Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/aBgCcG9RRforIkCARYIT340f4l8.roa
File: aBgCcG9RRforIkCARYIT340f4l8.roa (raw, json)
Hash identifier: N6x6dHF8Z4yQ497xX2jNu6IEX/saBW0DxfsXtmg1DwE=
Subject key identifier: 68:18:02:70:6F:51:45:FA:2B:22:40:80:45:82:13:DF:8D:1F:E2:5F
Certificate issuer: /CN=3527fb4979cfc2a2ce266b04f917bdb68112574e
Certificate serial: 019F2368DC328BF78748152FBDF23D011E87
Authority key identifier: 35:27:FB:49:79:CF:C2:A2:CE:26:6B:04:F9:17:BD:B6:81:12:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSf7SXnPwqLOJmsE-Re9toESV04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/aBgCcG9RRforIkCARYIT340f4l8.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35506
IP address blocks: 2a10:d000::/29 maxlen: 29
2a10:d000:3::/48 maxlen: 48
2a10:d000:14::/48 maxlen: 48
2a10:d000:1c::/48 maxlen: 48
2a10:d001::/36 maxlen: 36
2a10:d001::/38 maxlen: 38
2a10:d001:1000::/36 maxlen: 36
2a10:d001:1000::/38 maxlen: 38
2a10:d001:1800::/38 maxlen: 38
2a10:d001:2000::/36 maxlen: 36
2a10:d001:2000::/38 maxlen: 38
2a10:d001:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/NSf7SXnPwqLOJmsE-Re9toESV04.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/NSf7SXnPwqLOJmsE-Re9toESV04.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSf7SXnPwqLOJmsE-Re9toESV04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:dc:32:8b:f7:87:48:15:2f:bd:f2:3d:01:1e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3527fb4979cfc2a2ce266b04f917bdb68112574e
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=681802706f5145fa2b224080458213df8d1fe25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d4:43:36:0b:fa:42:bb:df:b2:11:02:9c:5c:
e6:33:e5:de:bb:ef:43:48:4f:ae:ef:a4:e3:57:f9:
8a:a1:a2:78:3c:d7:d7:7e:32:e4:ac:6b:83:89:ce:
34:a8:2a:02:30:55:0c:37:8d:e3:b9:f8:fc:ff:57:
b2:57:26:7c:e9:95:0a:46:d9:10:96:44:33:d5:7b:
59:f2:bb:93:98:0b:30:15:2a:3e:e9:af:98:f9:9d:
d3:17:54:ac:31:7a:36:c4:4c:f2:36:89:c8:8c:83:
44:b9:6f:d6:1f:64:b1:2a:f7:e9:8c:0f:f8:e0:d3:
9a:25:fd:48:80:25:00:5c:e9:08:6c:43:b0:da:db:
8f:39:57:bb:6d:37:c2:aa:1b:c6:ec:b6:2c:87:b4:
74:ce:be:57:1f:14:0b:0b:58:92:3d:20:8f:7f:95:
ae:99:08:0e:a2:60:83:89:c2:da:7e:dc:31:5e:1b:
38:54:9b:c9:9d:a6:6e:14:3f:36:e3:69:50:93:54:
ce:e1:8e:3c:8d:23:3b:3a:e9:e1:ce:1b:9f:67:c6:
42:a3:ea:0b:07:a0:56:3e:8e:b2:71:3a:8a:5f:00:
25:f6:cb:8e:27:cb:d1:50:95:dd:6c:f0:f9:9b:f1:
7c:f0:64:53:88:a6:35:b3:b3:90:98:64:d6:45:a3:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:18:02:70:6F:51:45:FA:2B:22:40:80:45:82:13:DF:8D:1F:E2:5F
X509v3 Authority Key Identifier:
keyid:35:27:FB:49:79:CF:C2:A2:CE:26:6B:04:F9:17:BD:B6:81:12:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSf7SXnPwqLOJmsE-Re9toESV04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/aBgCcG9RRforIkCARYIT340f4l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/NSf7SXnPwqLOJmsE-Re9toESV04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:d000::/29
Signature Algorithm: sha256WithRSAEncryption
78:f1:66:08:b9:01:3d:9b:4f:9e:e5:1c:37:d2:d4:35:44:7d:
96:dd:84:07:d8:5d:66:d6:d8:0e:34:17:dd:aa:6c:dc:bd:d2:
65:4c:06:fe:c2:34:c2:d8:21:dc:34:01:6d:be:b4:34:0f:7e:
a5:12:97:ab:67:0c:89:0a:1e:da:ae:e0:fc:02:ed:ec:50:09:
18:35:76:26:77:46:27:bd:76:22:28:5a:1e:9e:4f:7d:d1:e0:
c0:4e:07:27:8b:72:b7:c1:22:c3:09:3c:d2:b7:57:d8:c8:a9:
ce:96:23:18:05:7c:e3:dd:db:20:51:09:a1:b0:76:41:34:9d:
94:a1:38:11:91:52:f8:c0:f4:ce:e9:f5:a5:f3:f5:6a:8b:ce:
12:b0:d7:02:dd:50:cd:f4:83:7c:bd:ed:ac:0c:48:3e:cb:0d:
ee:4c:c3:ab:d4:30:85:e5:0a:35:a3:6f:7e:9c:05:20:0a:7c:
09:94:00:b3:e2:d2:df:35:2b:eb:7e:3d:7d:f3:7e:26:a0:70:
ae:d7:a2:7d:0c:dc:c4:dd:36:d2:13:c5:4c:cc:0c:8c:14:01:
1b:80:75:38:11:42:31:92:47:24:71:39:52:ed:8c:03:0c:2e:
9c:de:23:e8:38:a8:79:a3:00:0d:96:3e:21:53:2c:c4:0f:a8:
fa:f6:04:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 04:04:35 2026 by rpki-client