Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/de129a-459a-4f17-ad9a-945c0cd51afb/1/5kSOhfd8FT1TxwDD-dCwcrjf9MI.roa
File: 5kSOhfd8FT1TxwDD-dCwcrjf9MI.roa (raw, json)
Hash identifier: S627JewJpXGmVOz2GwVGhNJrDE6IzwJYgI60J/Gv0ZQ=
Subject key identifier: E6:44:8E:85:F7:7C:15:3D:53:C7:00:C3:F9:D0:B0:72:B8:DF:F4:C2
Certificate issuer: /CN=b2da179ca1c91f9f14475b88cf1652be9ae95fa0
Certificate serial: 01A12EC269202691A74B86373B69E8630BAE
Authority key identifier: B2:DA:17:9C:A1:C9:1F:9F:14:47:5B:88:CF:16:52:BE:9A:E9:5F:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stoXnKHJH58UR1uIzxZSvprpX6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/de129a-459a-4f17-ad9a-945c0cd51afb/1/5kSOhfd8FT1TxwDD-dCwcrjf9MI.roa
Signing time: Mon 12 Oct 2026 06:17:35 +0000
ROA not before: Mon 12 Oct 2026 06:17:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204393
IP address blocks: 2a0b:e004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/de129a-459a-4f17-ad9a-945c0cd51afb/1/stoXnKHJH58UR1uIzxZSvprpX6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/de129a-459a-4f17-ad9a-945c0cd51afb/1/stoXnKHJH58UR1uIzxZSvprpX6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/stoXnKHJH58UR1uIzxZSvprpX6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:c2:69:20:26:91:a7:4b:86:37:3b:69:e8:63:0b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2da179ca1c91f9f14475b88cf1652be9ae95fa0
Validity
Not Before: Oct 12 06:17:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6448e85f77c153d53c700c3f9d0b072b8dff4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:e9:16:8e:07:33:62:66:53:f7:3e:ef:ca:
4f:79:7b:42:76:88:f1:01:d0:de:7a:e0:93:0b:e2:
16:70:11:76:22:63:47:56:8b:b8:1b:ef:66:d1:e8:
ec:5b:ce:9a:fd:2f:fc:5b:cc:a0:4d:f7:db:69:92:
93:e5:1b:b0:4e:a1:b3:aa:09:fb:03:3b:3c:fb:54:
69:20:d7:4b:a4:77:97:53:06:73:cf:8e:72:37:db:
98:8d:b4:17:ab:97:c9:3f:f7:5c:6a:29:01:fd:26:
9d:dc:3e:f5:6c:16:2a:f2:ea:c7:8c:45:f4:9b:35:
0f:f2:9c:50:fa:9f:05:e6:fb:7d:f7:57:66:19:de:
46:54:3d:6c:62:65:72:fd:e0:b7:8e:5b:ae:b1:19:
c9:75:3d:63:3a:5e:8c:d9:45:63:3b:ff:67:e7:84:
51:5c:c2:da:e6:d4:04:86:76:bd:90:70:77:f0:8f:
3e:62:21:82:f9:fd:7b:f2:5b:1a:f5:b6:3a:c3:af:
c5:01:fa:51:fa:54:7d:22:1f:57:ba:98:83:b7:67:
0e:da:98:74:51:2a:aa:04:1e:ca:13:75:d8:d2:b4:
49:ca:6c:ee:54:39:21:12:9a:bf:f8:f5:a6:04:f5:
84:2a:a4:a2:67:8e:87:75:e8:42:51:70:aa:8c:6e:
df:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:44:8E:85:F7:7C:15:3D:53:C7:00:C3:F9:D0:B0:72:B8:DF:F4:C2
X509v3 Authority Key Identifier:
keyid:B2:DA:17:9C:A1:C9:1F:9F:14:47:5B:88:CF:16:52:BE:9A:E9:5F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stoXnKHJH58UR1uIzxZSvprpX6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/de129a-459a-4f17-ad9a-945c0cd51afb/1/5kSOhfd8FT1TxwDD-dCwcrjf9MI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/de129a-459a-4f17-ad9a-945c0cd51afb/1/stoXnKHJH58UR1uIzxZSvprpX6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:e004::/48
Signature Algorithm: sha256WithRSAEncryption
2b:73:6d:a4:2c:eb:be:51:b7:e6:21:94:72:cf:32:11:75:a3:
c1:10:01:14:8e:78:8f:48:07:e7:3a:27:bf:40:6f:d5:4c:69:
cf:62:e1:12:50:62:f2:82:b3:68:94:87:f6:8f:25:23:3c:b0:
cd:36:99:d4:55:eb:8b:07:83:0c:6c:b8:94:0f:83:d1:32:1d:
2d:85:c7:33:5a:03:f2:24:aa:b3:36:0f:ad:2e:c2:68:01:74:
3b:de:ba:55:9e:c7:26:85:0e:10:c6:62:dd:c1:9f:f4:f3:39:
b1:a3:c9:73:5e:dc:dd:22:3c:be:e1:62:b7:13:10:b3:2a:2f:
2e:20:a9:66:0c:bd:d7:45:e2:4e:ce:06:9a:94:f4:8a:05:5b:
17:6b:b1:58:04:cb:f7:03:f3:65:71:02:75:b8:2f:be:2f:96:
2c:c3:8e:21:a0:42:b7:1c:62:1e:73:19:d0:08:b2:5d:42:15:
8a:5d:6f:07:de:12:3f:bd:ed:4e:25:7c:4b:c8:11:b8:c9:69:
29:b6:bd:cb:ec:e2:b6:27:35:7d:9b:ac:7d:74:b9:64:22:dd:
22:bb:23:db:a8:d8:90:f2:e2:13:f1:aa:1f:a4:61:6b:dd:77:
5a:d2:ce:fc:c9:ce:2b:d4:66:89:ee:8a:8c:98:15:1a:ae:d1:
23:7b:11:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:58 2026 by rpki-client