Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/Nd6V0QCloRDIZfwDcQtVL1w6Z0A.roa
File: Nd6V0QCloRDIZfwDcQtVL1w6Z0A.roa (raw, json)
Hash identifier: TIjs2IbFM1v00nTvmxBW2uHZechx9jNZhQSCyvBAeP8=
Subject key identifier: 35:DE:95:D1:00:A5:A1:10:C8:65:FC:03:71:0B:55:2F:5C:3A:67:40
Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Certificate serial: 019E7534AD60F604C5D3145EFF90E91FB435
Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/Nd6V0QCloRDIZfwDcQtVL1w6Z0A.roa
Signing time: Fri 29 May 2026 19:27:26 +0000
ROA not before: Fri 29 May 2026 19:27:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197974
IP address blocks: 2a10:ab80:400::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:75:34:ad:60:f6:04:c5:d3:14:5e:ff:90:e9:1f:b4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Validity
Not Before: May 29 19:27:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35de95d100a5a110c865fc03710b552f5c3a6740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:87:f6:33:3a:ab:51:21:a9:d9:55:2a:1d:
68:6f:67:38:b7:5e:a9:bc:7a:47:b8:03:33:37:8f:
93:e7:ee:9f:62:6a:16:4e:8d:36:c8:80:55:d0:be:
b2:9f:14:ff:d7:bd:4b:ac:53:1b:aa:f7:0b:d4:a0:
9e:96:29:16:b3:c2:29:42:70:bb:48:8d:4c:4a:d7:
f0:8f:4c:7e:18:5f:60:07:a2:d0:e9:9b:df:57:21:
0a:ac:a8:a8:1d:9b:5d:48:ca:35:e9:a6:67:5e:87:
06:48:71:09:1d:c0:3e:0c:36:6d:76:60:76:29:5d:
85:17:cc:42:94:b6:4e:79:4a:83:21:43:f9:28:6c:
af:81:54:a4:44:d4:4d:c8:7b:ee:3b:d5:7a:79:57:
61:a9:98:93:0b:63:df:21:15:fb:4d:29:d3:c1:94:
80:75:0a:aa:16:83:0c:38:76:85:e4:77:ae:a1:55:
27:6f:4b:a5:3d:4c:22:5a:22:0d:1d:1e:f3:45:f6:
07:4a:0e:26:76:41:4d:9c:0e:a4:81:ae:0e:6f:73:
08:d6:b5:7e:47:cd:0d:61:05:40:44:9d:3d:a7:c9:
30:ed:93:4f:5e:c4:ac:3b:cb:27:bb:2c:39:02:61:
a9:48:53:af:89:62:b6:64:55:a8:80:d1:36:d4:68:
c3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DE:95:D1:00:A5:A1:10:C8:65:FC:03:71:0B:55:2F:5C:3A:67:40
X509v3 Authority Key Identifier:
keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/Nd6V0QCloRDIZfwDcQtVL1w6Z0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ab80:400::/42
Signature Algorithm: sha256WithRSAEncryption
28:ee:34:e0:0a:b4:1b:92:13:4f:3e:9e:76:f8:b3:dd:dd:e0:
87:47:cb:13:2e:3c:22:6a:f3:e9:93:ed:8d:14:03:a3:15:d8:
a1:37:a8:24:70:91:f3:9e:7f:17:81:e3:fa:ea:16:a1:27:4c:
4a:f6:4a:44:0d:7f:5a:4b:90:e5:b0:bc:85:6c:55:44:ea:1d:
d6:60:a2:47:86:c8:ab:56:f5:63:e6:6d:cd:ac:ea:b3:2d:ff:
ba:a7:5b:56:8f:2b:0c:8d:33:a8:ba:11:c3:f5:7c:d4:25:14:
07:a0:0f:77:98:b4:05:db:b8:83:83:97:3a:0a:02:e8:61:09:
74:e3:be:f1:fd:ba:54:7e:2a:9f:db:9f:52:d0:b8:c7:a9:40:
ca:36:50:b0:43:9a:76:64:75:51:6e:4e:c5:70:4a:fe:84:6e:
9e:0b:f8:43:10:58:15:a3:7b:3d:43:f0:d5:dc:73:bc:4a:51:
a0:e8:c8:dc:e8:3b:aa:60:cf:8c:b7:64:1c:39:4c:ab:cc:8b:
d7:e5:71:49:cc:47:fe:63:6f:39:b9:0a:fc:f7:8b:ec:72:ca:
3e:a9:7f:d8:e1:53:2c:03:81:37:d0:0b:97:51:98:94:a8:1e:
dd:1d:b2:41:04:f3:95:93:93:c6:b6:06:e9:99:7f:b5:73:ec:
a2:79:70:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:40:42 2026 by rpki-client