Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/IT2kY4wjbEOW8T-a8x5sCnQJBa8.roa
File: IT2kY4wjbEOW8T-a8x5sCnQJBa8.roa (raw, json)
Hash identifier: dYHt8qj7sVvydysKxhz6llPvxQZgHBCBd+FZ5syAMNQ=
Subject key identifier: 21:3D:A4:63:8C:23:6C:43:96:F1:3F:9A:F3:1E:6C:0A:74:09:05:AF
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01A1168830ECF394163BAE65376336904AF1
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/IT2kY4wjbEOW8T-a8x5sCnQJBa8.roa
Signing time: Wed 07 Oct 2026 13:23:06 +0000
ROA not before: Wed 07 Oct 2026 13:23:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218467
IP address blocks: 2a03:5840:16c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:88:30:ec:f3:94:16:3b:ae:65:37:63:36:90:4a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Oct 7 13:23:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=213da4638c236c4396f13f9af31e6c0a740905af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:0f:b2:c3:e1:ec:36:18:fd:76:f7:9d:3e:
5a:21:54:a5:08:ff:36:5c:04:42:f4:fe:9f:dc:4a:
0a:2f:00:4b:74:17:ab:9e:68:5f:74:55:d5:c9:43:
bd:7f:14:72:f0:ec:48:d1:54:e6:e6:4c:33:ea:a4:
d0:94:01:e9:cf:a6:1b:ae:15:16:0e:a1:6c:37:e8:
63:56:e4:e4:84:13:74:b3:80:05:e8:b8:1e:57:d4:
64:68:92:53:f6:be:c9:c0:63:7d:43:bc:e5:ea:0a:
71:4f:e7:91:26:56:87:76:71:07:c2:be:15:da:04:
0c:90:ae:2f:9c:51:c6:54:a4:82:a0:8e:bd:13:33:
a6:38:26:70:a6:ec:4d:94:a0:e8:d6:01:ff:17:30:
f7:ab:44:d8:72:d8:6e:46:24:2b:65:51:72:dc:70:
a7:f8:3d:65:41:d7:b6:ec:a6:60:74:e4:86:55:f9:
77:5c:75:db:56:8a:25:83:6a:df:3e:c5:e4:c8:26:
19:31:8d:37:d0:9f:35:7f:1a:22:35:b6:12:08:76:
69:b6:1c:43:ca:28:a8:9a:5b:33:92:95:04:eb:56:
80:b1:d9:48:a3:66:83:5f:83:7a:22:11:04:bb:fc:
ef:08:e1:81:95:30:fd:f0:28:3d:4b:70:dc:51:54:
ec:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3D:A4:63:8C:23:6C:43:96:F1:3F:9A:F3:1E:6C:0A:74:09:05:AF
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/IT2kY4wjbEOW8T-a8x5sCnQJBa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:16c::/48
Signature Algorithm: sha256WithRSAEncryption
7f:40:92:f6:8b:d2:0d:fa:78:b9:df:85:08:17:1a:8d:8b:76:
e2:4a:c5:ff:9c:1e:4a:ad:7b:25:f8:f4:a8:3a:60:06:8d:38:
0b:f8:98:2a:53:2a:19:ee:a9:db:b5:28:01:88:03:b1:0c:66:
1a:ab:37:cb:04:07:d4:00:93:af:29:20:0f:a8:45:0d:64:e8:
9f:22:4f:6b:6f:5e:b1:03:f7:ba:44:98:d6:ee:89:b9:da:de:
31:d0:6f:8e:c4:95:85:57:d0:93:2b:be:23:ca:29:65:48:39:
fc:68:9c:6c:3f:c4:de:72:f0:0f:80:b0:4f:e6:c7:71:29:5d:
21:45:66:36:14:db:3e:e7:fa:12:e8:f9:72:6d:68:73:99:8a:
a1:dd:dc:30:27:c4:2a:ab:1e:6a:82:1c:9d:ee:be:ed:87:c9:
d7:59:8a:0a:c1:72:a7:45:6a:5a:b3:ce:a6:9c:46:12:f9:14:
30:c8:83:a4:56:6e:c8:4e:24:04:83:64:44:c4:70:87:19:ae:
17:b9:5b:90:6f:bc:82:7d:67:28:d6:ae:e2:a1:6b:56:d9:e9:
c0:e2:fe:48:cb:f2:54:c1:f8:5e:9d:9d:0b:49:e1:ac:99:e1:
34:cc:e2:52:ef:e7:79:ec:b0:75:b8:0e:be:9d:a9:bd:78:22:
34:a4:31:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:26:07 2026 by rpki-client