Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/dGUnoA4LrZZZ5wD4etOA9uhOPuk.roa
File: dGUnoA4LrZZZ5wD4etOA9uhOPuk.roa (raw, json)
Hash identifier: zLfrI9ZaFokCgJbcTiAYsRHrrWqn+fA0ahx8Epjh58w=
Subject key identifier: 74:65:27:A0:0E:0B:AD:96:59:E7:00:F8:7A:D3:80:F6:E8:4E:3E:E9
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019EDA614650F5E35C7515FA3F8B7DC20F8F
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/dGUnoA4LrZZZ5wD4etOA9uhOPuk.roa
Signing time: Thu 18 Jun 2026 10:57:48 +0000
ROA not before: Thu 18 Jun 2026 10:57:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a0f:f42::/32 maxlen: 48
2a0f:f45::/32 maxlen: 48
2a0f:f46::/32 maxlen: 48
2a0f:f47::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:61:46:50:f5:e3:5c:75:15:fa:3f:8b:7d:c2:0f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jun 18 10:57:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=746527a00e0bad9659e700f87ad380f6e84e3ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:8f:be:f1:78:e0:d2:b8:7b:87:87:93:48:
91:d5:61:4d:db:29:d6:24:9d:c3:3f:29:9d:06:73:
13:c1:78:6e:d8:13:47:13:25:2c:31:1a:d3:92:af:
ee:3a:b5:28:1e:5d:c2:6b:49:00:fe:9d:ab:4c:34:
1f:14:64:65:11:5e:3a:6d:a3:78:49:0c:8b:65:f2:
17:e4:97:a1:c7:bd:bf:ad:6d:a4:94:08:ef:8b:27:
b1:3b:53:20:b8:f9:ba:bb:42:70:7a:88:2a:2c:e8:
18:b1:0d:f2:ef:38:9e:44:e5:30:c8:98:53:3e:60:
d2:63:79:36:41:e8:ca:3b:3c:65:f8:b6:9c:48:8a:
a6:82:57:5a:0f:15:7f:8e:41:4f:65:60:ac:14:b4:
11:d8:13:6e:7b:53:77:63:d5:4c:4d:a5:9b:a3:ae:
52:30:9a:62:2e:52:8e:69:d3:9f:2f:7e:1f:87:84:
eb:87:4d:60:1d:f0:66:c3:c3:55:cd:ea:68:93:24:
86:0c:0b:cf:67:fa:b4:0f:47:78:23:09:62:cf:00:
b1:66:75:05:39:31:1b:97:19:5f:4d:ad:2e:f0:c9:
75:22:59:71:11:31:48:ea:78:63:ac:e9:97:02:31:
fc:36:09:d3:1e:3f:8b:d2:d8:27:e4:00:61:5c:37:
f4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:65:27:A0:0E:0B:AD:96:59:E7:00:F8:7A:D3:80:F6:E8:4E:3E:E9
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/dGUnoA4LrZZZ5wD4etOA9uhOPuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:f42::/32
2a0f:f45::-2a0f:f47:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2f:5c:87:cb:cb:45:c3:ae:62:4c:df:dc:1c:f2:e6:0c:ca:c2:
b8:90:94:ca:16:a2:95:9d:b5:dc:a0:0d:f2:5d:65:48:80:fe:
04:d9:5e:4b:49:e0:04:b7:af:fd:55:b8:13:dd:49:c7:ca:96:
1b:6f:d2:7e:16:ea:b6:87:f5:a8:00:29:d2:90:22:b9:2e:fd:
ba:e3:f0:bf:65:8f:b5:fc:e0:80:fa:51:7d:b4:04:0b:66:98:
a8:23:09:66:8a:61:a0:77:64:6f:3a:dc:06:bd:47:a3:bd:29:
7e:8f:7e:30:58:3c:bf:75:2c:d8:22:74:ac:22:1a:4f:e0:54:
d5:8b:ca:7b:fc:bd:d2:bf:4a:d6:1d:ac:b7:55:63:64:54:c6:
7f:63:ef:8b:92:0c:8b:92:ed:a7:1c:80:b6:9f:45:4b:87:39:
f2:87:a6:d1:75:28:80:6e:0f:1b:cb:fe:ee:52:25:f4:03:01:
0c:ed:08:cf:3d:10:79:8e:ca:47:c7:c6:98:4d:a2:9e:f7:ef:
b6:e5:56:d9:4e:0c:d6:f8:87:cc:0e:c2:1c:35:43:f9:39:96:
99:23:9c:39:b7:ee:5e:28:3b:49:62:02:41:d1:de:09:3d:e0:
30:2b:72:48:4d:15:b0:5c:78:a1:bd:40:44:12:13:a5:10:63:
8b:d9:a9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:51 2026 by rpki-client