Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/dFXsJZfQgG4PPcKpL9A4u7SceGI.roa
File: dFXsJZfQgG4PPcKpL9A4u7SceGI.roa (raw, json)
Hash identifier: +r3bmYepYhEkqhELDDbQyhEm/b/SgOFhDC0nC5oacBE=
Subject key identifier: 74:55:EC:25:97:D0:80:6E:0F:3D:C2:A9:2F:D0:38:BB:B4:9C:78:62
Certificate issuer: /CN=5dd312211f1957129c21c417503d43b00aa26b43
Certificate serial: 01A0EE68C7D174E9B59A97CDFCFA8F5D2D11
Authority key identifier: 5D:D3:12:21:1F:19:57:12:9C:21:C4:17:50:3D:43:B0:0A:A2:6B:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdMSIR8ZVxKcIcQXUD1DsAqia0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/dFXsJZfQgG4PPcKpL9A4u7SceGI.roa
Signing time: Tue 29 Sep 2026 18:23:59 +0000
ROA not before: Tue 29 Sep 2026 18:23:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8987
IP address blocks: 2001:3fc4::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdMSIR8ZVxKcIcQXUD1DsAqia0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:68:c7:d1:74:e9:b5:9a:97:cd:fc:fa:8f:5d:2d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd312211f1957129c21c417503d43b00aa26b43
Validity
Not Before: Sep 29 18:23:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7455ec2597d0806e0f3dc2a92fd038bbb49c7862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:23:72:ae:99:3e:a6:6c:b5:45:35:6c:6b:76:
a7:08:fc:14:c6:2c:e7:bd:1a:9a:58:de:00:dc:d8:
a8:ef:4f:98:3e:d1:d0:2f:05:b3:8b:8a:dc:31:18:
c1:3f:be:4a:65:2c:44:c7:23:06:a4:a2:bc:74:45:
a3:b4:6f:f2:df:f3:89:48:48:dc:13:b9:e8:20:46:
88:68:4f:50:ca:90:1c:74:22:c3:37:9f:6e:15:5f:
3c:8d:69:c9:2c:f1:5b:be:f7:80:e7:e0:15:c5:23:
09:7e:24:d5:32:7c:de:f5:fb:c9:f0:76:31:e9:12:
fc:20:fe:17:36:cb:dc:89:45:2f:d8:f4:15:91:bf:
de:fc:59:f5:aa:63:b0:6f:c8:60:20:72:09:29:4e:
31:31:09:e0:90:58:44:b8:f0:40:b6:f6:e6:7e:1b:
e5:06:69:64:12:d8:87:04:1e:84:ea:f1:34:6a:f4:
cd:60:95:ac:1f:0d:66:89:c9:1f:d7:44:05:6e:28:
1c:77:05:f2:6c:01:dc:0c:e7:31:53:2d:be:72:e8:
26:c7:ec:84:16:04:a8:a4:1f:3d:42:1b:72:df:a1:
c7:e6:37:84:22:72:51:63:68:f0:bb:d7:0c:64:ae:
1c:27:e0:9f:26:bc:80:f2:cf:03:d9:da:39:67:02:
c4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:55:EC:25:97:D0:80:6E:0F:3D:C2:A9:2F:D0:38:BB:B4:9C:78:62
X509v3 Authority Key Identifier:
keyid:5D:D3:12:21:1F:19:57:12:9C:21:C4:17:50:3D:43:B0:0A:A2:6B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdMSIR8ZVxKcIcQXUD1DsAqia0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/dFXsJZfQgG4PPcKpL9A4u7SceGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc4::/36
Signature Algorithm: sha256WithRSAEncryption
98:ef:cf:01:fe:f8:b1:42:44:3c:44:dd:87:4e:58:44:8c:0b:
dd:49:e2:c4:0b:d0:07:d8:4f:3d:60:98:df:1f:62:e2:1e:5a:
8b:f4:cc:15:b9:27:b8:61:39:42:f7:c0:2b:2c:5e:f7:78:76:
c7:85:c4:b3:60:ff:1c:d9:6a:dc:41:06:b0:f4:c0:ba:6c:d0:
8c:41:28:0a:fc:c3:95:47:e1:76:a9:bb:18:49:51:c2:e0:c3:
76:3d:e8:bd:f7:b9:6a:0f:4b:65:cb:2d:9b:3b:90:6f:bd:ff:
e8:f3:45:72:08:c1:46:e6:91:a4:20:96:63:7a:98:8d:9d:2d:
4f:fc:c2:18:79:9c:a2:89:65:3c:49:b1:dd:de:93:b5:b4:2d:
4d:3d:21:6b:e6:c3:93:79:43:e1:70:29:c3:fa:60:a4:6a:a8:
e8:a4:90:78:ef:a6:d5:4b:fe:b4:4e:ea:cb:14:b2:69:e2:c9:
bc:50:9f:b6:25:f0:98:79:d4:db:49:fe:4d:c7:9f:f4:f8:1c:
37:95:3b:20:f9:3a:00:f9:c2:67:65:1e:02:4d:ff:35:bb:b4:
3a:49:60:55:8f:0a:22:73:f6:01:ac:bf:32:01:85:34:01:3c:
93:1d:a0:8d:5d:8b:ac:7e:31:d2:1e:f4:50:1a:98:97:43:d4:
08:a5:d4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:54:23 2026 by rpki-client