Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/xn8YjwpngPDjmjoUxDqVAtjRgcQ.roa
File: xn8YjwpngPDjmjoUxDqVAtjRgcQ.roa (raw, json)
Hash identifier: Kd9nqEk3v3Pxx9UCOeUjUcCuBxZjqub1i99qdqGIdJs=
Subject key identifier: C6:7F:18:8F:0A:67:80:F0:E3:9A:3A:14:C4:3A:95:02:D8:D1:81:C4
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 01A13F153E945F8CA6E107702B9DDB8F4283
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/xn8YjwpngPDjmjoUxDqVAtjRgcQ.roa
Signing time: Thu 15 Oct 2026 10:21:59 +0000
ROA not before: Thu 15 Oct 2026 10:21:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3352
IP address blocks: 2a02:ee80:4174::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:15:3e:94:5f:8c:a6:e1:07:70:2b:9d:db:8f:42:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Oct 15 10:21:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c67f188f0a6780f0e39a3a14c43a9502d8d181c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:a5:cf:a6:b2:1d:6c:7f:a4:98:ce:76:87:
c3:58:22:c6:ab:2d:99:d7:c8:3a:9c:01:0b:1f:80:
36:d9:0e:cb:e3:53:cc:33:40:df:ad:4e:60:ca:6a:
7d:dc:e5:24:a0:78:99:8c:f3:9f:b6:d8:5b:10:f1:
8b:e2:85:ab:e6:5c:b7:2a:1c:c4:16:f3:dc:08:fe:
8a:e6:42:05:01:23:1d:d8:2c:cb:7e:01:07:75:c4:
b4:92:35:cc:12:89:4e:5c:5d:15:cd:34:5c:ec:b6:
99:eb:86:9b:24:6e:9c:71:92:41:25:5e:42:e9:e8:
c3:56:a5:88:36:4b:44:d0:60:05:76:76:6d:d4:5e:
e1:f8:c4:a7:15:74:aa:8d:4c:02:e0:16:cb:6f:a3:
05:da:25:40:27:ff:fe:38:a5:9e:5b:e5:fa:99:d2:
1c:30:82:d1:31:aa:e8:67:d7:45:26:7f:a4:8c:b1:
11:c1:6a:05:4d:86:e2:2a:ef:89:b7:97:ad:d4:79:
40:45:1f:f1:57:0a:86:e9:f3:a5:61:c2:fc:b2:e4:
d5:ce:48:20:1c:44:06:b2:63:00:4e:38:b8:39:bf:
6e:9c:69:ea:fa:1c:12:97:e0:e7:2a:12:c5:96:64:
07:38:73:4e:7f:ca:4f:fe:dc:a5:af:15:e7:f2:57:
eb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7F:18:8F:0A:67:80:F0:E3:9A:3A:14:C4:3A:95:02:D8:D1:81:C4
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/xn8YjwpngPDjmjoUxDqVAtjRgcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:ee80:4174::/48
Signature Algorithm: sha256WithRSAEncryption
2e:13:f0:11:81:0d:0a:6f:4e:70:d5:d3:21:20:c0:69:b2:ef:
61:1d:26:bd:82:f6:e8:fd:14:cf:3c:b4:5b:1b:64:65:e8:34:
f0:a0:bf:1f:9e:94:e3:e2:17:75:d5:29:5f:da:cd:7f:cc:21:
38:37:50:3d:c5:bf:e5:b4:17:c0:52:18:59:84:c3:94:1d:5e:
d1:b8:39:e7:4d:6a:c7:28:29:cb:ab:28:c6:45:b0:c5:fb:f5:
6b:51:45:de:2f:be:b6:23:33:2a:a0:87:6f:03:93:39:15:1a:
f0:b5:8d:6a:88:1c:67:8a:ea:49:73:f9:c6:8c:cd:cf:e8:ca:
e2:07:5c:21:2c:f2:93:b3:9a:6e:92:91:1a:f3:8e:f5:3d:1a:
50:c8:cd:5d:a3:9c:cf:be:2c:21:4e:5e:dc:ae:4e:b3:b0:4f:
e7:c3:77:d9:92:7b:8c:7a:95:ca:e3:df:51:5c:3f:6c:65:67:
16:04:b4:1e:8a:2a:a0:ca:d2:cf:14:87:40:4f:bc:4d:cf:c0:
1a:4c:e9:9e:a2:b3:f3:f2:19:2e:bd:5a:a2:70:80:2d:7b:b0:
eb:c4:e8:80:4d:03:ff:ce:8c:17:a1:70:ce:0d:3e:c7:b2:7e:
cd:a9:d5:b2:24:b9:83:d1:c4:aa:5b:63:49:00:f5:3e:37:f8:
dc:f2:61:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:16:17 2026 by rpki-client