Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/0PwBP1m5V8tHPFCHGGYOau0rRTc.roa
File: 0PwBP1m5V8tHPFCHGGYOau0rRTc.roa (raw, json)
Hash identifier: M0W/FLJbKezFVRY+boZRSGO4f4RhltYple/V23X0j4c=
Subject key identifier: D0:FC:01:3F:59:B9:57:CB:47:3C:50:87:18:66:0E:6A:ED:2B:45:37
Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Certificate serial: 019F03863B43D8A0640C91CD858519395880
Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/0PwBP1m5V8tHPFCHGGYOau0rRTc.roa
Signing time: Fri 26 Jun 2026 10:42:36 +0000
ROA not before: Fri 26 Jun 2026 10:42:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212112
IP address blocks: 2a10:ab80:3e3::/48 maxlen: 48
2a10:ab80:3e8::/48 maxlen: 48
2a10:ab80:3fd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:86:3b:43:d8:a0:64:0c:91:cd:85:85:19:39:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Validity
Not Before: Jun 26 10:42:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0fc013f59b957cb473c508718660e6aed2b4537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4f:c2:04:ea:de:d3:70:76:30:fb:65:12:de:
04:ed:55:ce:8d:5e:33:f0:dd:b4:82:43:ab:be:2f:
59:37:d0:93:de:0b:7d:32:d9:95:02:81:4e:a4:a8:
5c:4d:6a:df:74:6c:76:89:3b:57:4b:d4:25:ba:a9:
f5:2a:9e:fb:81:a8:a0:3c:d9:53:15:fa:76:14:e4:
66:cc:96:0d:4c:78:71:a3:09:f1:07:99:69:89:0f:
6a:bf:65:96:cb:51:b8:ee:ec:4d:07:b8:a1:21:a7:
8e:51:13:4e:15:95:c0:d0:74:8f:ff:d2:50:4b:4d:
7a:2a:9a:a8:cb:a4:ec:f2:78:96:91:3a:87:00:ab:
1a:ac:04:e5:e0:5b:9d:71:9a:61:bc:c9:06:bf:78:
24:e5:1e:82:8c:b6:73:05:cf:67:b8:13:cd:a2:1f:
00:66:6c:dc:cc:53:35:e4:c5:14:fb:30:e3:57:01:
58:f3:c6:4e:80:3e:54:17:6c:8f:02:7f:56:6f:d3:
e9:0c:d2:b1:e2:70:41:42:01:91:1b:04:1c:6c:98:
82:a4:0f:c2:1c:e3:b3:e4:22:e6:d7:ec:5a:a4:70:
c4:f0:df:d8:ae:64:24:51:15:12:25:1a:80:c1:28:
21:93:c4:d5:d7:c0:52:82:37:5b:d6:b0:7d:a7:b8:
6c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FC:01:3F:59:B9:57:CB:47:3C:50:87:18:66:0E:6A:ED:2B:45:37
X509v3 Authority Key Identifier:
keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/0PwBP1m5V8tHPFCHGGYOau0rRTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ab80:3e3::/48
2a10:ab80:3e8::/48
2a10:ab80:3fd::/48
Signature Algorithm: sha256WithRSAEncryption
5a:20:e1:fc:e3:3c:7c:e8:2b:e8:c4:52:dd:b1:6a:a5:bb:93:
32:ce:db:12:22:29:22:59:33:50:65:eb:b2:98:d3:39:85:75:
3a:e5:a1:cd:36:15:9e:fb:23:bc:98:6d:71:47:b4:b8:86:c4:
27:62:5e:67:18:aa:20:ea:8e:3e:85:eb:26:bd:7f:b9:72:f0:
bb:b7:06:9e:bf:71:3d:17:df:1f:cf:6e:4d:70:d4:36:4a:66:
a4:8e:30:06:45:c2:88:23:42:79:26:64:9c:d2:ab:91:d9:62:
f2:96:03:93:13:87:02:13:f3:41:8e:db:9b:0a:1b:01:c3:86:
84:dc:b7:c6:e0:9f:2d:b7:8d:e8:41:78:8a:25:52:01:8a:20:
a5:7b:ad:88:2d:95:e9:1d:f6:e2:0c:f1:df:30:0c:12:58:67:
9a:85:a6:31:94:c5:64:de:11:de:e7:48:da:32:a4:aa:8e:9b:
1e:60:5c:f3:c5:77:3d:e4:6d:be:2a:ff:f6:79:42:dd:24:39:
22:ad:21:bd:a4:ae:91:b8:ff:0b:9e:9d:b6:05:b1:43:f2:bb:
3d:81:1c:ec:68:a4:81:29:21:44:82:9a:65:79:de:32:f5:3b:
82:fe:6a:e3:db:56:31:f5:40:bb:b0:c9:8d:73:9c:41:4a:42:
da:f9:f4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:30 2026 by rpki-client