Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/88f5b7-3b25-4c7d-b68c-2cac32a60cdb/1/AWlb0DgVfoDQ8kBsHLuO5miCC6U.roa
File: AWlb0DgVfoDQ8kBsHLuO5miCC6U.roa (raw, json)
Hash identifier: 01mEoIEuGIxcC0au5+71kcj0MZHf6q+0oMWtVnDJxqo=
Subject key identifier: 01:69:5B:D0:38:15:7E:80:D0:F2:40:6C:1C:BB:8E:E6:68:82:0B:A5
Certificate issuer: /CN=ee5588fcf25bbc2d688ef6a22710f3f662f540c5
Certificate serial: 01A01518491D3CD2DC12CEAFD9E00B73259E
Authority key identifier: EE:55:88:FC:F2:5B:BC:2D:68:8E:F6:A2:27:10:F3:F6:62:F5:40:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7lWI_PJbvC1ojvaiJxDz9mL1QMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/88f5b7-3b25-4c7d-b68c-2cac32a60cdb/1/AWlb0DgVfoDQ8kBsHLuO5miCC6U.roa
Signing time: Tue 18 Aug 2026 13:38:28 +0000
ROA not before: Tue 18 Aug 2026 13:38:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57795
IP address blocks: 2a01:5460::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/88f5b7-3b25-4c7d-b68c-2cac32a60cdb/1/7lWI_PJbvC1ojvaiJxDz9mL1QMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/88f5b7-3b25-4c7d-b68c-2cac32a60cdb/1/7lWI_PJbvC1ojvaiJxDz9mL1QMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7lWI_PJbvC1ojvaiJxDz9mL1QMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:18:49:1d:3c:d2:dc:12:ce:af:d9:e0:0b:73:25:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee5588fcf25bbc2d688ef6a22710f3f662f540c5
Validity
Not Before: Aug 18 13:38:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01695bd038157e80d0f2406c1cbb8ee668820ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:38:ff:30:5f:5c:25:82:40:ae:89:76:d2:
e1:25:1b:05:2d:fa:6b:0a:68:46:d8:12:6e:38:af:
bb:be:99:00:ba:50:61:9d:9a:78:0d:94:9d:9a:26:
fd:da:36:0d:63:16:45:ca:05:58:e3:26:0b:13:fc:
a2:00:a3:45:97:60:27:35:be:42:dd:66:82:f5:2d:
ac:18:b9:4a:53:01:68:77:64:e5:02:1b:d0:ef:ee:
23:10:8b:0d:3c:12:86:f8:fe:24:13:6f:3c:00:54:
a5:ad:77:c4:0d:83:f2:15:0b:eb:08:97:ae:e3:34:
1e:3f:f3:f0:da:a9:ac:54:ef:68:16:97:0b:c6:05:
4a:be:2e:d2:e7:3c:96:00:7d:d3:7f:72:f7:cf:2e:
49:9d:3c:4e:a0:45:e0:dc:8b:a6:d3:2e:7d:55:8a:
3b:e0:cb:2b:f7:e6:91:11:a4:d6:83:ae:03:7c:f1:
b5:05:12:8b:c5:ad:cb:d9:e4:e3:3e:ba:ac:20:20:
da:f3:14:c1:51:bc:06:ed:a0:c9:5e:7a:58:18:2a:
03:52:92:e2:68:19:14:1d:01:e1:45:d3:48:05:31:
07:7c:41:6d:3e:e8:24:1d:dd:de:f5:a0:f3:6c:fe:
01:9a:64:9b:3a:44:57:24:cd:9d:e9:81:5d:84:28:
a7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:69:5B:D0:38:15:7E:80:D0:F2:40:6C:1C:BB:8E:E6:68:82:0B:A5
X509v3 Authority Key Identifier:
keyid:EE:55:88:FC:F2:5B:BC:2D:68:8E:F6:A2:27:10:F3:F6:62:F5:40:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lWI_PJbvC1ojvaiJxDz9mL1QMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/88f5b7-3b25-4c7d-b68c-2cac32a60cdb/1/AWlb0DgVfoDQ8kBsHLuO5miCC6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/88f5b7-3b25-4c7d-b68c-2cac32a60cdb/1/7lWI_PJbvC1ojvaiJxDz9mL1QMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:5460::/32
Signature Algorithm: sha256WithRSAEncryption
40:51:71:86:a7:93:51:3c:a5:b3:b4:45:bb:a8:b8:e6:aa:59:
4f:5b:b6:57:ee:fc:50:18:dc:44:90:22:41:c9:25:08:fb:bf:
55:06:a8:7e:4b:56:11:19:a1:9a:fa:24:31:4c:8a:a4:2c:04:
e0:93:e0:45:e9:9d:cb:e6:a4:4e:17:30:f1:f4:68:70:da:dd:
d7:a6:70:d9:a2:f9:da:62:a6:68:01:8a:01:76:12:2c:93:b5:
0f:0c:81:6d:fa:86:57:29:2c:de:1d:d8:03:fc:e0:45:c1:a0:
ee:10:30:f0:61:df:c6:8d:c3:c9:6c:6c:e8:52:aa:66:1e:e0:
8f:92:2a:14:96:23:df:2d:00:f8:9a:a3:16:a3:ad:6e:0d:fe:
9b:ed:42:c0:c8:ae:f3:ab:93:c7:6b:b4:db:c9:f7:0d:97:15:
11:0b:94:ef:62:19:6d:f0:d2:05:63:1b:54:bd:93:32:9f:84:
0d:8a:6b:88:40:58:8a:82:a7:f7:eb:69:a1:63:52:83:c6:dd:
06:ad:24:e5:34:ce:1d:6b:49:41:9f:59:1b:cb:4e:19:8a:8e:
23:bf:e1:2b:05:1f:53:d5:3f:2d:22:74:cf:f0:30:49:23:40:
8a:12:6c:d4:4e:a6:8d:a4:a9:f0:89:f8:67:9b:60:a0:d3:f7:
2d:95:08:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:47:36 2026 by rpki-client