Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/2whxzmDVbfAO3ymvYfT1Br7cjzo.roa
File: 2whxzmDVbfAO3ymvYfT1Br7cjzo.roa (raw, json)
Hash identifier: jBvzWSDKzRLptdoSp5Wyo4EetGXs4eXZMTjT2PaKhik=
Subject key identifier: DB:08:71:CE:60:D5:6D:F0:0E:DF:29:AF:61:F4:F5:06:BE:DC:8F:3A
Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial: 019FF6A057FFA01549AB4E2BA408B6336750
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/2whxzmDVbfAO3ymvYfT1Br7cjzo.roa
Signing time: Wed 12 Aug 2026 15:38:51 +0000
ROA not before: Wed 12 Aug 2026 15:38:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198538
IP address blocks: 2a00:96c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:a0:57:ff:a0:15:49:ab:4e:2b:a4:08:b6:33:67:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Validity
Not Before: Aug 12 15:38:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db0871ce60d56df00edf29af61f4f506bedc8f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:95:29:a3:f2:5a:48:e6:5d:42:42:33:cc:
d7:98:75:c2:5f:a7:73:0e:4c:2d:55:aa:7c:93:f5:
46:93:a3:89:e9:f8:b7:7c:2e:da:45:c2:25:07:c5:
81:c3:61:04:2f:29:10:85:4e:35:f5:4a:53:bf:06:
e6:e4:a4:17:6f:3d:58:97:5b:06:7d:f6:1f:b9:cc:
17:ca:34:0b:63:e7:62:de:cb:09:ca:10:4c:72:5c:
1d:a3:2d:93:bb:53:e4:05:b9:7a:5f:71:43:3a:7c:
8b:27:33:f8:ee:73:9b:8a:f1:e6:a8:cf:05:77:6a:
db:2c:c5:39:da:97:b6:3b:96:52:19:b2:98:b5:50:
a0:6c:be:99:85:6c:fc:7b:81:89:79:bc:86:7b:86:
93:5c:82:b1:fc:f0:3b:99:3a:dd:42:97:05:3e:63:
44:ec:f6:ad:83:08:b1:50:29:a4:26:ab:2d:14:da:
54:e8:0b:92:fe:da:d9:18:d6:c4:f2:61:d3:85:ad:
f4:19:e1:ac:af:7a:39:9b:aa:52:a5:1b:1f:10:de:
4f:86:89:9e:5e:bb:8a:ac:2c:47:3d:8f:cc:44:3d:
8b:34:9e:86:8f:4c:15:4c:94:d7:02:8d:fe:8b:9e:
79:43:90:0a:f8:9b:5f:3a:ac:61:2f:fa:5b:9c:89:
c4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:08:71:CE:60:D5:6D:F0:0E:DF:29:AF:61:F4:F5:06:BE:DC:8F:3A
X509v3 Authority Key Identifier:
keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/2whxzmDVbfAO3ymvYfT1Br7cjzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:96c0::/32
Signature Algorithm: sha256WithRSAEncryption
2a:e4:0e:e7:ac:ac:e7:43:c1:3b:eb:a1:e4:b5:cb:df:cf:29:
22:83:bc:fe:51:51:4f:66:30:95:b0:38:ac:7d:fc:e0:34:a7:
a5:b6:5f:1d:d1:e3:05:fd:1c:e7:20:2b:93:7e:da:7e:3f:24:
49:f9:14:df:e9:66:6e:f6:6b:20:e9:29:03:0a:30:cf:c1:1b:
37:0a:ac:db:37:b7:6e:74:0e:99:71:a4:8f:b3:2c:6e:15:93:
8f:43:bf:10:cc:88:7a:0a:5c:86:f4:d3:49:ad:88:90:28:d7:
e9:4b:70:45:16:bf:89:c1:ef:3a:d8:fd:38:22:15:25:78:f4:
95:64:1d:20:42:8e:93:07:ed:75:db:d4:40:eb:7b:f9:c9:79:
b1:1b:e8:b2:55:76:97:6f:89:44:43:bf:48:c0:93:ce:7a:a2:
64:73:04:17:18:b1:cf:0c:f7:eb:cf:c0:03:32:07:5a:54:5f:
59:c4:c7:8c:eb:b6:dd:e0:5d:37:a6:c2:07:44:d0:e9:40:af:
e5:23:06:18:30:72:43:b4:aa:c4:d1:fc:55:6f:f4:e2:a3:b3:
11:42:f0:f0:24:47:df:be:06:81:58:1a:90:a5:dd:f8:2b:db:
71:8a:95:af:3f:98:63:9a:56:c0:09:81:d3:75:e9:46:0d:4c:
76:f3:e4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 21:29:25 2026 by rpki-client