Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/awc3XipEWtbq5LY1RS7zhjk5VV4.roa
File: awc3XipEWtbq5LY1RS7zhjk5VV4.roa (raw, json)
Hash identifier: 2BZL2rKDYS4rq4m02j+f41598wS/cdfgn7Qx20K4+xQ=
Subject key identifier: 6B:07:37:5E:2A:44:5A:D6:EA:E4:B6:35:45:2E:F3:86:39:39:55:5E
Certificate issuer: /CN=1226118a132bf4f858b99e9f7e22d5ef3144149d
Certificate serial: 01A158BB078E4012B16448A2F273AA9DB4D6
Authority key identifier: 12:26:11:8A:13:2B:F4:F8:58:B9:9E:9F:7E:22:D5:EF:31:44:14:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/awc3XipEWtbq5LY1RS7zhjk5VV4.roa
Signing time: Tue 20 Oct 2026 09:53:34 +0000
ROA not before: Tue 20 Oct 2026 09:53:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49281
IP address blocks: 2a00:a300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:bb:07:8e:40:12:b1:64:48:a2:f2:73:aa:9d:b4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1226118a132bf4f858b99e9f7e22d5ef3144149d
Validity
Not Before: Oct 20 09:53:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b07375e2a445ad6eae4b635452ef3863939555e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:ed:8a:15:1b:d1:c8:16:08:3e:6a:1c:a2:
83:14:b3:1f:b4:90:0c:ee:a4:62:81:fa:19:03:34:
71:05:4a:1a:4a:f0:f1:90:d4:d7:a6:c7:9c:39:67:
65:c0:fa:12:f9:ec:0d:b1:1f:85:03:bc:05:a7:b5:
69:68:a4:5e:fb:50:65:b5:a7:d2:39:c8:71:d9:f1:
10:cb:ee:6b:6f:b5:31:1c:71:43:ef:5a:bc:d1:7f:
93:94:26:dd:2a:bf:95:47:5e:c1:c6:81:dc:1e:1f:
89:f7:57:91:34:9f:10:a9:ad:5a:f0:dc:d2:1d:17:
bb:89:df:eb:11:3e:8e:9d:77:3c:c9:59:18:48:a1:
c4:96:60:68:4b:2b:2c:a1:52:58:71:fe:40:58:91:
51:22:45:5b:ea:c4:8e:2c:eb:2d:8a:3c:04:56:1c:
73:fb:6e:18:b2:43:d7:aa:81:67:57:68:c8:0d:63:
88:69:db:b7:1b:93:fb:7e:fb:35:16:cf:02:92:09:
16:48:12:b4:d1:6a:ff:b4:68:ec:5b:11:87:13:bc:
85:e7:f0:bc:c0:fd:f4:d8:d2:90:79:bd:2d:e6:ca:
e7:f8:c1:de:03:fe:9d:3b:cf:50:4f:1a:b6:02:fd:
f0:27:53:23:72:cc:06:4c:fa:57:f3:1f:60:f9:c9:
9e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:07:37:5E:2A:44:5A:D6:EA:E4:B6:35:45:2E:F3:86:39:39:55:5E
X509v3 Authority Key Identifier:
keyid:12:26:11:8A:13:2B:F4:F8:58:B9:9E:9F:7E:22:D5:EF:31:44:14:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/awc3XipEWtbq5LY1RS7zhjk5VV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:a300::/32
Signature Algorithm: sha256WithRSAEncryption
4e:1c:05:65:f8:f7:7a:bc:50:9a:f0:07:15:09:fb:21:f5:c7:
64:d3:b4:52:ae:fb:3f:c6:d2:c0:f3:ff:2b:a8:12:fe:95:d2:
52:9a:56:34:38:81:09:61:a9:72:bb:2e:92:9b:3a:ef:d9:a5:
4e:68:0f:9b:f4:81:cb:25:d5:83:e9:fd:2c:cc:a3:c4:97:c5:
d6:f2:f3:49:cc:2b:da:30:59:1d:60:b3:70:cb:74:ed:6c:05:
c5:03:4a:31:7a:52:88:38:43:a8:fb:3c:b4:49:35:ce:e8:f4:
06:0e:5e:da:51:e3:bd:a9:9a:77:fc:ff:a0:e6:a1:64:59:73:
4b:6e:b5:83:6e:0e:97:42:d2:d5:80:e2:59:a4:4a:3b:b8:45:
34:0e:fe:dd:75:91:f2:84:f6:90:42:3c:db:35:86:0d:fe:4f:
a5:5c:bd:2f:34:b7:11:e2:d6:f4:82:97:6c:b8:7f:bb:bf:e0:
b7:cb:e8:85:dd:fa:96:e9:07:5f:5b:5b:30:e3:c2:87:c2:4e:
6d:79:a3:d0:9b:ba:b0:96:ae:f2:b4:82:d6:23:f7:ba:3c:3c:
f1:c7:b8:15:ca:97:8c:e6:af:89:4c:43:85:97:fe:4a:64:9e:
a7:9a:48:4c:4f:75:57:d1:92:1b:69:8a:79:7c:6b:f0:bc:12:
50:23:b3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:16:04 2026 by rpki-client