Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/pOIuDBEkoq7VJ1WH33qIfih-ISc.roa
File: pOIuDBEkoq7VJ1WH33qIfih-ISc.roa (raw, json)
Hash identifier: X4NB/WumcFxqMtQqwFAxWEPHaQYbJfAGl8Ne+TeIR0Y=
Subject key identifier: A4:E2:2E:0C:11:24:A2:AE:D5:27:55:87:DF:7A:88:7E:28:7E:21:27
Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial: 019F4C4A935964AD61CE93435B8B9FF9D477
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/pOIuDBEkoq7VJ1WH33qIfih-ISc.roa
Signing time: Fri 10 Jul 2026 13:49:43 +0000
ROA not before: Fri 10 Jul 2026 13:49:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212947
IP address blocks: 2a0b:8c40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:4a:93:59:64:ad:61:ce:93:43:5b:8b:9f:f9:d4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Validity
Not Before: Jul 10 13:49:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4e22e0c1124a2aed5275587df7a887e287e2127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:1f:eb:e4:1a:34:16:f8:5b:4a:5b:04:0f:
e8:ca:bd:10:41:09:1f:ac:76:2b:7d:b9:66:5d:45:
71:b4:2c:7b:a9:93:d9:3d:19:67:39:b8:86:ca:44:
2c:4e:b8:a5:c4:e0:ff:d5:88:ae:79:4c:55:13:2d:
d8:4b:3c:53:8b:98:6f:b1:53:34:44:4b:51:c2:11:
8c:1c:2b:5d:c0:63:2c:c5:d1:37:8e:98:4f:53:1e:
bf:9c:4b:92:77:51:89:62:ec:bb:79:7c:64:58:c1:
57:28:1b:66:01:e2:d0:83:cc:a8:28:23:ed:dd:b0:
be:e9:17:18:50:60:26:74:69:0c:43:26:31:15:5e:
41:6c:be:fc:74:3a:b4:5c:0f:5c:58:78:56:44:9b:
00:be:b6:87:ea:91:7c:e1:ed:3b:06:8b:fd:0e:16:
ee:5b:2d:ae:ee:7d:84:5e:67:29:c1:fc:9a:ef:eb:
9c:ac:d7:8f:eb:9a:da:94:ff:22:63:e1:ea:b7:8a:
26:a0:79:a3:4d:7c:1b:70:54:18:17:25:59:a3:9a:
01:3b:96:18:95:05:cd:40:c0:68:92:54:27:c0:16:
76:36:b6:9e:a6:2f:94:68:dc:c4:a3:e7:64:2c:e8:
2d:2f:8b:35:29:45:a8:47:fc:c9:71:53:67:c3:08:
53:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E2:2E:0C:11:24:A2:AE:D5:27:55:87:DF:7A:88:7E:28:7E:21:27
X509v3 Authority Key Identifier:
keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/pOIuDBEkoq7VJ1WH33qIfih-ISc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:8c40::/32
Signature Algorithm: sha256WithRSAEncryption
70:ff:76:55:2f:c0:2e:d9:0d:f1:b2:cc:7c:3b:18:84:dd:82:
82:74:0c:5e:7a:32:ff:4f:b2:a9:c1:60:ba:7f:e3:8d:99:b2:
42:c1:2d:2d:b2:82:f2:93:40:f7:a9:d4:17:2f:4c:fa:ea:16:
f0:50:81:0a:32:07:a0:fb:cf:76:55:8b:55:15:c1:d8:e8:19:
a3:c0:c6:2e:f1:56:0c:a8:99:18:d0:ca:99:30:d8:b4:66:b8:
37:be:3d:de:7b:c8:0f:28:e5:12:d2:c8:5b:f2:91:53:96:64:
ec:58:a8:29:45:6b:e7:b4:75:d2:1a:da:ef:47:e2:3e:e9:87:
d1:d3:c4:07:7a:f2:f2:b6:31:d9:50:11:cf:58:1f:ea:df:2a:
35:69:7e:c4:89:bc:4d:a7:0e:51:08:1e:76:b0:8f:14:70:61:
eb:e5:18:33:d3:69:54:01:02:f9:9b:0d:d0:bf:97:09:fa:c6:
77:4c:8b:83:71:78:fa:3f:a0:6c:0c:e8:b0:72:df:04:32:45:
69:a6:3f:d5:3a:01:c7:86:49:00:2e:7e:52:b3:e9:85:d1:53:
a0:59:39:cb:bf:b6:3b:6d:1c:6a:f7:f3:4a:4e:3e:f4:d8:53:
93:ee:5f:34:14:5c:d7:11:4d:46:a0:3d:bf:75:c7:7d:e0:2e:
d8:5e:91:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:54:59 2026 by rpki-client