Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/lDWjdn0toSpCQmQoJ7J-uVywu98.roa
File: lDWjdn0toSpCQmQoJ7J-uVywu98.roa (raw, json)
Hash identifier: gFIDArWPxvDtAO1+/Y6KCSNMzjM3GWAojhd3ft6/MKk=
Subject key identifier: 94:35:A3:76:7D:2D:A1:2A:42:42:64:28:27:B2:7E:B9:5C:B0:BB:DF
Certificate issuer: /CN=c02ea5d99d10bcdd2949693725375190909ac782
Certificate serial: 01A026CDF8163FCA9955A35B751AE42A6E09
Authority key identifier: C0:2E:A5:D9:9D:10:BC:DD:29:49:69:37:25:37:51:90:90:9A:C7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC6l2Z0QvN0pSWk3JTdRkJCax4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/lDWjdn0toSpCQmQoJ7J-uVywu98.roa
Signing time: Sat 22 Aug 2026 00:10:27 +0000
ROA not before: Sat 22 Aug 2026 00:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219449
IP address blocks: 2a13:ccc4:9c40::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/wC6l2Z0QvN0pSWk3JTdRkJCax4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:cd:f8:16:3f:ca:99:55:a3:5b:75:1a:e4:2a:6e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c02ea5d99d10bcdd2949693725375190909ac782
Validity
Not Before: Aug 22 00:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9435a3767d2da12a4242642827b27eb95cb0bbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:50:ca:a7:7e:f2:10:7e:9c:41:64:91:b2:4d:
10:99:74:2f:72:c4:6c:2d:b2:9a:97:ae:02:e3:8b:
87:1b:4c:e0:4f:d6:c3:d9:62:62:fc:74:ed:b6:9a:
26:d6:db:42:ca:9e:c2:e2:47:3c:2a:4e:14:66:a2:
26:3b:a3:2e:66:a8:50:3c:e9:86:c5:a0:95:b5:41:
3d:7f:da:c5:cc:1a:df:41:a8:f2:11:14:cc:a5:44:
22:b3:5f:3f:ef:e8:f9:6d:e5:8d:3d:39:56:1b:00:
ff:fd:95:29:6a:60:5f:7c:35:4b:99:55:0c:0d:6c:
c7:b0:1a:2f:03:51:9e:77:3d:6d:92:e3:25:69:6e:
26:30:58:a2:b9:56:69:bf:d1:56:12:fb:21:e5:9e:
a4:c1:11:6a:72:0b:c5:c6:6d:4a:02:b6:e4:2a:7f:
c6:22:6a:0e:73:53:e5:52:e3:a6:df:3b:b2:f9:e9:
2b:44:50:88:0d:9f:c0:f4:7b:03:98:69:22:eb:ac:
70:cc:f6:8e:ed:19:83:38:53:95:01:ce:c3:5c:8d:
05:44:76:fb:8c:c8:cc:39:5d:62:bb:00:14:5e:56:
22:46:8a:b6:2a:4f:95:02:72:79:8e:4e:03:13:11:
b3:6f:23:25:75:39:f6:c0:3c:e3:67:94:e3:86:4b:
55:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:35:A3:76:7D:2D:A1:2A:42:42:64:28:27:B2:7E:B9:5C:B0:BB:DF
X509v3 Authority Key Identifier:
keyid:C0:2E:A5:D9:9D:10:BC:DD:29:49:69:37:25:37:51:90:90:9A:C7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC6l2Z0QvN0pSWk3JTdRkJCax4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/lDWjdn0toSpCQmQoJ7J-uVywu98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/wC6l2Z0QvN0pSWk3JTdRkJCax4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ccc4:9c40::/44
Signature Algorithm: sha256WithRSAEncryption
6b:39:3b:59:a1:62:76:df:dc:1a:b4:3d:96:e0:2e:7b:aa:30:
27:74:2d:bf:e7:68:37:11:21:04:29:82:9f:03:c2:d6:d0:97:
de:90:15:f4:a7:94:b3:a4:49:ca:6f:78:98:72:de:12:95:d7:
71:d1:37:82:26:d4:45:de:7c:95:29:38:66:32:e0:12:23:d4:
bc:1f:dc:91:61:d9:9e:dc:6f:9b:b7:b3:3e:c8:60:43:4a:3f:
96:89:33:4b:36:16:6e:42:b7:60:f2:b4:c1:7d:c1:6b:d2:fe:
a9:17:97:96:3d:5d:7c:3d:89:8f:42:06:89:06:df:8b:5d:c3:
b7:0b:2c:96:b0:7b:3f:d0:d9:c1:f1:8c:df:90:f2:d7:05:b6:
1f:27:7b:d5:ef:bd:fd:36:b9:d6:f1:ca:e3:1b:71:6b:e0:89:
25:01:a9:48:5e:2b:ed:51:d8:c4:98:c1:c3:e6:a1:d5:9f:c3:
c8:b1:13:40:fe:2b:a7:e9:8f:06:61:e9:d6:a9:2e:fc:1f:bc:
0c:47:a0:20:0d:fb:81:39:14:77:2f:98:68:a9:84:48:d3:ed:
19:fa:ad:85:7a:be:51:01:32:57:cd:da:fb:ca:3c:cd:27:45:
c4:6c:4e:55:f2:97:23:7b:c7:1c:3c:f6:ad:f8:31:12:7a:b4:
eb:d9:f3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:21:26 2026 by rpki-client