Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/dkbWWj1fcNuoxRuY36otGw7y-4o.roa
File: dkbWWj1fcNuoxRuY36otGw7y-4o.roa (raw, json)
Hash identifier: eWnON+KoPCnW1mOHfIOhfYni2hFCmr45cz2OH330WCY=
Subject key identifier: 76:46:D6:5A:3D:5F:70:DB:A8:C5:1B:98:DF:AA:2D:1B:0E:F2:FB:8A
Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial: 019FF663022EEEDA2CB627239A50CAEC1E30
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/dkbWWj1fcNuoxRuY36otGw7y-4o.roa
Signing time: Wed 12 Aug 2026 14:31:51 +0000
ROA not before: Wed 12 Aug 2026 14:31:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57330
IP address blocks: 2a12:3fc6::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:63:02:2e:ee:da:2c:b6:27:23:9a:50:ca:ec:1e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Validity
Not Before: Aug 12 14:31:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7646d65a3d5f70dba8c51b98dfaa2d1b0ef2fb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:75:33:fc:3d:28:64:e7:ac:ee:c9:74:62:08:
8e:f4:ae:41:34:a6:f1:43:2d:a3:72:60:d5:c3:2f:
78:c5:6a:90:ab:76:a1:be:90:6b:13:f2:98:20:cb:
e7:0f:f4:be:77:34:f3:b6:cc:e6:8e:f5:ec:e8:0a:
e3:3c:27:7e:79:4c:ae:6c:7f:c7:89:c6:13:03:41:
7f:45:d8:ac:2e:a2:5b:d7:bb:ec:8d:ee:8e:6e:94:
c7:26:40:85:4b:8f:4d:2c:15:ad:20:be:07:9c:e5:
f4:8e:9c:c3:c2:dd:4a:99:d6:8e:f3:49:fb:97:3a:
b4:b5:87:33:22:bb:03:5b:6c:2f:1e:a6:69:e0:89:
f6:a3:f7:e0:28:76:0f:8d:92:f0:88:a0:fb:38:8e:
74:e0:53:f2:96:13:62:6b:e2:5f:da:2b:ea:dc:a3:
8e:86:f3:76:a0:81:dd:fc:ae:7e:99:da:ce:cf:50:
3e:f1:c4:48:c5:51:6d:ba:36:31:23:2e:57:70:af:
35:18:33:d2:37:67:ca:e6:c3:60:52:bc:41:e7:f7:
58:b5:4a:a6:94:65:8d:85:fd:14:4b:fe:f1:60:56:
2c:f6:92:4f:17:c9:4d:d4:be:cd:16:19:b6:b2:c1:
87:2c:80:7c:22:d4:30:cd:f0:7e:53:7a:15:9b:b3:
0e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:46:D6:5A:3D:5F:70:DB:A8:C5:1B:98:DF:AA:2D:1B:0E:F2:FB:8A
X509v3 Authority Key Identifier:
keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/dkbWWj1fcNuoxRuY36otGw7y-4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc6::/44
Signature Algorithm: sha256WithRSAEncryption
96:d9:5f:ee:5f:f4:f7:00:79:06:cb:e6:74:14:99:2e:bc:69:
79:c2:84:c6:50:81:86:0d:35:15:13:1f:0a:43:6c:c3:82:83:
3d:67:e9:db:13:7b:bc:df:d2:dc:b5:ca:4b:ec:46:d6:f2:9c:
02:2d:48:94:a9:d8:30:2e:a6:84:b5:4d:9c:62:12:9e:de:6f:
5b:bd:64:4f:4e:2b:3a:4f:c8:b3:5d:f9:6f:86:e0:b6:a0:fc:
54:01:73:31:f2:5d:29:e6:03:7b:ed:08:f8:03:b8:2d:66:5c:
0c:1d:eb:3f:87:ca:6a:5b:89:61:2a:f8:76:b6:9c:d5:e0:b3:
8a:0a:49:72:7a:92:54:95:69:f1:32:68:d4:be:6e:78:fc:98:
54:7b:7e:7a:34:55:dc:ad:c1:3a:3d:55:b7:10:99:09:e2:35:
61:85:5c:aa:29:22:42:cd:0c:79:c2:3f:19:da:95:d7:ec:7a:
74:e9:7c:8a:44:66:cf:b1:31:20:22:57:06:2e:2b:c9:14:98:
e2:49:12:01:ef:fb:85:d0:d2:a5:73:9a:a8:a7:6e:99:7d:47:
9f:10:85:fb:68:c7:5e:bb:0d:77:46:fe:45:0d:d0:22:35:b0:
4c:ff:52:5f:3b:42:21:ed:b1:5b:56:e4:6c:32:1b:16:bf:04:
51:e8:b3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:56:23 2026 by rpki-client