Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/imw0YaqHMbeh2Eu4mqaIgeFRGz4.roa
File: imw0YaqHMbeh2Eu4mqaIgeFRGz4.roa (raw, json)
Hash identifier: RVGmKEtokiWtCBkVplAdI/58qCmLiJg+HqxFMdo09f0=
Subject key identifier: 8A:6C:34:61:AA:87:31:B7:A1:D8:4B:B8:9A:A6:88:81:E1:51:1B:3E
Certificate issuer: /CN=54cb8cae3b35b19c8ca337aa936ed78ec9194006
Certificate serial: 019F23689CBEEF789F9B6EECEF2FB26FF880
Authority key identifier: 54:CB:8C:AE:3B:35:B1:9C:8C:A3:37:AA:93:6E:D7:8E:C9:19:40:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMuMrjs1sZyMozeqk27XjskZQAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/imw0YaqHMbeh2Eu4mqaIgeFRGz4.roa
Signing time: Thu 02 Jul 2026 15:18:06 +0000
ROA not before: Thu 02 Jul 2026 15:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206059
IP address blocks: 2a0e:3780:8150::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/VMuMrjs1sZyMozeqk27XjskZQAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/VMuMrjs1sZyMozeqk27XjskZQAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMuMrjs1sZyMozeqk27XjskZQAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9c:be:ef:78:9f:9b:6e:ec:ef:2f:b2:6f:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cb8cae3b35b19c8ca337aa936ed78ec9194006
Validity
Not Before: Jul 2 15:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a6c3461aa8731b7a1d84bb89aa68881e1511b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:3e:b1:96:e6:d9:8f:ae:d3:01:d4:15:69:
73:bb:4b:28:17:30:26:f7:0d:05:6b:17:5a:1d:3b:
1c:b9:61:d7:e7:08:ca:75:a5:f0:51:6a:6f:73:ff:
3b:59:75:b3:7a:13:a1:bc:bb:14:19:20:bf:84:4a:
f7:ce:35:21:0e:47:ad:b2:87:2b:5f:af:37:50:b9:
29:f0:08:de:71:3d:3b:90:91:03:ef:74:1b:15:fc:
06:2c:4c:94:c3:80:6a:f7:c4:81:65:7d:4f:2d:5d:
bf:25:9e:1e:4f:d3:3c:40:65:cf:4d:d8:51:9b:a9:
47:de:f2:d8:04:b8:61:04:16:3a:99:fd:34:87:87:
09:56:ac:03:d1:9f:60:09:7d:00:92:25:a2:7e:02:
f5:78:26:2b:0d:ae:b7:54:92:4d:29:71:01:75:be:
52:f3:4f:07:0b:bf:5f:86:cd:c5:37:69:2e:44:e9:
ae:74:8f:fc:9c:9a:35:a6:28:66:df:11:79:d7:00:
00:81:c6:63:52:90:37:b4:50:88:f8:49:e2:ac:6d:
2b:b4:cf:b2:f0:27:4f:13:58:3e:fd:b0:ba:91:60:
47:9b:a8:d8:24:d7:32:4e:e9:2e:3d:73:8a:73:03:
73:a6:3f:2c:25:d7:4d:9d:39:df:9f:9b:86:0e:19:
1c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6C:34:61:AA:87:31:B7:A1:D8:4B:B8:9A:A6:88:81:E1:51:1B:3E
X509v3 Authority Key Identifier:
keyid:54:CB:8C:AE:3B:35:B1:9C:8C:A3:37:AA:93:6E:D7:8E:C9:19:40:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMuMrjs1sZyMozeqk27XjskZQAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/imw0YaqHMbeh2Eu4mqaIgeFRGz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/VMuMrjs1sZyMozeqk27XjskZQAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3780:8150::/48
Signature Algorithm: sha256WithRSAEncryption
38:3d:a4:7d:be:47:8a:cf:f6:5f:fb:e0:d0:cd:bc:1a:d7:15:
b5:4a:05:c5:cf:b1:aa:83:53:da:39:6c:e2:e3:be:4c:ac:0b:
54:12:c4:92:06:1a:2b:07:0f:39:21:e8:54:c4:bb:95:70:c9:
8b:0f:68:ba:70:16:ab:a3:97:f1:47:56:a7:f7:34:ca:91:21:
dc:9e:ce:a9:f5:2d:23:de:07:66:1f:ae:d8:c7:ce:4e:d0:c3:
4f:0d:52:b7:67:7a:5e:e4:5a:1a:68:06:c8:2f:cf:f8:86:7b:
b4:e6:0c:09:1e:a3:44:e7:40:b7:a2:7c:94:39:5a:55:65:1d:
e4:98:81:3a:4f:a1:d4:95:c4:20:e6:1f:d5:9c:92:c1:99:01:
e0:17:fb:0c:73:b5:00:dc:67:f6:41:89:cf:08:76:bc:0b:5c:
72:f9:13:0e:73:cf:e7:f2:d0:90:dc:8d:df:9f:9a:d9:95:c0:
4a:03:a7:74:c9:76:0a:33:09:68:7c:74:22:2c:9c:b1:1c:3a:
58:11:d9:15:f3:c5:c1:61:6f:33:c1:2f:09:a5:44:99:b1:19:
45:e9:cc:43:be:f5:f4:17:e8:22:71:b9:1d:a8:dc:c6:b0:6c:
f1:91:84:b3:25:34:43:b9:c8:ef:e7:2f:be:9a:63:18:c6:68:
df:53:69:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:36:47 2026 by rpki-client