Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/HAgD-6lzARBUZEheRfE_VYTGH2E.roa
File: HAgD-6lzARBUZEheRfE_VYTGH2E.roa (raw, json)
Hash identifier: UTf/mQA4tg3Niv2O7+oPEbWjLqeqIgO8fCv9i/kovK0=
Subject key identifier: 1C:08:03:FB:A9:73:01:10:54:64:48:5E:45:F1:3F:55:84:C6:1F:61
Certificate issuer: /CN=cd97324fb26067e14906ecf06cab739f989fa6ae
Certificate serial: 01A0906054F8390447B10DA4D789DCEA002C
Authority key identifier: CD:97:32:4F:B2:60:67:E1:49:06:EC:F0:6C:AB:73:9F:98:9F:A6:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/HAgD-6lzARBUZEheRfE_VYTGH2E.roa
Signing time: Fri 11 Sep 2026 12:10:27 +0000
ROA not before: Fri 11 Sep 2026 12:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60594
IP address blocks: 2a0e:7d80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:60:54:f8:39:04:47:b1:0d:a4:d7:89:dc:ea:00:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd97324fb26067e14906ecf06cab739f989fa6ae
Validity
Not Before: Sep 11 12:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c0803fba97301105464485e45f13f5584c61f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d9:ce:78:23:1b:cb:1d:0d:8a:d0:17:a2:ba:
31:a1:b5:4a:2b:ac:cf:77:8f:e6:65:f5:4f:ea:5b:
3b:a1:b8:8c:f4:86:8c:95:51:9d:e5:24:8b:a7:46:
21:e8:97:1d:cf:96:7e:eb:6d:03:42:ff:c4:06:24:
1c:2c:35:39:c6:72:25:e4:35:2d:f8:03:ed:a3:0f:
ce:14:21:a8:3a:ee:fb:d6:2e:62:dc:61:76:1e:45:
80:42:b1:df:99:18:c3:da:aa:50:1b:fd:f7:d3:00:
a9:c5:ee:4b:b5:b2:01:a0:d4:b1:8d:2d:bb:2d:bd:
63:e8:2b:00:b5:0a:33:4a:0a:c1:34:51:6b:81:4a:
17:55:a9:3a:16:80:ce:2e:cc:9c:8e:09:99:50:d4:
73:10:c0:08:26:ba:0e:e4:74:2d:e9:a5:9e:dc:f2:
71:56:8f:44:84:d3:94:37:41:6b:0d:dd:cc:db:08:
9b:3f:3b:33:80:23:8d:17:d1:0c:75:c2:10:c7:09:
a3:00:6a:2d:90:4f:ff:01:87:ec:20:15:b9:d5:db:
aa:d5:b8:4a:a6:e0:15:2b:51:06:6e:0e:50:5f:e1:
b6:ee:c8:4e:45:49:be:a7:94:c4:1e:a4:6a:e7:c2:
9e:1e:3e:f4:24:86:da:16:20:52:8f:db:de:93:c1:
9c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:08:03:FB:A9:73:01:10:54:64:48:5E:45:F1:3F:55:84:C6:1F:61
X509v3 Authority Key Identifier:
keyid:CD:97:32:4F:B2:60:67:E1:49:06:EC:F0:6C:AB:73:9F:98:9F:A6:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/HAgD-6lzARBUZEheRfE_VYTGH2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c2863c-d3b7-4b55-b529-10a8a04fbf92/1/zZcyT7JgZ-FJBuzwbKtzn5ifpq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7d80::/48
Signature Algorithm: sha256WithRSAEncryption
78:04:0d:3d:47:77:3c:c0:c6:45:de:81:32:96:24:4a:95:d0:
1d:3c:e4:c3:6f:07:18:b0:61:23:fe:b6:65:cb:50:e1:a3:a7:
ae:75:97:60:5e:19:00:e1:51:83:1f:c9:ad:33:c4:8b:45:34:
49:73:21:4b:7d:8b:3f:30:66:87:ab:8b:af:8c:c7:83:4f:e2:
cd:3d:2f:cd:33:bf:0d:74:cf:64:2c:86:5c:0d:33:e7:b9:85:
b9:9e:c7:cc:e2:f0:53:a8:4c:53:45:04:b5:19:5a:16:ab:f2:
b3:75:81:3f:fe:59:5e:1e:a2:c7:d3:ab:7f:33:46:70:9d:63:
20:08:09:e6:29:66:ea:89:a0:b7:34:ae:06:0f:1f:a1:8c:1e:
17:e4:33:d9:ec:9e:06:5e:33:b7:a0:9a:f0:f8:16:c2:7e:27:
fc:67:5c:46:0a:46:9a:44:f0:95:93:4a:1f:e1:d3:69:f8:fd:
28:b7:a3:89:a7:1e:bf:0e:dd:85:2a:d8:68:14:68:ee:00:f8:
b4:a7:08:4d:55:23:c0:09:a9:f8:a1:9e:8f:dd:af:a5:01:36:
7e:2a:2d:f5:90:fd:23:56:14:93:45:76:69:af:28:cd:17:01:
35:45:ab:ed:e0:e5:df:cf:cf:49:3d:7d:a2:2e:9f:40:13:14:
5d:42:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:47:50 2026 by rpki-client