Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/FOlB2o4pLtYhgThmAK8eVMAomAQ.roa
File: FOlB2o4pLtYhgThmAK8eVMAomAQ.roa (raw, json)
Hash identifier: weYcoNzdKC8JwUcAyj4dTmh0Cj88bogr4JgHLFlaTXk=
Subject key identifier: 14:E9:41:DA:8E:29:2E:D6:21:81:38:66:00:AF:1E:54:C0:28:98:04
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A005608AE26D4BF107C01422F879EAF186
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/FOlB2o4pLtYhgThmAK8eVMAomAQ.roa
Signing time: Sat 15 Aug 2026 12:23:27 +0000
ROA not before: Sat 15 Aug 2026 12:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6517
IP address blocks: 2a10:fa85::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 10:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:05:60:8a:e2:6d:4b:f1:07:c0:14:22:f8:79:ea:f1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Aug 15 12:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14e941da8e292ed62181386600af1e54c0289804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:6c:5a:fc:09:94:aa:98:2f:54:ac:1a:b7:
10:30:ea:bf:c5:9f:51:1f:8a:88:fa:94:33:0e:9f:
93:68:b7:f7:f0:50:c4:5d:04:58:f9:97:9d:61:9a:
3d:06:ef:b4:24:2c:bf:df:80:a9:ae:38:6b:f7:b5:
6c:d3:a0:c0:f9:98:10:87:2b:de:e1:d8:1f:85:63:
3a:e1:45:05:bf:a7:bc:40:4c:13:77:c5:87:fb:9d:
45:74:76:3f:9a:db:23:63:13:43:56:42:5e:c3:ab:
c2:4f:f8:09:68:e9:99:96:96:40:1c:6c:3c:e0:ab:
d1:34:1a:25:f9:4c:1d:97:95:d3:4f:6e:7c:72:97:
15:a2:c1:d9:e3:0e:60:54:47:ab:59:e2:62:37:1a:
03:f3:ce:7e:ca:bb:9a:7b:f4:89:3c:59:a6:3a:18:
3f:24:18:6d:37:86:52:b2:e4:28:a2:95:c0:30:3c:
a8:f1:bd:3f:04:b8:81:a4:28:5b:43:32:0a:7f:1f:
56:b9:b4:c6:a7:1a:9b:a1:5c:a8:48:3e:76:42:6b:
4a:b4:37:67:67:72:6e:30:aa:b9:8d:09:22:f5:fb:
df:61:ea:24:32:89:6d:0c:de:a9:d2:b1:55:5e:3c:
47:81:f8:ac:36:df:eb:1e:56:44:22:d7:af:6e:c2:
7e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E9:41:DA:8E:29:2E:D6:21:81:38:66:00:AF:1E:54:C0:28:98:04
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/FOlB2o4pLtYhgThmAK8eVMAomAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa85::/32
Signature Algorithm: sha256WithRSAEncryption
48:a5:0f:12:1d:49:ea:f6:1a:bb:00:33:31:5c:c4:e2:bc:22:
60:46:ac:cf:20:a2:9e:b8:3d:30:55:cb:fe:54:58:18:f4:cd:
45:55:91:7d:6f:9d:ac:ca:96:64:a2:94:a6:b1:b8:b0:be:37:
68:e6:7f:4e:65:26:30:01:fd:51:76:d1:06:46:d9:87:f0:be:
1d:8d:b4:08:75:89:81:b9:a6:e1:91:34:e9:2c:3b:b9:39:b7:
fa:c5:f6:b5:6c:76:47:b0:a6:88:f0:ad:be:2e:88:40:25:6b:
a3:57:91:b0:12:33:b3:1a:61:96:a1:4d:ab:88:cd:5b:88:77:
b8:91:81:52:43:76:b0:e1:bc:55:75:99:79:a0:fe:d2:a5:4e:
ec:dd:6c:4c:a3:d6:0c:10:7d:40:65:14:be:e2:59:ff:59:a3:
5a:c0:4d:b3:66:35:fd:db:2e:ee:55:34:2a:70:fc:69:3c:9b:
27:be:6f:8e:c6:79:c6:d9:f5:8a:fa:d7:46:82:11:6b:6f:9d:
63:61:df:ff:20:47:af:1e:75:a2:03:de:20:43:08:6a:a7:92:
cd:3c:09:b5:39:0f:a0:be:94:1b:90:ed:43:74:53:ab:67:cd:
21:32:4a:c4:9f:0a:89:5a:50:70:4f:9d:13:c9:4b:22:9b:f1:
74:a3:58:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 19:04:15 2026 by rpki-client