Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/Sd1lxMKtYwZDqgpiEIKKE0a3eOM.roa
File: Sd1lxMKtYwZDqgpiEIKKE0a3eOM.roa (raw, json)
Hash identifier: NZH+qvj1kGJTeAjuJGh8ZqbH/NAddcRmqDiJc4ZT3EQ=
Subject key identifier: 49:DD:65:C4:C2:AD:63:06:43:AA:0A:62:10:82:8A:13:46:B7:78:E3
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019FF1095F95E4655A967ACDD72212DA3633
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/Sd1lxMKtYwZDqgpiEIKKE0a3eOM.roa
Signing time: Tue 11 Aug 2026 13:35:51 +0000
ROA not before: Tue 11 Aug 2026 13:35:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219283
IP address blocks: 2a10:fa81:d00::/40 maxlen: 48
2a10:fa81:e00::/40 maxlen: 48
2a10:fa86::/36 maxlen: 48
2a10:fa86:4000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:09:5f:95:e4:65:5a:96:7a:cd:d7:22:12:da:36:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Aug 11 13:35:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49dd65c4c2ad630643aa0a6210828a1346b778e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:30:b3:5a:0a:4a:92:4d:39:8d:26:bb:47:aa:
86:40:77:10:32:a9:4c:92:2f:1f:07:81:c6:d4:eb:
49:e8:78:ed:ed:26:92:79:96:2f:5c:ea:76:2c:2d:
c6:0f:c6:a3:d8:89:3a:02:0e:8b:bc:d8:51:18:b3:
5f:e2:23:4c:d6:81:a6:19:43:d1:a5:81:4f:e3:bd:
2e:23:a0:82:2e:12:0f:b4:75:60:b7:ea:36:60:ed:
5d:b5:fc:a2:23:9c:72:cc:23:b0:f5:c1:88:87:65:
d6:37:6a:80:49:9d:25:cf:81:8e:f5:b1:d0:ce:ee:
86:35:39:0c:88:09:48:a1:66:74:1a:88:2d:47:9a:
94:3b:e2:41:36:59:88:40:e1:2e:cc:7e:79:fe:5b:
f3:cc:29:49:84:01:98:be:0e:ee:76:1a:85:0f:ac:
84:1f:e1:4d:43:37:a9:d5:6a:ed:ed:3b:28:f4:0e:
08:9c:ae:f5:25:70:dd:8d:1d:35:e1:cf:9c:16:13:
93:7a:e6:68:be:3d:cc:e1:6a:b0:69:83:35:f3:ec:
47:cd:fe:7e:4f:30:91:bb:78:62:1f:33:44:78:2a:
11:ad:e0:0f:0c:2a:76:c9:be:6d:9f:cf:10:ee:0e:
15:fa:58:02:3f:d4:f5:ed:dc:da:5d:a8:ae:3c:fa:
04:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DD:65:C4:C2:AD:63:06:43:AA:0A:62:10:82:8A:13:46:B7:78:E3
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/Sd1lxMKtYwZDqgpiEIKKE0a3eOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:d00::-2a10:fa81:eff:ffff:ffff:ffff:ffff:ffff
2a10:fa86::/36
2a10:fa86:4000::/36
Signature Algorithm: sha256WithRSAEncryption
5d:04:bb:3f:37:df:c1:ad:b5:83:4e:1e:9d:c2:d8:86:cb:d8:
6d:6f:ab:17:c5:c9:9e:9a:ff:c6:b7:ef:a4:1b:f9:43:59:d4:
67:30:96:12:54:77:59:72:57:85:3a:a6:f9:8a:0a:98:59:2d:
63:36:46:eb:cb:00:92:3a:62:3a:17:38:49:ac:eb:8a:1e:62:
ac:eb:24:53:7b:3c:ee:3e:c4:e9:d9:5a:ab:ce:89:11:f1:5b:
09:ad:ba:06:ad:ef:ad:e6:27:25:3a:2f:48:a2:4e:e5:3d:8b:
bd:1b:02:b5:eb:7e:47:c5:2d:58:6d:48:ac:c3:4e:8c:35:50:
9c:38:87:f1:37:74:c8:8a:e7:92:31:eb:26:e1:09:25:fb:c1:
e9:b3:81:ca:b3:94:3f:02:47:8d:ee:38:d6:b4:42:78:f0:15:
b6:60:c1:32:f4:0f:13:e7:78:4e:3c:71:79:af:57:39:5f:f9:
c7:52:18:4b:3d:bc:c0:04:8c:07:c4:66:7f:c0:bc:9f:68:94:
ba:3a:f1:3f:7b:53:9f:1d:df:1d:c7:c8:2c:79:56:8a:a5:36:
b9:07:9d:66:a3:c9:37:a7:43:03:09:77:a2:ca:54:ee:ff:2a:
ea:9a:99:ac:9d:eb:1d:61:2f:f2:5c:22:67:fb:3b:14:3f:c7:
73:84:2f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:13:11 2026 by rpki-client