Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/aMEt5D_NzLFH7I3rNbGY9pSJl20.roa
File: aMEt5D_NzLFH7I3rNbGY9pSJl20.roa (raw, json)
Hash identifier: vb3xsY9ODqBVJy2+w7lNpVs4NWB2n81zpu+TONCxV7M=
Subject key identifier: 68:C1:2D:E4:3F:CD:CC:B1:47:EC:8D:EB:35:B1:98:F6:94:89:97:6D
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0715DFE49543169204774EEC4F0A13EE4
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/aMEt5D_NzLFH7I3rNbGY9pSJl20.roa
Signing time: Sat 05 Sep 2026 11:39:40 +0000
ROA not before: Sat 05 Sep 2026 11:39:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a10:fa80:5::/48 maxlen: 48
2a10:fa80:6::/48 maxlen: 48
2a10:fa80:f::/48 maxlen: 48
2a10:fa80:2000::/36 maxlen: 36
2a10:fa81:f00::/40 maxlen: 40
2a10:fa81:1500::/40 maxlen: 48
2a10:fa81:2943::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 15:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:71:5d:fe:49:54:31:69:20:47:74:ee:c4:f0:a1:3e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 5 11:39:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68c12de43fcdccb147ec8deb35b198f69489976d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:03:93:1f:83:9b:04:41:9e:9e:29:4c:ea:
b2:b9:aa:7d:e4:d8:c6:8b:91:87:5d:37:8a:42:73:
b8:70:97:ab:19:1b:7c:f3:16:35:2c:e3:32:71:ce:
79:fe:20:78:19:1c:08:07:ec:ab:5c:33:1a:93:b3:
2b:8c:d9:13:45:bc:94:c3:7a:af:09:39:81:66:13:
56:ea:aa:86:11:0a:4b:c3:6f:49:70:60:f7:a7:96:
e7:af:f8:0f:d1:56:5f:47:7a:1a:6a:9f:8f:1a:52:
de:07:e6:c6:15:3b:f0:bd:5f:de:a6:07:18:ec:09:
07:cb:7b:e6:d1:23:80:08:8f:08:26:fc:51:05:8f:
40:47:cf:b8:05:c1:f3:7f:ac:65:f3:28:e3:10:98:
01:cd:50:da:9e:49:92:70:85:f8:19:fe:28:c2:4a:
cf:ad:4f:75:e7:e3:5e:a9:37:00:47:61:6e:3e:bf:
cc:49:5d:71:97:ad:eb:e9:e2:95:b8:02:74:a0:c6:
7b:36:26:40:8a:c5:1e:9d:5e:4f:0b:17:3e:36:84:
1d:6c:0d:3b:41:9e:c4:8d:71:ac:e6:fe:71:30:4a:
89:56:82:eb:65:2b:ac:f5:ad:21:db:98:8e:6c:4e:
3a:a3:0d:80:53:77:5d:b6:f0:29:67:7c:6e:94:24:
ac:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C1:2D:E4:3F:CD:CC:B1:47:EC:8D:EB:35:B1:98:F6:94:89:97:6D
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/aMEt5D_NzLFH7I3rNbGY9pSJl20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:5::-2a10:fa80:6:ffff:ffff:ffff:ffff:ffff
2a10:fa80:f::/48
2a10:fa80:2000::/36
2a10:fa81:f00::/40
2a10:fa81:1500::/40
2a10:fa81:2943::/48
Signature Algorithm: sha256WithRSAEncryption
03:bb:06:14:c0:72:20:e5:6f:d7:3c:13:f5:22:26:83:0c:ac:
80:d7:b1:da:d6:8c:74:5c:c3:d0:6f:40:12:aa:39:b7:f1:8e:
bd:45:23:c7:95:30:c3:82:c3:c4:66:10:18:23:0f:17:ed:50:
9a:3e:75:71:33:19:d3:bc:51:a9:0f:89:96:3e:f8:e1:06:0d:
fa:d9:03:bd:06:48:ae:98:37:f4:2f:82:93:7f:9f:97:b5:ba:
2d:9d:94:98:b0:7c:fd:df:90:39:f7:2b:65:7e:ec:d1:20:b4:
a0:d9:17:9c:70:a6:72:60:af:bc:53:a9:ea:c3:33:8f:c8:37:
5a:83:5d:4c:ba:3d:99:55:64:01:fc:56:9c:ec:e1:91:18:60:
43:54:c2:b1:8f:5d:c2:6d:03:eb:bc:1b:44:91:94:52:34:e8:
11:0e:f0:a8:cd:6d:79:50:0b:0a:f4:51:25:d0:a3:63:62:85:
f7:8f:22:55:f6:4e:1c:e6:9e:0b:07:5d:05:2c:e7:d7:d7:35:
61:22:3e:92:c7:5b:91:f7:1d:c5:b6:26:e2:c5:ca:82:2e:f8:
f4:73:cc:44:21:77:49:2f:cc:2a:68:77:c0:92:79:9c:a7:51:
ac:c8:c4:e6:47:9f:5f:29:37:c3:24:8c:ab:b8:dc:4d:62:ab:
7e:f9:81:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 01:31:53 2026 by rpki-client