Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/U-nn8JCpKkMQjshvCimitPf9fnY.roa
File: U-nn8JCpKkMQjshvCimitPf9fnY.roa (raw, json)
Hash identifier: 20p7PvKskZaUFgghv/CK/FqUmTR31mQhhW0SFGwQweQ=
Subject key identifier: 53:E9:E7:F0:90:A9:2A:43:10:8E:C8:6F:0A:29:A2:B4:F7:FD:7E:76
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A0ECD3B7C4A56967A18F095C249A8EC980
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/U-nn8JCpKkMQjshvCimitPf9fnY.roa
Signing time: Tue 29 Sep 2026 11:01:33 +0000
ROA not before: Tue 29 Sep 2026 11:01:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18978
IP address blocks: 2a0a:37c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:b7:c4:a5:69:67:a1:8f:09:5c:24:9a:8e:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Sep 29 11:01:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53e9e7f090a92a43108ec86f0a29a2b4f7fd7e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f7:c6:83:ac:46:86:55:f3:9a:83:73:67:ba:
9c:47:79:1f:5e:9d:92:f3:2e:45:6c:8b:1e:1a:fb:
92:11:01:bd:2f:45:f9:94:ab:5b:0b:d5:95:2d:2b:
a1:84:44:0c:58:61:be:62:26:16:bd:79:14:0d:5b:
64:2b:f8:44:f4:68:57:0b:e2:0c:ec:5b:05:0a:4c:
62:ad:cd:08:96:ac:9c:99:9e:bb:7c:26:36:4a:89:
7d:e2:e8:e6:59:50:32:e8:09:63:d0:9f:80:e3:6e:
ad:76:25:79:28:95:3d:c4:df:66:a8:ed:6e:55:86:
41:f2:d2:c9:90:33:2e:b3:57:e0:71:8e:5d:63:3b:
d1:47:73:30:d0:6e:01:41:b8:c1:ad:3e:99:ef:31:
ba:54:2a:ed:c8:b5:37:65:33:f2:6c:2d:3e:05:49:
54:18:eb:2b:fd:34:cb:bf:59:a4:b1:f3:59:ad:07:
87:9c:25:5e:9d:34:34:a7:e2:b7:44:68:cd:ec:e1:
77:53:01:4d:5e:ff:1e:06:ec:bb:50:e0:ba:a0:3f:
89:01:da:7c:5d:a0:40:fb:0a:87:62:93:8e:f7:c0:
cf:a3:d0:ee:40:07:58:d6:4c:6d:e7:2a:77:86:03:
5c:e7:0b:4a:d1:4c:4c:0e:85:dd:40:cf:e4:a2:ed:
10:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E9:E7:F0:90:A9:2A:43:10:8E:C8:6F:0A:29:A2:B4:F7:FD:7E:76
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/U-nn8JCpKkMQjshvCimitPf9fnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:37c0::/32
Signature Algorithm: sha256WithRSAEncryption
4d:7c:aa:93:44:76:fa:6e:3b:79:4d:d4:c5:76:38:60:1c:c2:
f3:d7:d9:df:cd:b2:b8:3d:d1:a5:e6:b2:b4:bf:c0:5f:90:44:
84:89:a6:67:bb:25:2f:5d:39:f5:3e:c8:28:5b:25:9c:61:88:
93:82:2f:e9:5c:8a:18:24:61:d6:41:13:02:7b:2d:12:17:80:
11:8f:50:2f:74:2c:aa:0c:a2:c7:37:b5:d2:f8:96:08:2e:8e:
33:8a:27:03:4c:60:76:d7:5d:64:96:87:1c:a1:5c:51:f6:72:
63:24:26:38:8e:87:87:09:73:b9:e3:0d:8e:a2:59:32:bd:c8:
d9:48:a2:a1:f2:92:37:a3:14:65:3f:1d:01:1b:6f:39:46:93:
d4:58:ce:af:82:91:96:ea:79:bc:f7:1b:51:b3:de:2f:64:9b:
ef:0d:a7:fb:bd:78:e0:b4:9f:65:d0:be:65:a4:83:f5:72:4e:
e5:57:07:76:a0:89:d4:f1:ab:20:c2:d8:fd:11:d9:d8:47:25:
1f:d8:f4:65:fc:03:f8:f5:6d:71:40:bf:92:0c:e7:e7:a2:cc:
fb:6e:9b:4b:6a:e3:bb:d7:67:78:05:a7:73:7a:4b:e5:ef:27:
3d:87:a3:19:07:89:4a:03:79:c5:ff:f3:74:a8:9d:66:17:43:
f5:21:34:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:23:01 2026 by rpki-client