Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/tu96yhzm4z7F54bjnr8VnWN9Eqs.roa
File: tu96yhzm4z7F54bjnr8VnWN9Eqs.roa (raw, json)
Hash identifier: feo7BQthjM6f26XPiMCVYowQg0rSQFCcjqZyL9CY1dY=
Subject key identifier: B6:EF:7A:CA:1C:E6:E3:3E:C5:E7:86:E3:9E:BF:15:9D:63:7D:12:AB
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A13A376CBC3E76CF92ED8C15F55D68EDE1
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/tu96yhzm4z7F54bjnr8VnWN9Eqs.roa
Signing time: Wed 14 Oct 2026 11:41:13 +0000
ROA not before: Wed 14 Oct 2026 11:41:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54694
IP address blocks: 2a0b:9800::/29 maxlen: 48
2a0b:a280::/29 maxlen: 48
2a0f:1180::/29 maxlen: 48
2a0f:2380::/29 maxlen: 48
2a0f:4680::/29 maxlen: 48
2a0f:9fc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:37:6c:bc:3e:76:cf:92:ed:8c:15:f5:5d:68:ed:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Oct 14 11:41:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6ef7aca1ce6e33ec5e786e39ebf159d637d12ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:c3:c9:4e:31:c6:23:08:fe:ea:57:a4:d9:
e8:86:1c:f8:c4:b3:d9:b1:5d:85:80:b0:4d:ce:4b:
ed:33:a8:7e:5f:ff:87:b2:c1:02:54:f7:db:58:0f:
95:07:cf:45:2a:bc:1e:8c:c2:18:81:c9:f4:e3:9c:
55:44:f3:0c:f3:5c:ac:3a:85:fd:8c:72:c6:4e:9f:
88:67:8a:22:bd:13:ea:41:f6:0a:36:08:62:c7:6b:
97:21:d0:0d:87:54:0c:c3:77:b5:d4:b6:0f:f3:5e:
88:71:3f:25:e0:36:b0:07:c6:d0:76:1a:11:c5:cc:
ca:96:4c:5a:59:f1:15:ea:8e:3c:be:69:77:a1:53:
06:bf:0f:b9:98:f4:5f:5e:a5:da:66:bd:fd:cf:3e:
cc:b0:25:2b:16:6a:ab:ba:d0:1c:ef:cf:8d:bb:20:
57:62:b0:ba:d1:f8:5e:99:80:03:29:88:aa:d0:74:
f1:ec:68:f3:70:b8:31:8b:05:36:b7:46:cf:c8:d2:
85:13:23:11:3d:31:a2:72:8c:b9:16:09:00:3c:6f:
a7:ed:20:43:22:5e:d2:b8:b6:c8:f3:6b:97:23:76:
14:0b:54:e4:18:24:d4:b5:7b:b1:aa:9c:e8:9a:22:
79:ef:92:98:83:53:4a:57:98:e2:74:1b:b9:bc:ba:
f0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EF:7A:CA:1C:E6:E3:3E:C5:E7:86:E3:9E:BF:15:9D:63:7D:12:AB
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/tu96yhzm4z7F54bjnr8VnWN9Eqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:9800::/29
2a0b:a280::/29
2a0f:1180::/29
2a0f:2380::/29
2a0f:4680::/29
2a0f:9fc0::/29
Signature Algorithm: sha256WithRSAEncryption
59:77:cd:a7:10:1e:04:3d:a4:c0:b4:ec:2f:cd:84:af:7e:27:
04:61:e1:27:9d:3d:13:b1:61:e0:fe:eb:92:06:55:5a:6c:64:
9a:93:45:e6:09:56:cc:1e:fb:4f:75:b7:68:c3:57:62:c5:fb:
4c:cd:74:05:03:48:cb:41:86:2c:14:da:5a:f6:29:a0:7c:3c:
b7:51:58:4d:e4:f4:a4:9a:22:cd:de:c5:26:6b:29:6a:02:d9:
b7:82:8e:79:5a:48:f3:f9:ec:47:61:d3:2c:ee:66:5d:33:0d:
e9:c1:27:04:70:c9:c0:55:30:d3:4e:c9:fb:60:13:57:da:79:
10:e0:d2:89:8c:ca:37:5a:c1:ab:3b:f0:45:36:d8:9d:c6:ff:
a7:8e:f7:c6:c7:22:ac:07:8c:9a:57:fc:04:8e:7b:65:cd:a1:
22:77:9c:3a:f6:9b:eb:ea:55:a1:28:4b:0a:1a:19:ed:5c:ab:
7a:d7:33:3f:03:06:00:52:3d:5a:ce:08:7e:c8:03:57:61:2e:
c3:06:19:eb:03:28:cb:44:7e:05:97:67:d4:ce:bf:7e:9c:95:
a3:1b:12:fb:cd:b8:95:39:f5:67:91:52:b8:0f:a2:80:32:ab:
0a:d1:73:b1:cb:18:06:f6:c0:29:32:ce:a3:37:05:e3:91:99:
50:f2:cd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:01:38 2026 by rpki-client