Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/Ci44PPeGoDr5RPkrR3bqNrfS0l4.roa
File: Ci44PPeGoDr5RPkrR3bqNrfS0l4.roa (raw, json)
Hash identifier: +XucxKwhDxCm+JFWu78cScbm5vRFUONH/yt6IuhwiuI=
Subject key identifier: 0A:2E:38:3C:F7:86:A0:3A:F9:44:F9:2B:47:76:EA:36:B7:D2:D2:5E
Certificate issuer: /CN=2953a3004ba20af9ddad4a7bed7fa2b37a1dc18f
Certificate serial: 01A157FDE29E430A160988DAF5D1ABEE1BDC
Authority key identifier: 29:53:A3:00:4B:A2:0A:F9:DD:AD:4A:7B:ED:7F:A2:B3:7A:1D:C1:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVOjAEuiCvndrUp77X-is3odwY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/Ci44PPeGoDr5RPkrR3bqNrfS0l4.roa
Signing time: Tue 20 Oct 2026 06:26:58 +0000
ROA not before: Tue 20 Oct 2026 06:26:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197346
IP address blocks: 2a12:82c7:ff00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/KVOjAEuiCvndrUp77X-is3odwY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/KVOjAEuiCvndrUp77X-is3odwY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVOjAEuiCvndrUp77X-is3odwY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:fd:e2:9e:43:0a:16:09:88:da:f5:d1:ab:ee:1b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2953a3004ba20af9ddad4a7bed7fa2b37a1dc18f
Validity
Not Before: Oct 20 06:26:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a2e383cf786a03af944f92b4776ea36b7d2d25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ce:e2:d0:64:92:57:28:b0:3f:10:9f:26:17:
44:de:c0:e4:55:db:e7:05:09:89:c6:f0:12:5a:52:
f1:c1:3f:40:70:ed:fa:90:57:06:f7:0f:d3:42:cf:
22:e4:90:77:30:b6:c7:a8:2f:f8:0f:25:7f:37:81:
8f:ff:14:05:38:41:a6:3d:c0:d8:87:69:87:31:64:
86:c2:40:54:47:6b:34:73:17:69:5e:db:cb:e3:74:
42:3a:a0:98:61:7d:09:77:4c:aa:65:f9:da:0a:71:
03:42:d8:70:77:45:86:c4:37:ae:19:8d:b4:58:ee:
00:cb:7b:87:03:03:48:9e:6f:15:64:06:4a:63:68:
05:d0:f1:67:9f:f3:27:85:00:99:ff:eb:1e:86:20:
5c:02:18:e9:89:9a:a0:49:ff:20:64:99:2f:ca:c4:
b9:ba:e5:a2:7a:5c:58:47:6a:f9:db:57:20:aa:12:
fb:60:29:78:ee:92:a7:a4:db:ea:8f:90:48:c6:56:
c4:e8:19:32:da:8e:a0:2f:27:d4:5b:9d:c9:51:af:
5f:b5:36:86:d7:4d:d4:ec:7e:79:a3:c6:cf:b6:f8:
71:04:12:ee:06:05:ef:c5:d9:01:6b:59:da:53:38:
f2:ea:6e:d9:b6:2a:fb:55:71:8f:0a:a1:78:a1:f2:
f7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2E:38:3C:F7:86:A0:3A:F9:44:F9:2B:47:76:EA:36:B7:D2:D2:5E
X509v3 Authority Key Identifier:
keyid:29:53:A3:00:4B:A2:0A:F9:DD:AD:4A:7B:ED:7F:A2:B3:7A:1D:C1:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVOjAEuiCvndrUp77X-is3odwY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/Ci44PPeGoDr5RPkrR3bqNrfS0l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/KVOjAEuiCvndrUp77X-is3odwY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:82c7:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
74:da:eb:ff:57:bd:42:eb:03:5d:7b:28:1f:51:bd:47:86:e2:
c4:3d:f1:32:85:56:49:71:c0:fc:14:2d:70:72:81:3d:fe:e8:
92:14:07:f3:80:7b:76:72:b1:7e:a7:6f:20:be:21:37:33:c9:
ed:47:19:6f:24:ed:22:f3:b2:f2:87:f1:0b:45:35:1e:cf:66:
59:19:fd:a8:f1:0c:df:88:46:65:71:a7:2d:50:0f:a7:14:5c:
17:3a:37:66:ec:de:d4:ba:4f:d0:db:af:76:a8:9a:30:12:ab:
99:18:65:71:39:c7:61:70:ea:38:38:9e:3f:44:c4:36:ba:06:
9d:bb:c1:a6:f4:6b:49:bc:2e:c0:15:ec:12:c5:98:8d:02:0c:
3c:ee:e1:be:66:86:f9:ca:b0:ac:d8:73:a7:9a:6b:54:fd:f4:
fa:91:d6:0a:f5:b3:ad:00:b3:a2:33:8b:cc:11:f5:18:45:da:
36:60:bd:29:cc:15:c8:86:e0:b7:4f:c2:12:5c:86:18:42:2a:
51:88:34:74:25:81:5f:c3:6f:a5:f1:28:4d:64:1f:3b:b4:fa:
56:73:b7:6b:48:2f:95:01:aa:00:d6:dd:ce:14:9a:46:4e:78:
84:28:2f:1c:e8:d8:0e:03:59:e2:a8:fa:57:17:a6:dc:7c:b0:
d0:9b:72:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:02:23 2026 by rpki-client