Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/j2WPp3vJC-wWZHbhEZ2DrQsdzsk.roa
File: j2WPp3vJC-wWZHbhEZ2DrQsdzsk.roa (raw, json)
Hash identifier: Z8ZXgFM4/tqPMelVjY3euIectvRv78YZzY772TrB7ZI=
Subject key identifier: 8F:65:8F:A7:7B:C9:0B:EC:16:64:76:E1:11:9D:83:AD:0B:1D:CE:C9
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A13FF761905874462BCF60BFC72E338A8C
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/j2WPp3vJC-wWZHbhEZ2DrQsdzsk.roa
Signing time: Thu 15 Oct 2026 14:28:59 +0000
ROA not before: Thu 15 Oct 2026 14:28:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214566
IP address blocks: 2a10:fa81:a00::/40 maxlen: 40
2a10:fa81:a00::/48 maxlen: 48
2a10:fa81:a01::/48 maxlen: 48
2a10:fa81:a02::/48 maxlen: 48
2a10:fa81:a03::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:f7:61:90:58:74:46:2b:cf:60:bf:c7:2e:33:8a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Oct 15 14:28:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f658fa77bc90bec166476e1119d83ad0b1dcec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7e:53:41:05:d7:f3:d0:11:ea:19:ab:39:4e:
a7:44:b9:ef:10:80:a2:bd:d8:fd:3a:42:6d:e5:3c:
7d:f7:87:f9:d4:0e:0a:75:56:34:46:5b:2c:9e:a2:
46:c9:19:be:cf:3d:82:11:0f:c9:d5:c7:c7:87:b3:
67:76:a5:dc:bc:c2:cc:63:61:19:41:7c:78:bf:97:
2c:d8:8b:5e:66:7e:03:dd:21:37:4a:b9:8d:e4:f4:
a6:0f:b3:c6:56:9a:22:f2:49:32:84:bc:7a:11:84:
7d:42:60:c6:8f:d7:bf:0e:0a:50:89:0d:8c:f4:f4:
d0:43:59:28:8b:b1:96:4c:be:73:66:c9:0a:90:e6:
37:7d:d4:81:50:f2:58:27:5f:ad:b8:4e:11:f3:23:
54:6f:30:39:f5:96:08:e9:00:f3:9d:1f:f3:4a:9f:
f9:05:eb:03:73:6b:ce:ab:6d:70:66:a5:ae:ae:2e:
bd:38:c1:f5:a5:ad:64:5d:61:37:a4:bc:cb:a8:7c:
d0:40:d3:76:11:31:6f:6a:6b:8f:59:cc:41:41:f3:
2d:c2:50:ba:51:42:da:b6:2d:dd:aa:cf:3b:33:2f:
3d:3e:36:34:77:b9:58:23:9e:76:7d:5b:22:7f:94:
2c:89:54:0a:c1:c2:02:6c:2f:77:09:1a:25:2a:72:
78:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:65:8F:A7:7B:C9:0B:EC:16:64:76:E1:11:9D:83:AD:0B:1D:CE:C9
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/j2WPp3vJC-wWZHbhEZ2DrQsdzsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:a00::/40
Signature Algorithm: sha256WithRSAEncryption
3c:2b:78:f0:51:33:c7:d1:12:02:f2:54:88:b2:17:1b:b7:01:
78:e0:e0:20:58:46:8d:0f:a7:09:7f:22:ef:41:68:35:49:29:
7c:05:1a:eb:fe:04:f4:0d:b3:00:bb:a8:20:13:87:e5:3b:a3:
ba:c1:dc:7e:dd:7c:8b:0d:4a:2f:93:02:75:e8:6b:d7:11:a0:
a7:9e:36:cb:ec:92:d4:5d:78:48:ca:d4:f7:ac:bc:93:33:40:
98:4c:0e:e7:3f:6c:ea:7a:ef:8a:9b:14:f6:c2:6c:2e:76:63:
ea:ef:49:73:88:05:4e:78:82:65:df:a4:65:7a:98:9a:80:c0:
dd:e1:2b:90:71:9e:eb:9b:73:1a:da:ed:b5:cd:db:4d:04:ab:
07:1f:b4:de:dc:cf:b2:90:f5:c6:a1:2d:49:2d:b8:a3:d2:42:
a9:e3:ef:8c:6c:67:23:c3:8a:77:82:60:d4:17:e8:de:39:dd:
93:c3:ee:73:b9:9c:a3:e2:a8:f0:66:15:55:4c:51:b9:cd:25:
b1:c1:92:c8:47:0e:4e:93:60:80:c8:0c:f8:59:da:16:b0:cf:
a2:44:23:03:9e:32:94:c2:25:3d:f6:83:92:e2:a5:b9:ea:43:
9c:d1:bd:00:09:c5:c5:6d:d9:10:a3:44:c2:4b:11:f3:12:87:
88:0d:ce:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 21:12:36 2026 by rpki-client