Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/T8WzAwgcqS-HDNz8qD_PiJ9i1Lg.roa
File: T8WzAwgcqS-HDNz8qD_PiJ9i1Lg.roa (raw, json)
Hash identifier: IxwvcdTTbT0u6zZgntcEj3dQZBt2OszUAAD+QbaTz/M=
Subject key identifier: 4F:C5:B3:03:08:1C:A9:2F:87:0C:DC:FC:A8:3F:CF:88:9F:62:D4:B8
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 019FE2F9850DCB766B5AAB9FCB7341BF5DC0
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/T8WzAwgcqS-HDNz8qD_PiJ9i1Lg.roa
Signing time: Sat 08 Aug 2026 20:03:51 +0000
ROA not before: Sat 08 Aug 2026 20:03:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219040
IP address blocks: 2a10:a340:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e2:f9:85:0d:cb:76:6b:5a:ab:9f:cb:73:41:bf:5d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Aug 8 20:03:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fc5b303081ca92f870cdcfca83fcf889f62d4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f1:d8:de:61:37:e9:ea:f6:45:c4:89:da:1d:
73:4c:de:ef:de:e2:4a:5f:76:39:87:52:ac:7d:26:
f7:18:95:b2:d0:83:9f:87:b8:8b:91:dc:0e:19:1f:
c7:1a:69:d0:24:b6:ff:11:a4:22:d5:20:51:0c:17:
72:32:7e:a0:5e:b8:f8:93:66:bd:aa:9b:1d:d8:9d:
0f:0b:5f:69:82:3b:fe:d5:8b:9e:84:c7:bd:40:66:
f8:ee:9b:c2:10:ea:6d:19:39:41:79:7b:25:1c:b6:
0d:2f:45:06:1b:1f:b3:8c:e8:38:b8:6c:aa:fe:0b:
12:47:7d:c8:b5:5c:0e:ee:6a:93:4f:6b:07:e5:11:
75:86:e9:76:10:2d:48:4c:b3:14:bb:7d:d8:b3:68:
3b:74:e1:de:70:88:4c:17:19:8d:96:a2:dd:2c:68:
4e:ed:4c:3d:c7:d0:37:e6:31:5e:86:bf:48:f7:3b:
f7:3e:b8:df:4c:20:23:b9:5b:3a:f7:19:08:17:d9:
6b:a2:64:ae:d4:76:2a:cc:f6:a1:60:3b:0e:51:1a:
4e:25:54:dc:83:2b:6c:dc:f3:40:ba:30:82:af:d9:
57:7d:2b:40:a6:c4:0e:62:38:62:6a:6c:f9:e1:c3:
81:5f:54:26:f6:5d:5e:f4:d4:b1:20:d3:71:d5:a1:
89:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C5:B3:03:08:1C:A9:2F:87:0C:DC:FC:A8:3F:CF:88:9F:62:D4:B8
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/T8WzAwgcqS-HDNz8qD_PiJ9i1Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:a340:1::/48
Signature Algorithm: sha256WithRSAEncryption
be:12:f0:e3:4c:97:b6:5b:93:0c:34:a6:34:1b:96:27:97:31:
e2:90:ea:fe:72:b2:ab:63:98:7c:e6:9e:5b:9f:67:cb:0c:6e:
08:cf:1c:bf:de:d7:c1:ff:f0:cc:80:86:98:61:85:43:e3:72:
90:87:cd:c9:08:72:59:85:0d:a8:e1:cc:05:a8:19:82:1a:ee:
d1:9c:c5:0e:dd:b6:8b:2e:8d:03:38:02:9b:87:46:36:dc:cc:
58:f4:1b:bb:6d:48:9b:4a:40:b2:f2:6c:54:18:bd:0f:9e:48:
6b:a7:ec:e9:76:91:07:e9:a2:29:24:31:94:06:17:bb:32:2a:
c6:10:fd:70:8e:cd:67:67:3f:d1:c3:ea:91:22:58:54:bb:b3:
9d:cd:1a:91:91:74:09:8a:01:d4:c0:e2:2d:b1:2c:71:f5:b5:
d6:5b:4c:28:8d:46:b8:01:ac:06:20:ec:c2:0a:d5:62:09:34:
8a:cf:e8:a5:05:cd:69:d2:3a:37:97:62:13:d7:40:8f:da:54:
27:20:7f:7f:97:f1:53:fd:d4:81:86:47:3d:43:f3:fe:f2:73:
63:b9:51:fc:d1:7e:d1:29:27:b0:80:b3:bf:ac:6d:7f:dd:27:
ad:b1:2c:0d:0f:aa:48:0b:7a:2e:35:a1:51:cd:b8:27:6f:ea:
09:5f:9a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:26:45 2026 by rpki-client