Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/27Onk2ipikR9sCWrsjcv1XdwhhU.roa
File: 27Onk2ipikR9sCWrsjcv1XdwhhU.roa (raw, json)
Hash identifier: tYN0cEsdrNAHZ2qeeAujA9ZWZlxGIp9FSB29X48sim4=
Subject key identifier: DB:B3:A7:93:68:A9:8A:44:7D:B0:25:AB:B2:37:2F:D5:77:70:86:15
Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Certificate serial: 01A187CC211C6FD7A9EFBD4005757AE7C498
Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/27Onk2ipikR9sCWrsjcv1XdwhhU.roa
Signing time: Thu 29 Oct 2026 13:14:24 +0000
ROA not before: Thu 29 Oct 2026 13:14:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17612
IP address blocks: 2a0f:3ec0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:cc:21:1c:6f:d7:a9:ef:bd:40:05:75:7a:e7:c4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Validity
Not Before: Oct 29 13:14:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbb3a79368a98a447db025abb2372fd577708615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:39:39:31:97:bc:4d:9f:b3:a9:c6:27:e1:36:
19:59:ad:46:fb:66:fd:c7:85:a8:e7:d8:84:f0:2b:
01:d1:0b:f2:cb:10:04:1e:7e:3c:7f:ce:d3:a4:6b:
69:7c:0b:a9:80:5f:97:3f:c8:40:5b:d9:3b:a2:65:
37:eb:af:8f:c3:5e:0b:ec:3a:ea:16:c6:ae:a7:8a:
a8:b3:86:d9:6d:0b:75:2c:20:ee:e2:8b:ff:2e:04:
98:9e:47:c2:b5:ac:b8:d3:af:91:06:75:8c:58:41:
1c:91:91:9c:25:ca:4a:3c:26:75:c2:9e:0f:d9:b5:
aa:ac:29:97:ed:44:c8:0f:df:a4:d8:a3:6f:86:9f:
ec:c9:95:57:f7:05:9e:d4:90:1d:eb:3b:05:63:40:
73:7d:35:c9:1b:d4:3d:d0:c9:f0:77:ac:e6:01:e4:
e8:4b:e2:c5:a6:a6:2e:24:fb:59:ff:fd:a3:20:61:
8a:c2:71:d2:39:a1:e3:1a:ab:72:5e:4f:2b:0f:e1:
3f:44:ec:b5:87:60:f3:67:d4:ed:f2:ba:f4:a8:00:
10:59:bd:2e:7f:c1:10:af:4e:05:bc:22:60:7c:c1:
44:b0:e4:c1:3c:9d:4e:c8:21:b2:51:cf:15:0c:a8:
c9:d2:ff:32:d4:b6:7b:3c:08:44:8c:26:6d:65:f2:
e1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B3:A7:93:68:A9:8A:44:7D:B0:25:AB:B2:37:2F:D5:77:70:86:15
X509v3 Authority Key Identifier:
keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/27Onk2ipikR9sCWrsjcv1XdwhhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3ec0::/29
Signature Algorithm: sha256WithRSAEncryption
2c:79:7b:e4:ab:ec:4c:e2:64:14:5e:3f:d5:ac:2b:b0:03:28:
15:77:8c:55:eb:f0:2b:1c:a8:91:0a:73:ef:0a:08:fb:05:5b:
e8:ca:15:c3:0a:fa:9c:cb:88:2c:8d:00:0b:ac:03:a7:bf:1a:
35:8e:37:6a:5b:43:8d:ef:a3:e4:d8:4b:a7:69:84:13:95:3c:
cc:40:af:43:75:ec:77:20:4b:0e:fe:5d:03:dc:7a:ea:03:c3:
f7:20:96:d7:5c:42:87:6c:cc:10:e8:25:11:33:20:ee:f5:15:
a1:66:1e:6e:7b:70:ef:5f:2b:c1:61:ad:a2:c9:e2:b1:09:74:
42:12:0c:83:a7:47:cf:99:1f:61:01:29:20:4e:13:06:21:2b:
23:91:a2:9e:fd:13:e1:42:5a:f3:69:43:1b:24:89:90:36:d8:
13:d5:33:7a:67:26:1a:63:3c:a6:b0:b8:e8:e7:84:a2:25:16:
f6:93:af:71:5c:34:0f:b5:b3:af:13:b4:d6:7f:44:58:69:cd:
71:f5:c1:96:e1:3c:54:a0:12:80:a0:ac:31:06:b5:6c:af:b5:
90:21:eb:89:85:85:a4:d0:c5:6c:c8:24:a6:92:aa:a5:b9:9e:
87:61:00:79:6f:3a:12:89:81:7e:90:34:2c:63:d2:5e:95:dd:
71:5b:d8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:38:38 2026 by rpki-client