Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/g1N4qoGuPzDSs-NBZPyDt3Wi8H4.roa
File: g1N4qoGuPzDSs-NBZPyDt3Wi8H4.roa (raw, json)
Hash identifier: y90qQZXm166PkSkMvcplFAul6edvfsf3wjN7ElhpmDs=
Subject key identifier: 83:53:78:AA:81:AE:3F:30:D2:B3:E3:41:64:FC:83:B7:75:A2:F0:7E
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A039170FB7F58FF137E439247D65FE2B5C
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/g1N4qoGuPzDSs-NBZPyDt3Wi8H4.roa
Signing time: Tue 25 Aug 2026 13:23:27 +0000
ROA not before: Tue 25 Aug 2026 13:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34927
IP address blocks: 2a10:fa81:1800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:17:0f:b7:f5:8f:f1:37:e4:39:24:7d:65:fe:2b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Aug 25 13:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=835378aa81ae3f30d2b3e34164fc83b775a2f07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:52:31:3d:1e:2d:cf:43:ce:34:5c:e4:ba:
c4:24:55:19:78:f8:88:63:09:26:00:92:76:ae:b7:
fe:4c:2b:20:c8:80:c5:61:cc:19:6c:ce:69:9d:2b:
41:93:45:2c:97:27:37:46:4a:aa:2b:9a:41:ba:2b:
48:9c:09:de:16:dc:67:f9:58:32:1a:26:05:a1:1f:
59:d6:ab:0e:2d:46:ad:be:a5:32:f8:a5:ed:69:39:
36:1a:55:25:ea:b1:c5:5a:68:eb:ea:e1:f3:47:1c:
ed:7c:7e:c6:54:be:5d:26:af:cc:68:dd:da:fe:b9:
9b:69:d2:ae:c9:3c:84:c0:73:da:ac:55:ba:c4:7e:
2d:55:40:e2:1e:bc:a6:7a:9d:49:d8:e4:f3:22:2b:
29:04:21:2b:a6:a4:d5:f6:a7:8f:75:c6:14:da:c5:
c6:40:29:92:cc:eb:04:3a:70:92:24:ec:05:4a:1a:
ea:eb:52:fa:2f:a6:15:b6:2a:ef:2d:8d:56:5d:22:
2f:6f:c7:0b:3c:f9:6e:c4:c8:f5:1b:39:06:a6:59:
76:38:d5:f6:15:a2:88:a8:84:05:25:28:bc:8a:76:
9f:cb:e9:0d:6e:40:4e:a9:98:2e:c4:a8:2c:7d:b5:
ce:7e:a8:0d:71:1b:67:24:4f:81:ad:ca:f0:d8:58:
10:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:53:78:AA:81:AE:3F:30:D2:B3:E3:41:64:FC:83:B7:75:A2:F0:7E
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/g1N4qoGuPzDSs-NBZPyDt3Wi8H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:1800::/40
Signature Algorithm: sha256WithRSAEncryption
27:95:22:8a:18:bc:8b:c2:e3:d0:39:c6:68:d2:58:41:b1:02:
07:f0:b6:df:dd:ae:31:d7:2b:29:34:1b:38:94:8f:d9:16:09:
e1:df:00:0c:e4:63:d7:82:52:72:0c:b7:4d:ec:22:11:d2:2d:
c6:dd:08:ef:8f:62:20:6c:52:88:6a:20:53:0d:8c:71:c6:d4:
64:27:ec:0d:9e:0f:40:95:e5:03:7f:79:8d:53:f0:02:3e:42:
bd:59:54:9a:15:6a:97:35:99:94:07:eb:63:90:92:9c:2b:50:
c1:af:0e:22:f5:30:5a:e1:e9:ef:ca:5a:26:26:83:4d:34:9e:
07:64:95:9a:5d:c6:3b:32:db:a7:8b:ab:45:98:c6:70:e3:2a:
ae:54:ce:56:a4:94:95:03:1d:47:cd:2e:86:d2:2d:43:86:d4:
8a:3f:36:0b:60:62:52:29:59:c2:5e:f7:0e:79:9f:b9:29:83:
19:09:b7:ef:2b:fb:91:28:d4:09:71:bf:8c:0b:d6:a5:08:db:
44:96:df:1e:16:7a:f3:be:37:0a:86:9f:8a:cd:31:fc:11:89:
90:53:1a:e1:14:4e:da:ba:13:dd:75:6e:6e:80:32:b3:31:12:
09:75:b3:c7:80:7d:51:19:17:2e:64:65:b1:df:a4:60:4d:04:
c1:64:27:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:30 2026 by rpki-client