Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/rrnT0-nV4v4YL_tS4BSabP9CmhM.roa
File: rrnT0-nV4v4YL_tS4BSabP9CmhM.roa (raw, json)
Hash identifier: fTtS0mZuIVs8sI02Ms905UoT6slgOpXTAquX4CzJLSs=
Subject key identifier: AE:B9:D3:D3:E9:D5:E2:FE:18:2F:FB:52:E0:14:9A:6C:FF:42:9A:13
Certificate issuer: /CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Certificate serial: 01A12E5E9EBC8D92E7D0E5A046C38ABA4784
Authority key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/rrnT0-nV4v4YL_tS4BSabP9CmhM.roa
Signing time: Mon 12 Oct 2026 04:28:35 +0000
ROA not before: Mon 12 Oct 2026 04:28:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45590
IP address blocks: 2a00:8422:b216::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:5e:9e:bc:8d:92:e7:d0:e5:a0:46:c3:8a:ba:47:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Validity
Not Before: Oct 12 04:28:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aeb9d3d3e9d5e2fe182ffb52e0149a6cff429a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:51:b9:ad:65:b1:fb:b5:7b:2d:e1:e2:66:
6c:93:b5:1d:47:47:ee:72:6c:97:80:ea:f7:b3:89:
e1:9d:9c:8f:9d:ee:1b:09:80:8f:e5:b6:78:6e:f4:
1c:90:24:74:17:99:5a:0d:52:84:8b:d3:ca:3d:3d:
e8:4d:3b:84:46:64:e3:ac:c8:64:95:2b:33:b0:b5:
52:d3:d3:49:f8:35:18:83:4f:99:02:3e:f2:dc:5d:
8d:37:de:38:88:49:41:fe:87:f7:d9:ba:13:65:20:
51:de:84:77:4f:ac:e5:0a:a0:9e:cc:e3:d4:2e:f4:
85:a5:2b:bf:fb:08:c3:15:d6:0d:c3:d3:17:76:7c:
5c:ec:a5:6c:95:2b:67:96:af:7b:d9:cd:02:b0:78:
bd:c1:e4:e8:49:ea:38:1d:8e:ad:e8:bc:51:e3:f2:
a3:47:3c:0c:ec:f8:b9:9d:53:b1:4c:73:1d:2d:5c:
45:f4:3e:91:81:1e:cd:23:1f:c7:de:88:2e:18:22:
6e:05:21:e2:a5:07:9b:29:a9:d6:69:11:0c:37:92:
90:d3:32:fe:dd:4c:ac:40:8b:b2:03:2a:15:7f:e2:
57:0d:0e:38:74:65:33:82:41:73:8c:8b:d5:c6:d7:
7c:d1:fc:72:19:79:f8:22:98:e0:fa:27:7e:0e:18:
30:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B9:D3:D3:E9:D5:E2:FE:18:2F:FB:52:E0:14:9A:6C:FF:42:9A:13
X509v3 Authority Key Identifier:
keyid:DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/rrnT0-nV4v4YL_tS4BSabP9CmhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:8422:b216::/48
Signature Algorithm: sha256WithRSAEncryption
75:f8:3d:c2:54:3f:50:ec:3b:e6:59:32:84:1c:f7:5f:f4:bd:
20:50:85:c2:0c:a0:0f:b8:0d:8c:c6:62:1a:ce:57:e9:75:7e:
7c:26:fe:34:fb:d3:c5:29:df:5b:d2:97:4d:b9:36:ab:04:8f:
c9:0e:c1:ab:46:58:1f:e9:9f:d1:08:d0:09:64:a3:84:05:59:
72:6b:eb:a2:a7:51:cb:1f:ef:bb:ff:20:8d:41:e5:b4:e8:ba:
f1:2f:63:05:14:45:bd:41:21:c1:88:07:cf:75:50:3a:e8:47:
a9:db:fa:75:1d:cd:5a:2c:fe:a9:1a:0f:cf:b8:29:de:32:6f:
1c:61:75:61:13:4a:0c:4c:90:a8:00:48:87:5b:b2:cd:74:41:
2c:2e:96:fa:63:e7:37:5c:58:d2:ac:23:b9:e8:ae:3b:c2:88:
ee:82:71:76:91:81:d4:0f:42:ea:00:a3:ad:74:16:e8:d5:92:
d0:a3:0a:2c:10:b2:ca:08:79:d2:b9:a4:12:ad:b2:a1:a9:60:
88:a6:ef:e5:40:42:2d:09:f7:e0:45:00:9f:b3:10:73:5c:fc:
68:43:18:b3:60:7b:ba:18:5c:93:5d:f6:b3:74:41:1e:fa:e0:
f1:e3:cd:8c:19:5c:7b:3d:94:63:b6:15:3f:ab:4a:c3:38:98:
46:02:ff:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:40:10 2026 by rpki-client