2:ed:59:6b:fe:dc:46:27:cc:4f:d6:63:ec:25:
75:40:2f:af:f8:a3:0c:d6:24:a4:55:2a:4e:ba:27:
53:e6:cc:4c:b2:98:cd:c7:5e:8a:94:33:5c:9d:ed:
54:10:80:a1:f7:7a:aa:dd:4c:d7:a7:79:5a:e4:5b:
da:11:7a:a5:c4:6b:60:d1:91:1c:58:32:6b:4d:8a:
ba:e8:22:b7:8b:84:db:38:32:24:10:34:af:2c:7a:
fa:0b:90:53:af:43:99:fb:83:d6:48:fa:2f:86:bb:
f7:10:20:1a:2a:e1:51:63:5b:53:c5:9b:6a:9d:ad:
92:12:81:1c:9d:e2:2b:cf:bb:72:d5:03:17:81:0a:
4e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:93:6C:03:2E:99:6F:85:78:C0:7C:3C:4A:E0:50:B4:EE:18:3E:64
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/25NsAy6Zb4V4wHw8SuBQtO4YPmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:37c1::/32
Signature Algorithm: sha256WithRSAEncryption
a6:ef:c8:fa:29:9c:66:7f:64:86:6c:51:09:15:44:52:b0:d4:
ae:23:67:c7:ab:f4:78:bb:25:8e:b8:bc:be:44:b2:6f:1f:04:
4c:35:98:6f:c8:75:cf:75:5c:55:87:06:4a:63:a5:81:1f:27:
5d:6a:7c:44:dd:44:c5:16:fc:03:58:47:99:1c:13:13:3a:d9:
68:5e:de:4b:aa:ca:5e:20:7f:5e:97:35:7d:fa:34:50:ae:72:
2e:ab:a4:e5:54:94:a8:11:e9:af:5d:d7:3b:0a:53:96:33:b9:
5f:eb:cd:53:3e:5d:eb:aa:c5:33:64:4e:02:30:97:0f:e7:ad:
6b:d0:f8:36:5e:3a:70:28:7b:f8:94:e7:56:2b:a8:3e:d1:43:
e0:29:98:4a:dc:e9:9b:af:24:75:a7:46:01:b4:08:9f:01:de:
7f:1c:f4:4e:58:2c:4e:1b:8e:f6:b1:aa:bc:1c:cc:00:5b:67:
5f:9e:f6:83:02:b1:07:cc:d4:d0:0b:29:21:8b:1b:fa:3c:1c:
5b:f3:0d:d7:ee:c4:aa:be:64:38:f2:6b:4c:d4:54:ac:2c:fb:
06:c5:1d:1e:c1:b3:d3:8b:04:f0:3c:b0:35:ff:70:c6:7c:10:
be:d4:65:9f:02:ff:6c:a1:46:19:1b:d3:7a:23:32:3f:b2:ec:
3c:f8:59:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:14:23 2026 by rpki-client