Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/AjhSIc1U-THrWPFi5HGYOIqCBm8.roa
File: AjhSIc1U-THrWPFi5HGYOIqCBm8.roa (raw, json)
Hash identifier: io5Fcq30EiliTsS32MRIMuCJiIS/hiRzRmQMJmlgQ0w=
Subject key identifier: 02:38:52:21:CD:54:F9:31:EB:58:F1:62:E4:71:98:38:8A:82:06:6F
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0037FE2EC335FE7262F5CA05B71B0EFA7
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/AjhSIc1U-THrWPFi5HGYOIqCBm8.roa
Signing time: Sat 15 Aug 2026 03:38:27 +0000
ROA not before: Sat 15 Aug 2026 03:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218969
IP address blocks: 2a10:fa81:1300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:7f:e2:ec:33:5f:e7:26:2f:5c:a0:5b:71:b0:ef:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Aug 15 03:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02385221cd54f931eb58f162e47198388a82066f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5d:ba:08:0a:2c:cb:58:84:1c:85:b6:59:ce:
f1:5b:58:72:45:be:02:d7:dc:22:eb:44:71:88:73:
7d:23:d3:a6:0f:7c:cd:f0:4d:a6:1a:fc:74:0c:ed:
88:28:d2:c1:1c:94:25:88:37:d1:f7:76:31:56:ce:
1c:49:b8:23:34:c9:01:a7:31:02:93:a3:89:02:c5:
6f:47:38:bd:2e:fb:7a:94:11:1e:d8:fe:ca:0f:c8:
8b:81:cc:a6:33:1e:08:4f:30:63:2a:3f:75:a5:ad:
f7:49:e4:a1:1f:1b:7c:58:b8:df:c2:75:e2:ca:89:
72:b8:64:30:20:51:7e:c9:09:0a:29:f8:87:53:03:
3a:ce:ff:2b:b1:d1:87:86:f1:49:18:5e:c5:13:d5:
b6:9f:d3:ae:97:0b:43:7d:0f:77:81:f0:24:a2:c7:
a6:93:15:e5:b0:76:42:04:3a:d5:1c:2d:d0:c8:d0:
2c:0b:52:57:e4:c9:7e:60:cd:f1:6e:71:a7:b0:30:
31:ed:5b:aa:cf:d4:68:04:c3:6d:70:54:24:b9:f2:
46:c5:7c:34:3c:ef:10:ef:c5:9a:9c:7e:c3:24:38:
ea:43:65:11:81:39:78:57:70:48:90:ba:77:b3:38:
de:4b:1e:b8:77:25:42:0a:00:62:2a:e5:bb:52:15:
fc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:38:52:21:CD:54:F9:31:EB:58:F1:62:E4:71:98:38:8A:82:06:6F
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/AjhSIc1U-THrWPFi5HGYOIqCBm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:1300::/40
Signature Algorithm: sha256WithRSAEncryption
31:e2:9f:6b:25:b1:34:31:80:6a:37:30:7f:a0:a2:65:a9:2f:
81:ec:90:cb:de:3d:b6:6e:ca:41:4a:31:54:1a:3d:8f:c4:1e:
d9:72:fa:9a:4d:ec:71:eb:22:70:9d:de:3d:47:56:a7:82:75:
50:fd:16:10:a9:72:d4:94:14:8c:d9:bc:e6:fa:81:40:44:32:
d1:e1:9b:11:55:f4:01:69:14:00:ef:85:96:db:2e:b8:0b:ab:
9d:a1:db:cd:e9:49:f6:53:68:9f:b1:8c:14:49:fa:5c:e0:66:
4b:b5:1a:bb:5a:f4:49:db:a1:ea:39:ac:42:99:e5:c8:89:26:
12:29:68:65:e7:59:a3:b0:93:8a:04:13:64:48:7f:c9:2f:6f:
4b:02:c2:38:01:e2:ce:b4:39:f6:f0:83:b1:7d:9a:c5:01:ce:
38:71:f1:9d:33:6d:c1:d3:bb:c6:76:a0:56:12:c2:62:04:07:
b2:b2:69:ae:a5:43:3e:3e:28:48:42:01:e0:6d:b9:fa:80:73:
88:40:bd:02:89:2e:aa:b8:c9:94:0f:4a:8a:48:77:dd:13:54:
22:7f:2f:57:da:7c:3f:72:c4:0e:bd:67:f7:31:cc:dd:d2:92:
9d:8e:48:5f:f0:52:44:27:a1:49:51:ea:37:09:6c:84:53:9c:
be:6e:ce:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 18:36:39 2026 by rpki-client