Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/pqO9MWwMxJRmV-ioG2uSmGqA4GY.roa
File: pqO9MWwMxJRmV-ioG2uSmGqA4GY.roa (raw, json)
Hash identifier: A0ezupgIINRTNTBG+yF1Qzg97BaMFlNVUY/qQlp6tlU=
Subject key identifier: A6:A3:BD:31:6C:0C:C4:94:66:57:E8:A8:1B:6B:92:98:6A:80:E0:66
Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial: 01A1589EA744CA4BAD0941C4C973A1CE597A
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/pqO9MWwMxJRmV-ioG2uSmGqA4GY.roa
Signing time: Tue 20 Oct 2026 09:22:34 +0000
ROA not before: Tue 20 Oct 2026 09:22:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401861
IP address blocks: 2a11:e40::/29 maxlen: 48
2a11:3540::/29 maxlen: 48
2a11:5b40::/29 maxlen: 48
2a11:7ec0::/29 maxlen: 48
2a11:97c0::/29 maxlen: 48
2a11:b8c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:9e:a7:44:ca:4b:ad:09:41:c4:c9:73:a1:ce:59:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Validity
Not Before: Oct 20 09:22:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6a3bd316c0cc4946657e8a81b6b92986a80e066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f3:e3:55:20:f1:0f:ca:90:67:69:f1:d8:31:
3c:18:23:16:a5:4a:86:32:f3:1c:6f:ae:d3:d1:89:
a7:f5:68:86:31:23:0a:ec:d3:45:5b:7c:cc:c8:ed:
5b:7c:3e:aa:20:b1:65:34:1c:fe:c2:eb:5f:83:92:
74:a9:b4:67:e9:d6:a5:58:a7:59:72:1f:7c:4d:ce:
bc:85:6d:1d:f8:30:dc:20:cc:2b:68:d8:a4:5e:95:
58:7d:3d:5e:bb:aa:47:6e:08:27:69:6b:12:12:03:
2c:6f:bb:c1:f7:08:3a:11:b6:52:7d:78:d2:4a:79:
d7:4c:ec:8d:d0:38:94:b8:15:ee:14:14:5c:2e:bf:
fc:02:92:29:37:5a:0b:dd:a1:a5:08:9e:0d:12:bc:
99:5f:80:51:47:4f:b7:82:62:0c:64:15:8d:a0:4f:
7a:e5:fa:9f:d0:b8:d6:44:db:73:6b:db:af:a9:b0:
d4:e3:d3:e8:b9:d2:c5:95:56:1f:f0:65:94:20:de:
a3:60:e7:2e:0a:10:c2:d8:c2:8b:d9:cb:38:fd:f8:
af:12:e0:7c:98:97:75:54:99:12:a9:4d:63:48:d8:
8d:2d:8c:a1:31:fe:6d:89:e2:83:ef:0d:9c:0e:7c:
eb:fd:44:94:0f:bc:ac:b7:f1:e6:d8:46:f8:3f:5f:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A3:BD:31:6C:0C:C4:94:66:57:E8:A8:1B:6B:92:98:6A:80:E0:66
X509v3 Authority Key Identifier:
keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/pqO9MWwMxJRmV-ioG2uSmGqA4GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:e40::/29
2a11:3540::/29
2a11:5b40::/29
2a11:7ec0::/29
2a11:97c0::/29
2a11:b8c0::/29
Signature Algorithm: sha256WithRSAEncryption
18:6c:02:96:a6:2e:1b:be:5a:d0:40:e8:42:17:a0:35:30:e5:
f8:6a:04:79:03:62:19:c7:bb:29:65:05:d8:8e:7f:e7:e1:9e:
34:d9:22:33:21:13:68:b2:fa:f8:c4:1f:51:1b:a4:91:df:4b:
03:f4:57:f2:65:15:74:77:ac:fb:3b:1b:77:90:ac:14:97:07:
25:55:a7:63:c2:6b:8b:c1:20:65:e5:a1:10:a8:90:9c:e0:cb:
a6:ab:d9:ea:1a:16:6f:f7:26:6d:6b:15:dd:7f:5b:4c:81:44:
b3:2a:df:e6:98:d2:39:aa:85:39:c2:36:f2:80:28:e7:9a:eb:
b7:40:ff:10:62:4f:dc:8f:92:80:7c:e8:03:95:96:2f:9d:26:
1f:59:f7:1f:aa:d4:31:32:01:ba:b7:f9:3d:36:66:2d:56:93:
9f:e4:03:56:3e:c2:71:33:9d:ac:07:5a:54:9e:07:2d:be:16:
0f:b5:c6:a9:fd:1a:da:d6:ce:f1:db:52:02:6e:85:97:ef:69:
13:a1:cc:46:ab:93:41:df:5a:14:87:47:41:20:8b:ed:86:7f:
a7:43:8f:26:36:4d:9f:8f:e7:9f:89:6d:32:6f:64:df:4e:c7:
eb:45:3e:a5:6e:5f:30:99:0e:1c:05:bb:db:12:56:57:d6:8b:
14:6a:40:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:33:11 2026 by rpki-client