Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/rF9890rcpu6ifdQfa1bbtZ2U7_w.roa
File: rF9890rcpu6ifdQfa1bbtZ2U7_w.roa (raw, json)
Hash identifier: 5qbAhYL2T3ipvFEjVlq/CVTW6J57GPEWuaRsZl/OFXo=
Subject key identifier: AC:5F:7C:F7:4A:DC:A6:EE:A2:7D:D4:1F:6B:56:DB:B5:9D:94:EF:FC
Certificate issuer: /CN=5de369977953e5bd7df3381788a425a57bc1c254
Certificate serial: 01A1297FAC53CD26A1F74AFB0C85C77889D6
Authority key identifier: 5D:E3:69:97:79:53:E5:BD:7D:F3:38:17:88:A4:25:A5:7B:C1:C2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeNpl3lT5b198zgXiKQlpXvBwlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/rF9890rcpu6ifdQfa1bbtZ2U7_w.roa
Signing time: Sun 11 Oct 2026 05:46:35 +0000
ROA not before: Sun 11 Oct 2026 05:46:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 2001:678:d44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeNpl3lT5b198zgXiKQlpXvBwlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:7f:ac:53:cd:26:a1:f7:4a:fb:0c:85:c7:78:89:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de369977953e5bd7df3381788a425a57bc1c254
Validity
Not Before: Oct 11 05:46:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac5f7cf74adca6eea27dd41f6b56dbb59d94effc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:75:de:a0:fd:45:a7:0d:c4:71:b6:10:14:03:
ab:b2:41:2c:a0:f1:ae:ee:71:e4:74:96:53:66:3b:
08:8b:7e:5a:a9:85:31:2a:74:1f:a6:d6:41:73:51:
e3:b7:bd:8d:c3:ea:6b:6f:85:0a:6c:2e:57:62:9d:
3f:00:bd:35:c1:f8:d7:44:23:a6:92:9c:60:91:af:
2c:3b:b3:c8:97:5d:36:79:53:61:d3:dd:3e:ea:8e:
42:54:a1:3e:7f:b1:8d:66:c9:35:b8:a4:0f:b1:06:
56:ac:2c:fe:cd:2e:f1:93:e2:09:2c:8b:39:2a:f9:
de:03:a4:55:c9:00:00:71:d4:ef:7d:e9:e3:98:7b:
73:af:8d:16:0c:e5:02:f3:da:3b:5f:e8:c8:b2:92:
19:54:86:fe:31:10:65:6b:c8:f5:b3:f3:98:b0:8c:
cc:50:fd:96:00:0c:60:93:d2:ff:3b:10:48:a1:bb:
de:cc:d2:c3:18:ed:8d:5f:a5:e3:d1:d3:1c:c9:45:
f7:60:b7:b3:8a:6f:b8:5c:c5:7b:a3:77:a8:a8:bd:
69:67:8e:57:2f:0a:dc:14:9b:2b:99:1a:97:47:07:
87:56:04:fb:f7:c2:aa:4a:de:fe:4b:10:58:e3:cc:
1b:af:46:44:c5:4c:3e:4d:16:02:a3:29:e6:dd:9a:
4f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5F:7C:F7:4A:DC:A6:EE:A2:7D:D4:1F:6B:56:DB:B5:9D:94:EF:FC
X509v3 Authority Key Identifier:
keyid:5D:E3:69:97:79:53:E5:BD:7D:F3:38:17:88:A4:25:A5:7B:C1:C2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeNpl3lT5b198zgXiKQlpXvBwlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/rF9890rcpu6ifdQfa1bbtZ2U7_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/XeNpl3lT5b198zgXiKQlpXvBwlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d44::/48
Signature Algorithm: sha256WithRSAEncryption
35:98:f4:90:9d:a4:d9:dc:b7:40:ac:ab:87:02:1c:8f:4c:96:
f0:49:3f:ac:47:f5:0a:b4:ee:6f:f7:5f:29:9e:c5:2d:3f:86:
b5:67:fe:7b:45:e7:7b:d4:70:36:93:24:04:06:eb:c4:5e:6e:
17:13:e8:d0:ce:1a:37:0b:48:49:66:0b:72:f8:b3:48:ed:20:
7d:63:c5:d2:2b:01:56:e0:76:78:e5:7e:2d:04:1a:09:49:6a:
36:0b:c9:1f:76:3a:d1:63:a8:f4:56:70:73:37:f6:88:3f:d2:
c3:1b:49:3a:ff:09:0a:9e:ba:af:0f:d1:a3:e3:fc:fb:3e:2d:
db:29:91:68:e7:e3:3f:14:2a:ed:78:04:b3:12:de:f6:ea:97:
59:ac:f5:c2:6d:8f:9c:8f:ff:1e:d5:78:f6:fa:5e:80:06:de:
c7:cf:ee:ef:a9:9a:0d:a0:5d:72:45:bf:37:10:cf:d6:81:1e:
04:fa:ea:53:39:f7:c5:7f:b7:ad:7c:d4:14:ee:dc:0d:63:ba:
3c:24:48:3b:8d:48:cd:be:a3:da:b3:88:6b:35:fa:d0:a9:be:
b8:2a:5a:9e:c6:fe:cf:e0:1e:81:41:f3:58:23:69:20:16:38:
81:fd:fe:47:7a:47:0d:b3:3b:4a:93:5e:a3:45:ab:ea:3a:28:
56:09:bd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:47:05 2026 by rpki-client