Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/AmoYlDKHjerHGsvg7FrxxFF2y4Q.roa
File: AmoYlDKHjerHGsvg7FrxxFF2y4Q.roa (raw, json)
Hash identifier: drag7nsVu+DrWQCKccDv4wRu09009CiMl/36R571JNM=
Subject key identifier: 02:6A:18:94:32:87:8D:EA:C7:1A:CB:E0:EC:5A:F1:C4:51:76:CB:84
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01A033350683A98EC53C8785BFF393ADF26A
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/AmoYlDKHjerHGsvg7FrxxFF2y4Q.roa
Signing time: Mon 24 Aug 2026 09:58:28 +0000
ROA not before: Mon 24 Aug 2026 09:58:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219283
IP address blocks: 2a05:1086::/32 maxlen: 48
2a0c:e641::/32 maxlen: 48
2a0d:2681::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:35:06:83:a9:8e:c5:3c:87:85:bf:f3:93:ad:f2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Aug 24 09:58:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=026a189432878deac71acbe0ec5af1c45176cb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9e:38:be:fa:0c:5d:fb:e8:f7:36:05:e9:9d:
9f:39:91:77:5c:f5:9c:77:12:a6:1d:b7:a3:2f:8e:
48:0a:d8:ef:2b:62:f1:b2:98:d0:c8:c5:28:60:1f:
e9:ea:5e:9e:b9:1d:47:f4:cf:c9:da:d7:b0:30:48:
ec:b3:bf:4a:cc:fa:02:73:17:04:82:90:b7:f2:67:
2b:f5:f6:94:c3:b7:b7:58:e9:9e:f4:56:17:69:d9:
32:f1:4a:fe:90:d1:36:fc:cf:9e:db:45:34:fe:fe:
66:c9:6b:68:9a:24:bd:89:90:1b:14:52:3b:fc:86:
a6:1d:f0:63:42:f6:6c:23:c6:25:7d:8b:93:85:c0:
96:84:b0:f1:ea:94:94:69:08:86:92:2c:dd:99:e3:
e0:8a:5e:c3:1f:45:97:a2:22:cf:d0:51:10:b1:34:
1b:27:e6:94:fe:9e:18:24:0c:e3:9e:1a:d3:e2:1b:
96:f8:99:fb:a9:21:b6:87:45:98:e4:bc:15:24:53:
f6:01:6c:0b:45:6c:25:eb:fb:38:8b:01:03:73:b7:
53:1e:75:de:d9:4c:9a:06:25:04:fd:94:67:c6:63:
2f:4f:61:ac:67:cd:81:3a:62:87:63:7b:76:07:21:
e0:12:fd:2b:08:9f:a3:b0:13:28:73:42:34:a2:52:
90:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6A:18:94:32:87:8D:EA:C7:1A:CB:E0:EC:5A:F1:C4:51:76:CB:84
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/AmoYlDKHjerHGsvg7FrxxFF2y4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1086::/32
2a0c:e641::/32
2a0d:2681::/32
Signature Algorithm: sha256WithRSAEncryption
4f:69:b9:48:70:d8:71:8d:d3:54:79:21:34:9e:e2:e1:66:7f:
53:d5:c3:44:13:ec:c3:94:7b:cc:b3:a0:27:6f:50:d5:9f:ba:
c5:08:60:19:9d:3b:37:f3:c7:7a:b7:84:cc:2d:62:25:c0:19:
91:7e:2b:c0:e0:44:5e:9a:8a:1e:ca:ee:cf:49:4f:d1:59:3e:
83:2d:27:4b:e1:59:82:b5:8e:ec:e7:13:37:31:98:00:9f:8d:
7f:95:3f:91:b1:1e:7a:bc:10:77:e3:f1:ce:ce:f0:5c:30:be:
d4:8d:2c:73:1f:28:c8:67:a0:e5:9d:6f:1d:ae:49:03:02:d6:
c8:42:77:ee:4e:75:76:7e:89:72:97:e2:1b:2e:07:81:ae:aa:
29:59:74:7a:13:d5:0b:80:b6:79:56:ca:75:cc:6b:13:dc:f0:
77:e3:35:eb:72:2f:e8:a8:e3:01:2d:bd:15:ac:10:8d:7d:42:
eb:a0:5f:20:5a:7d:b3:cd:b7:18:c3:7e:7d:29:f5:0d:86:31:
99:27:9d:bb:c1:4a:ed:1b:ce:6e:f3:8c:b7:6f:38:9d:80:6f:
ac:68:92:c2:3c:bd:9c:cc:81:dd:ba:08:d3:f3:97:0d:82:8a:
f4:e2:68:6c:8c:2c:87:eb:7f:d7:bf:a7:63:95:9c:26:2a:a3:
ff:e3:de:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:20:22 2026 by rpki-client