Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/pgT0TmqXjiTWRmuNl9SzUy96lgA.roa
File: pgT0TmqXjiTWRmuNl9SzUy96lgA.roa (raw, json)
Hash identifier: sJvGUVr1yJe69qiV1m1TPzLlouDvo/x4FZ0oTDbjqWQ=
Subject key identifier: A6:04:F4:4E:6A:97:8E:24:D6:46:6B:8D:97:D4:B3:53:2F:7A:96:00
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A03F9692DCA723C1E5FF739D30FB40D078
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/pgT0TmqXjiTWRmuNl9SzUy96lgA.roa
Signing time: Wed 26 Aug 2026 19:40:27 +0000
ROA not before: Wed 26 Aug 2026 19:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55286
IP address blocks: 2a0b:a280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:96:92:dc:a7:23:c1:e5:ff:73:9d:30:fb:40:d0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Aug 26 19:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a604f44e6a978e24d6466b8d97d4b3532f7a9600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:a3:1a:68:9d:15:53:60:f3:aa:eb:ea:68:
b7:6f:df:ed:d9:01:77:52:41:27:f2:1a:da:60:36:
a5:0d:b5:73:8b:eb:93:90:38:4d:51:8c:3d:33:13:
b6:16:31:db:de:eb:46:d8:45:bd:cb:64:da:c7:05:
2e:2f:a3:a5:1c:26:01:f9:75:60:bf:30:92:08:9d:
03:6d:7d:82:d2:7b:29:fd:0b:44:1c:1c:57:b8:b4:
01:3f:8d:ef:60:be:69:32:1e:87:cd:2b:de:43:24:
58:02:26:b3:00:17:1a:5a:70:ff:a0:ae:8a:23:95:
06:4c:df:cf:d7:4d:21:b2:8b:87:e8:88:e0:db:88:
c1:bc:06:a0:45:38:0f:79:b4:fb:4c:cd:0b:44:6c:
41:75:33:58:2f:f0:14:b6:e9:dd:ac:38:91:bd:83:
91:34:5e:bd:c0:83:f8:5f:77:a1:06:17:13:34:6a:
e1:2a:4c:e8:c3:c5:4c:ac:dd:27:bd:06:b9:c6:0e:
e3:74:a9:e5:b5:d2:11:b2:f7:9c:b2:19:92:9f:42:
35:58:12:23:58:93:f8:8c:6a:c8:36:1c:4f:17:e0:
0d:2d:73:68:20:85:89:74:07:5a:a6:9a:b1:cd:50:
3b:c0:9c:1a:f6:0d:43:bc:98:68:4f:bf:30:4c:15:
d5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:04:F4:4E:6A:97:8E:24:D6:46:6B:8D:97:D4:B3:53:2F:7A:96:00
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/pgT0TmqXjiTWRmuNl9SzUy96lgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:a280::/29
Signature Algorithm: sha256WithRSAEncryption
08:b6:5e:3c:2b:69:7e:9a:56:28:cd:78:be:e6:f4:55:9f:8e:
2a:e2:2b:7f:06:28:1a:28:b1:71:40:03:de:80:07:04:a3:77:
1d:ca:83:78:85:a9:fc:52:fd:9c:70:c4:08:4d:01:73:89:e3:
7d:e5:fc:06:ac:84:2c:7f:c9:5f:2b:b6:b7:69:dd:f9:13:1b:
a7:53:58:f2:9a:03:bc:a7:ef:93:10:b7:f2:ba:cf:8e:c7:73:
e8:ef:13:09:10:bf:60:62:f1:78:92:e6:32:c6:5b:c8:43:3a:
03:63:f8:d0:d1:85:82:e4:5a:e6:65:0b:c3:1e:18:db:5c:12:
fa:3a:3e:1c:6f:32:ed:57:04:ad:02:f0:55:a7:77:e8:63:4c:
8c:85:75:6d:ee:62:71:93:d3:2d:8c:c7:9a:dd:ea:31:84:c8:
68:21:2d:6c:76:2b:c2:b0:f2:1e:69:62:63:8f:36:e5:57:61:
a9:b5:b9:d9:79:40:3d:d4:ef:2b:55:27:95:b6:75:37:f6:23:
91:b1:92:d3:81:6d:91:86:fd:57:1a:43:5b:47:a2:a0:19:72:
94:df:2d:fe:c5:9f:ba:20:f0:3e:c8:15:01:bd:4d:ac:c6:2d:
ee:ce:57:fd:73:b2:0f:13:9c:df:90:1f:a5:10:b1:d7:7a:b7:
e8:db:78:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 17:16:25 2026 by rpki-client