Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/d0b316-909e-4c99-b679-111b1c2987c1/1/pXWi5rhKsu2-vy5hbthrSqiVGqk.roa
File: pXWi5rhKsu2-vy5hbthrSqiVGqk.roa (raw, json)
Hash identifier: WeTdZTd6WH/iKIseN8SAJGdy9bh1UW5D5zEDLozS7lk=
Subject key identifier: A5:75:A2:E6:B8:4A:B2:ED:BE:BF:2E:61:6E:D8:6B:4A:A8:95:1A:A9
Certificate issuer: /CN=7d2ed9772ad06ce1d35911d26c3979b4e26ebe43
Certificate serial: 01A0DE29B1E8FAE9E3A66D2EDD7DABF03E75
Authority key identifier: 7D:2E:D9:77:2A:D0:6C:E1:D3:59:11:D2:6C:39:79:B4:E2:6E:BE:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS7ZdyrQbOHTWRHSbDl5tOJuvkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/d0b316-909e-4c99-b679-111b1c2987c1/1/pXWi5rhKsu2-vy5hbthrSqiVGqk.roa
Signing time: Sat 26 Sep 2026 14:41:09 +0000
ROA not before: Sat 26 Sep 2026 14:41:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207483
IP address blocks: 2a0f:6d00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/d0b316-909e-4c99-b679-111b1c2987c1/1/fS7ZdyrQbOHTWRHSbDl5tOJuvkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/d0b316-909e-4c99-b679-111b1c2987c1/1/fS7ZdyrQbOHTWRHSbDl5tOJuvkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS7ZdyrQbOHTWRHSbDl5tOJuvkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:29:b1:e8:fa:e9:e3:a6:6d:2e:dd:7d:ab:f0:3e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ed9772ad06ce1d35911d26c3979b4e26ebe43
Validity
Not Before: Sep 26 14:41:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a575a2e6b84ab2edbebf2e616ed86b4aa8951aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:b6:d2:ed:a4:46:71:fe:07:4e:68:89:1c:
2c:75:f3:e9:a6:24:d6:90:0a:f8:e5:55:02:6e:95:
37:a1:b7:cf:43:93:9c:af:52:d6:f3:fb:ab:93:e4:
16:c7:92:6b:6c:04:d6:39:b1:19:b1:19:e7:ee:49:
83:9c:3f:6b:04:84:0c:0d:dd:ab:92:89:47:ec:16:
2a:68:d6:6b:0f:6d:5e:2e:41:ac:50:0a:7d:7b:f6:
d9:ee:e3:5d:78:88:19:7d:86:dd:4a:71:41:c2:3f:
3f:08:ba:68:1c:49:12:6c:8e:75:e6:1c:a6:90:4f:
14:f9:23:a0:01:99:02:c8:a8:b2:f4:71:b0:43:86:
5c:67:87:3f:2c:e5:40:03:f0:80:10:f6:a0:c6:ed:
8b:a6:58:f8:38:7a:f6:7d:6b:78:0f:43:25:fb:9e:
38:39:fd:b5:b8:83:01:2d:f0:28:08:cb:87:d6:ee:
77:3d:ee:df:77:03:99:81:4c:2a:68:ab:11:18:19:
dd:db:92:c9:18:b6:e6:80:a4:24:98:86:75:5d:2d:
c3:6d:3b:03:ca:a0:b4:d8:7a:e2:c7:c8:2b:e5:22:
35:7c:d5:ad:05:14:55:5f:65:49:47:55:cc:94:9d:
a6:c5:8f:b8:b7:b6:cf:e8:69:44:04:ec:41:4a:4d:
42:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:75:A2:E6:B8:4A:B2:ED:BE:BF:2E:61:6E:D8:6B:4A:A8:95:1A:A9
X509v3 Authority Key Identifier:
keyid:7D:2E:D9:77:2A:D0:6C:E1:D3:59:11:D2:6C:39:79:B4:E2:6E:BE:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS7ZdyrQbOHTWRHSbDl5tOJuvkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0b316-909e-4c99-b679-111b1c2987c1/1/pXWi5rhKsu2-vy5hbthrSqiVGqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0b316-909e-4c99-b679-111b1c2987c1/1/fS7ZdyrQbOHTWRHSbDl5tOJuvkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6d00::/29
Signature Algorithm: sha256WithRSAEncryption
74:a8:e2:34:87:f2:08:4b:a8:23:1f:d4:56:12:fe:f8:fc:3e:
10:ca:5d:2e:0b:65:70:c8:45:74:2f:4e:b8:54:ac:f1:9e:98:
2f:71:94:fa:7d:86:f9:40:d5:9c:79:12:e5:4c:1c:04:9f:42:
c0:d6:a2:c0:ba:d3:14:86:a9:d3:7e:c6:55:87:19:f4:a5:5f:
80:6f:1b:ad:e2:80:29:3a:17:4e:5d:4f:d3:81:7d:00:81:f5:
ba:d5:65:c7:18:e5:11:cc:e1:d4:55:b1:18:30:2f:ea:8b:a1:
ae:0e:39:5a:e9:6c:f7:1e:43:f1:1f:22:61:98:6a:ff:df:de:
33:9f:cd:6d:8a:9c:e6:45:4f:06:59:8a:34:ef:b4:95:be:f8:
c1:14:37:65:82:76:95:f0:d1:62:a5:f6:6f:a0:ac:f1:89:9e:
34:cb:c8:5e:ac:11:5d:54:b1:c0:c5:e6:33:e2:7e:ce:77:32:
2f:ab:b0:b1:1f:69:f8:22:5c:f5:bf:32:52:6b:0c:62:47:d7:
cd:65:fc:cd:a2:f4:b0:79:5b:70:b4:b3:d5:de:60:98:bb:d6:
a0:4b:bc:d4:a2:d7:d2:3a:a5:86:de:4a:2d:19:f6:e7:57:6b:
70:f7:6b:60:7a:24:fd:54:ae:d7:51:18:c0:3b:39:54:46:8c:
9b:a0:1e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:47:04 2026 by rpki-client