Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/ahBoY1M_cc74uw-iR1AqZEMbmRQ.roa
File: ahBoY1M_cc74uw-iR1AqZEMbmRQ.roa (raw, json)
Hash identifier: 7EDYCangycOFH7zikDBAhAj3csMnJGKSKg1o7Z07Z60=
Subject key identifier: 6A:10:68:63:53:3F:71:CE:F8:BB:0F:A2:47:50:2A:64:43:1B:99:14
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A02F32B74F0C96D5E442F5FD6FD5B1FDE8
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/ahBoY1M_cc74uw-iR1AqZEMbmRQ.roa
Signing time: Sun 23 Aug 2026 15:17:27 +0000
ROA not before: Sun 23 Aug 2026 15:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219207
IP address blocks: 2a10:fa81:e00::/40 maxlen: 48
2a10:fa86::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2f:32:b7:4f:0c:96:d5:e4:42:f5:fd:6f:d5:b1:fd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Aug 23 15:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a106863533f71cef8bb0fa247502a64431b9914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fd:9e:b6:11:86:b4:b0:de:00:23:70:c5:6d:
8c:15:93:b5:34:11:02:dd:19:f5:2d:c3:18:85:65:
f0:ac:bb:c0:78:36:0c:82:28:81:2e:a6:d1:9f:d0:
e3:33:30:70:2e:19:27:b6:19:c9:53:1a:8e:5e:de:
ad:ca:4c:ee:cd:37:a2:5b:54:6f:7b:18:70:0d:c2:
87:e9:ca:c5:87:60:af:f5:e3:8d:ca:cc:37:c2:1f:
67:a9:10:36:07:fe:dd:98:8c:e7:fa:0c:41:ea:77:
d2:74:1b:a2:b9:cb:ec:0f:d6:9d:b0:91:00:9c:75:
8e:48:7d:df:d6:6b:1e:75:68:8f:79:ac:40:15:6c:
8d:b0:d3:df:35:bb:e5:97:4a:6c:98:51:31:e4:38:
72:cf:d7:15:68:44:a8:f1:dc:3e:49:75:f6:0a:fd:
9a:34:f2:01:e9:61:10:68:fc:9e:06:28:ac:a5:a1:
b8:18:f4:bb:7e:af:9d:74:27:b3:bc:9c:ce:17:96:
fb:82:97:1b:21:1e:98:fb:3c:61:c9:1d:f1:29:58:
d5:11:a5:0b:14:4f:2f:cf:cd:f0:4c:b3:e0:69:9e:
62:af:15:86:c9:48:3d:69:8f:d5:27:c2:a4:55:54:
1c:f1:63:50:d3:eb:af:0a:a9:08:3d:46:ee:ac:f0:
ac:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:10:68:63:53:3F:71:CE:F8:BB:0F:A2:47:50:2A:64:43:1B:99:14
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/ahBoY1M_cc74uw-iR1AqZEMbmRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:e00::/40
2a10:fa86::/32
Signature Algorithm: sha256WithRSAEncryption
82:ff:ff:da:f2:5a:4e:02:71:9f:cd:fe:9f:fe:3f:66:f3:c1:
3c:5e:9b:f8:d5:c9:1b:f9:2b:0b:a8:d9:9f:22:c4:5c:56:54:
ed:76:d5:aa:fc:17:4c:a2:ef:3b:bd:cb:1e:73:94:80:6b:f5:
cf:ce:be:a2:09:a8:aa:b3:fb:b0:17:3d:e4:f6:ba:2c:e3:b9:
e6:7c:a5:ce:e2:08:6e:e5:14:8e:e8:00:8d:45:fd:4b:e6:b1:
9b:82:cd:cc:e4:d2:c1:44:d6:c6:c5:42:cf:0a:3e:91:e1:6a:
0a:c3:87:87:51:55:35:65:bb:77:81:79:14:0e:09:7f:bb:96:
1b:e3:78:c4:6e:e8:89:7d:77:b8:cf:75:99:52:4a:26:a7:1f:
72:43:6e:4d:96:60:14:4f:6a:bf:74:b1:4a:46:0c:31:92:8c:
b2:80:da:7a:0e:01:2b:f3:31:4e:29:2e:04:48:77:ba:49:84:
d4:b1:67:9e:79:3f:f2:e7:6c:c5:2b:50:a9:73:5a:d7:72:26:
23:4e:0f:ec:1f:2d:c2:54:af:b1:59:36:0b:60:91:34:ab:cc:
dc:9e:ff:3a:e2:4b:46:58:ed:b1:3b:5d:ee:f3:8d:2e:a2:f9:
8e:9e:57:08:60:1f:b8:86:ca:55:11:ae:91:5f:f2:af:dd:44:
c1:a6:5f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:20 2026 by rpki-client