Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/O-dpdWYo8ckxZ2AHGPfZXhAJVbI.roa
File: O-dpdWYo8ckxZ2AHGPfZXhAJVbI.roa (raw, json)
Hash identifier: /sAtQm1LId4AY/iSDL5o2ocakYZhtd2wuSTvIPxRdB0=
Subject key identifier: 3B:E7:69:75:66:28:F1:C9:31:67:60:07:18:F7:D9:5E:10:09:55:B2
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 01A0137D35213E14281FEAE75F1767A10E9F
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/O-dpdWYo8ckxZ2AHGPfZXhAJVbI.roa
Signing time: Tue 18 Aug 2026 06:09:27 +0000
ROA not before: Tue 18 Aug 2026 06:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402664
IP address blocks: 2a05:e900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:7d:35:21:3e:14:28:1f:ea:e7:5f:17:67:a1:0e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Aug 18 06:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3be769756628f1c93167600718f7d95e100955b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:fd:d7:d4:8f:b0:33:bc:c7:b3:a3:b5:b4:
b6:8f:7a:c3:f8:f0:be:ae:06:70:77:08:74:50:e2:
46:eb:7e:b3:5d:f1:fc:f6:d1:4a:98:f1:b7:7f:b8:
36:24:f4:ea:23:b9:33:e5:6b:c6:38:b2:92:89:8d:
77:d9:23:f4:28:ea:a7:97:23:40:b1:59:65:32:34:
29:8b:8b:a5:1a:9a:b7:76:1c:d2:77:ef:b5:b0:29:
11:7a:f7:9b:08:6c:01:2c:bb:40:d1:6f:2b:f7:75:
05:30:ba:5e:55:46:d3:b3:db:be:20:0e:49:29:ed:
99:65:6d:f8:18:0a:60:7f:c1:16:f5:c2:37:0a:69:
5b:ea:57:8b:f5:75:6d:e2:bb:45:63:99:de:f0:84:
cd:c8:b1:9b:ff:d2:0c:73:4f:4e:74:17:39:2e:ad:
85:f6:d2:32:4b:70:c9:54:30:99:87:e9:f8:a8:1a:
3c:28:d6:bb:7b:d2:4c:83:18:79:d7:99:c0:5d:b8:
68:88:7a:11:eb:d2:20:5a:31:7c:ea:44:74:40:18:
bb:5c:1b:c4:62:5a:38:cc:84:a4:45:12:e0:65:3f:
6f:0d:c0:9f:49:b7:da:fc:3a:0d:a6:63:13:26:04:
a5:1d:b2:4c:a3:a8:3c:5f:31:31:21:9f:ef:dc:7a:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E7:69:75:66:28:F1:C9:31:67:60:07:18:F7:D9:5E:10:09:55:B2
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/O-dpdWYo8ckxZ2AHGPfZXhAJVbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:e900::/29
Signature Algorithm: sha256WithRSAEncryption
40:2c:b4:a0:d8:b6:b3:b4:0d:59:3f:6d:b9:48:91:02:83:41:
0f:3f:33:71:5c:b6:72:21:2d:de:48:55:e1:f5:ba:9d:ca:66:
b7:de:36:db:cc:3b:2c:1f:27:ad:05:e1:3b:10:36:73:82:4a:
c7:3e:1b:a1:7a:65:46:86:6d:11:7b:69:84:6a:06:06:bc:e6:
6b:0e:b1:18:c6:c7:92:7c:3b:77:cf:27:ee:51:f4:28:dd:41:
e3:09:db:22:a2:bd:e4:a3:9d:53:35:eb:d8:8b:c4:68:a7:40:
bd:bf:ba:be:f4:a8:5e:1e:2a:8c:fe:0d:c8:64:4e:d5:b6:fb:
6b:bf:52:65:d5:35:df:bd:cc:81:6e:8f:15:d8:4c:93:17:09:
ab:ff:03:e8:f7:27:96:53:90:fd:81:09:b9:8c:48:6f:30:f4:
fc:9c:61:0c:20:29:4c:07:b1:8a:93:f8:b7:24:8c:10:a3:e4:
e9:55:da:d5:f9:2a:b9:72:c0:73:ff:d2:5f:73:ea:b4:85:c1:
5e:79:bc:84:45:9f:91:ca:93:e8:1e:c6:0b:47:8b:85:a2:4d:
bc:74:34:42:10:2e:4e:51:00:78:49:2e:67:cd:92:c1:75:ab:
d0:4d:f3:49:0b:cb:c4:ec:10:24:2f:2e:9e:00:34:41:4e:6c:
da:78:60:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:28 2026 by rpki-client