Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/Ha0CGU2rBsmWyRmDFc0Psv9JC3w.roa
File: Ha0CGU2rBsmWyRmDFc0Psv9JC3w.roa (raw, json)
Hash identifier: ZZqXUKHYxTr9MHDKXflyXYtvngRtOV46eqRt3MsLLZ8=
Subject key identifier: 1D:AD:02:19:4D:AB:06:C9:96:C9:19:83:15:CD:0F:B2:FF:49:0B:7C
Certificate issuer: /CN=2fe00a644b64066613868769382bd9756254b74c
Certificate serial: 01A0C37CBD39AF8F784C59E62A6FE5C30DC8
Authority key identifier: 2F:E0:0A:64:4B:64:06:66:13:86:87:69:38:2B:D9:75:62:54:B7:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-AKZEtkBmYThodpOCvZdWJUt0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/Ha0CGU2rBsmWyRmDFc0Psv9JC3w.roa
Signing time: Mon 21 Sep 2026 10:22:07 +0000
ROA not before: Mon 21 Sep 2026 10:22:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218626
IP address blocks: 2a0e:e780:1::/48 maxlen: 48
2a0e:e780:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/L-AKZEtkBmYThodpOCvZdWJUt0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/L-AKZEtkBmYThodpOCvZdWJUt0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-AKZEtkBmYThodpOCvZdWJUt0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:7c:bd:39:af:8f:78:4c:59:e6:2a:6f:e5:c3:0d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe00a644b64066613868769382bd9756254b74c
Validity
Not Before: Sep 21 10:22:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1dad02194dab06c996c9198315cd0fb2ff490b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:5a:4b:fb:dd:b2:5b:0d:dc:55:91:fd:b0:
66:42:f8:7e:01:bd:d6:18:e2:fb:62:1f:37:fb:c6:
9a:13:65:9e:57:f7:e6:b3:9a:60:24:32:c3:ea:a9:
14:b4:33:70:1e:23:ed:d2:a0:54:62:01:2c:1a:6d:
39:18:12:67:72:98:ea:6c:17:0a:0c:35:94:5f:4f:
1a:ba:85:72:6b:66:60:f8:b4:65:79:87:4f:a8:bb:
89:d9:09:30:80:16:e7:c7:54:3c:b0:7b:41:b3:a6:
8c:3a:7f:31:21:c0:df:88:9c:7c:fc:bd:28:a1:7b:
a2:61:3f:8e:ef:05:9c:a8:8b:21:69:aa:fb:66:b7:
2d:27:4d:d4:f0:9a:92:b3:1f:c5:a9:1a:1d:3e:f3:
13:79:17:05:6a:61:2f:02:80:6d:f0:52:56:60:c4:
e2:d1:1a:85:24:f7:6f:be:32:0c:d1:cc:ae:47:40:
31:5e:18:56:af:3c:8a:18:c1:a9:ce:9d:4a:16:eb:
71:a5:75:cb:a5:f4:f6:fc:69:4a:62:bd:26:ba:b1:
8d:3e:0b:fd:ce:66:6b:79:77:3c:d8:92:f0:c9:7d:
33:9f:b1:96:d0:88:ce:fa:43:1e:80:f6:01:e9:8f:
0a:3a:a3:84:9a:29:c5:87:d8:dc:a2:ed:2e:fc:bd:
9b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AD:02:19:4D:AB:06:C9:96:C9:19:83:15:CD:0F:B2:FF:49:0B:7C
X509v3 Authority Key Identifier:
keyid:2F:E0:0A:64:4B:64:06:66:13:86:87:69:38:2B:D9:75:62:54:B7:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-AKZEtkBmYThodpOCvZdWJUt0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/Ha0CGU2rBsmWyRmDFc0Psv9JC3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/L-AKZEtkBmYThodpOCvZdWJUt0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e780:1::-2a0e:e780:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
31:cf:e2:8b:58:97:bd:3f:ed:3d:0b:47:b8:21:ad:f7:a2:d5:
23:c6:87:11:9f:bb:c6:ad:9a:34:a6:f2:77:47:06:5d:73:e0:
d2:3e:d2:ec:21:8f:d2:ba:63:61:b3:0e:a5:86:ce:f9:85:77:
54:9b:fb:6a:bc:5b:13:06:3f:c3:87:2c:31:a7:37:e8:db:7e:
48:75:ae:07:ac:2c:a0:87:f3:cc:b3:23:96:1a:a5:3b:d2:1f:
40:00:8d:74:ab:c1:74:8b:94:6a:50:bf:35:da:98:f6:25:4a:
2c:a7:67:65:45:aa:61:a7:35:2e:e3:71:56:c8:fc:a7:a9:ac:
5b:53:08:92:03:69:d3:a0:60:b5:aa:ff:b1:ac:d6:a2:9e:c0:
ea:e6:e4:ec:de:df:4f:bb:6b:7c:47:48:27:e2:46:ac:1c:cc:
b6:6d:04:ed:d1:40:40:70:9f:28:02:5e:28:94:c9:42:18:9b:
a6:d2:b4:6f:26:a0:9c:0d:e3:6c:4c:f4:53:e9:23:06:20:c2:
0a:7e:41:25:09:1b:ee:94:8c:0b:16:82:da:b9:1c:4d:5e:1a:
d0:3c:13:c9:2d:f9:bf:05:16:73:06:c1:c9:59:84:66:dc:6c:
74:b9:e6:28:35:c4:f1:cb:7c:92:04:cf:c9:ce:ba:f7:6c:8d:
3b:0c:af:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 27 08:30:26 2026 by rpki-client