Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/RV0OfGw4sTHbnRPfJv8sH0lSI0w.roa
File: RV0OfGw4sTHbnRPfJv8sH0lSI0w.roa (raw, json)
Hash identifier: CYoV7elxlGmQCYBf+b0HKnOUdfRXo5GRpH2xt0y8mJ4=
Subject key identifier: 45:5D:0E:7C:6C:38:B1:31:DB:9D:13:DF:26:FF:2C:1F:49:52:23:4C
Certificate issuer: /CN=a6d2ed7165cb51bcd28068b2970235cdbd01280b
Certificate serial: 019EE07694D72EA3924168751092DEF348A1
Authority key identifier: A6:D2:ED:71:65:CB:51:BC:D2:80:68:B2:97:02:35:CD:BD:01:28:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ptLtcWXLUbzSgGiylwI1zb0BKAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/RV0OfGw4sTHbnRPfJv8sH0lSI0w.roa
Signing time: Fri 19 Jun 2026 15:18:48 +0000
ROA not before: Fri 19 Jun 2026 15:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42093
IP address blocks: 2001:67c:da8::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/ptLtcWXLUbzSgGiylwI1zb0BKAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/ptLtcWXLUbzSgGiylwI1zb0BKAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ptLtcWXLUbzSgGiylwI1zb0BKAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e0:76:94:d7:2e:a3:92:41:68:75:10:92:de:f3:48:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6d2ed7165cb51bcd28068b2970235cdbd01280b
Validity
Not Before: Jun 19 15:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=455d0e7c6c38b131db9d13df26ff2c1f4952234c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:ab:f3:73:5d:96:90:b6:40:8e:a2:12:9e:
1a:f3:64:6b:7a:a4:0a:a2:78:83:08:62:f9:4c:39:
89:19:bc:28:68:1a:d4:7b:b9:05:42:b2:1b:30:87:
33:c7:b5:de:a8:96:6c:8d:98:e2:be:e6:77:66:43:
9c:7d:27:85:35:4f:76:64:15:15:3c:1b:81:b0:e7:
92:22:9b:7b:2e:29:cd:c2:48:de:c9:20:af:b1:59:
d7:15:11:c5:c2:58:9e:50:a6:73:cf:d4:38:7a:d4:
90:50:e5:bf:5f:10:05:4e:2d:eb:a8:0d:ac:ac:15:
8c:94:e1:55:26:b4:9c:6d:b7:c5:fa:c7:e7:a0:eb:
1e:fd:ca:27:cc:14:a6:b9:6f:77:fb:1d:31:64:20:
79:00:1e:58:d4:59:15:34:72:f9:e4:fd:65:af:f8:
99:51:57:c8:b2:ca:61:7b:26:ae:5a:75:fc:1e:ab:
29:0a:11:ee:15:36:c5:e3:7f:32:b2:2a:c3:2b:b4:
60:92:f6:b7:4a:2f:52:31:e4:05:1c:b6:35:62:08:
8c:70:9c:9d:d7:0b:3b:95:db:84:a5:b6:cb:ce:e8:
b0:88:af:b7:bd:42:00:26:bb:fb:4b:f2:be:bc:39:
15:59:69:4b:ae:fe:43:45:9c:50:d1:a3:ec:1a:47:
57:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5D:0E:7C:6C:38:B1:31:DB:9D:13:DF:26:FF:2C:1F:49:52:23:4C
X509v3 Authority Key Identifier:
keyid:A6:D2:ED:71:65:CB:51:BC:D2:80:68:B2:97:02:35:CD:BD:01:28:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ptLtcWXLUbzSgGiylwI1zb0BKAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/RV0OfGw4sTHbnRPfJv8sH0lSI0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/ptLtcWXLUbzSgGiylwI1zb0BKAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:da8::/48
Signature Algorithm: sha256WithRSAEncryption
0a:c0:b7:d0:92:cb:69:3e:83:41:66:7c:58:ba:c7:01:59:78:
78:a3:bf:b4:89:c3:df:8c:1b:6c:e3:05:f5:4f:6d:a7:27:b3:
ef:53:0f:03:d9:26:68:5e:49:56:33:7b:7f:17:dd:92:d7:bf:
f7:cd:25:e7:b5:37:11:51:4c:6a:b9:a7:76:57:b4:3c:a4:00:
3e:33:ab:dc:f9:8d:eb:23:ab:7e:93:3c:a8:8a:c5:10:e2:5d:
8f:46:5c:cf:89:17:a3:37:a0:fc:5a:9a:bc:53:e3:5b:25:26:
c1:34:1d:8e:df:8a:14:2b:b9:00:25:95:f4:c9:d0:6a:49:25:
2e:60:2e:e3:3b:a4:4e:a1:a5:27:b1:4f:ce:22:80:6c:be:85:
18:72:f6:26:01:bb:be:fc:88:0b:98:02:a3:4f:17:2e:ce:c3:
fc:63:f2:1a:a8:ee:31:c6:fd:51:b0:22:d2:d1:b3:73:49:5d:
5e:40:50:02:b0:c9:c0:c4:fc:86:07:40:ee:fd:2f:99:8d:f9:
b8:7e:23:e6:dd:6d:45:53:83:bf:f7:53:dc:d2:93:fc:73:c2:
f8:41:a6:43:fc:b1:b7:2d:45:13:b3:cb:b4:1f:65:61:e3:de:
ef:ea:7c:a9:fe:c0:a2:c6:9d:15:75:55:9d:9d:97:39:fe:86:
37:0e:41:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 23:40:22 2026 by rpki-client