Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/tWXHUg2Vn7_-mrAYlefPvZyECK4.roa
File: tWXHUg2Vn7_-mrAYlefPvZyECK4.roa (raw, json)
Hash identifier: aukU+EuzdQtPw4KeDsQgc7I5oTwnlHLSCu9Gk47rPG4=
Subject key identifier: B5:65:C7:52:0D:95:9F:BF:FE:9A:B0:18:95:E7:CF:BD:9C:84:08:AE
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 01A0C85989CCCC966C8C345C6ADEE6B62EFD
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/tWXHUg2Vn7_-mrAYlefPvZyECK4.roa
Signing time: Tue 22 Sep 2026 09:01:46 +0000
ROA not before: Tue 22 Sep 2026 09:01:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 2a11:79c0::/29 maxlen: 32
2a11:f5c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:89:cc:cc:96:6c:8c:34:5c:6a:de:e6:b6:2e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Sep 22 09:01:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b565c7520d959fbffe9ab01895e7cfbd9c8408ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:4a:6b:88:92:f2:f9:eb:32:85:25:5b:69:
a6:f5:20:d3:e8:5e:bd:eb:6b:cc:b1:a3:a9:80:c5:
2f:b1:41:99:fe:02:d9:65:5f:fd:db:9a:ca:61:fa:
b6:3f:a6:f3:c6:63:d0:cd:32:15:56:f6:36:46:f0:
1a:78:39:91:c0:cf:e8:45:19:6a:ed:4b:6e:3f:0a:
0c:83:cc:3d:ba:43:c2:17:60:e9:9c:f5:a5:11:90:
df:dd:f2:27:34:e1:a0:42:ba:9a:aa:7b:67:f3:0d:
23:3c:be:8b:ec:43:ed:49:6f:8a:e6:8c:e8:5b:85:
58:ba:11:55:44:90:02:92:e1:67:ef:50:dc:1e:9e:
2d:ce:b2:84:6d:89:af:77:aa:c2:d7:23:15:ab:db:
57:65:2c:ce:63:cc:9f:98:8e:4b:0e:a8:96:ba:c9:
af:36:ea:ea:4b:85:86:2e:10:6e:f9:ca:5c:f5:f8:
9b:79:2a:6a:11:70:6b:a1:21:a3:79:f1:24:ef:4b:
8e:76:01:de:5f:12:4b:8e:96:bb:30:44:62:59:32:
30:88:a1:10:0f:1a:16:e9:09:e5:30:cd:7b:f2:29:
82:c3:98:23:43:5f:5c:29:c4:db:b8:6e:ce:0e:2d:
7e:a3:b8:0d:ec:f3:2a:6a:9e:44:89:f5:72:89:7b:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:65:C7:52:0D:95:9F:BF:FE:9A:B0:18:95:E7:CF:BD:9C:84:08:AE
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/tWXHUg2Vn7_-mrAYlefPvZyECK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:79c0::/29
2a11:f5c0::/29
Signature Algorithm: sha256WithRSAEncryption
11:9c:00:30:0f:8b:40:1d:9c:07:93:f8:b7:07:c4:06:ea:0c:
75:56:6f:2e:49:9d:8a:de:5a:b8:08:8c:25:74:59:3e:1a:4b:
10:d9:cc:38:42:3e:3d:55:b4:5d:c7:a8:c3:25:b5:0c:e2:22:
af:16:13:0e:60:7a:3f:20:64:7a:12:f7:1b:99:58:49:1a:64:
35:2d:92:37:66:26:37:ee:6b:71:9d:a9:d3:c3:d3:cf:94:c1:
a9:65:21:40:1e:53:97:b2:b5:64:53:ec:9e:c7:dc:0c:08:eb:
1c:46:ed:d7:1e:52:b3:81:29:2e:5a:3f:15:50:2c:29:1f:3c:
a5:fe:86:2d:f5:86:83:df:f1:42:c6:0d:d4:da:97:d9:dd:76:
a5:95:79:da:75:c2:a3:31:b3:d5:a9:8a:7d:9c:17:89:6f:2e:
8a:b1:0f:8e:da:d4:21:5b:33:e9:9d:33:a9:7b:f5:b1:ad:20:
03:99:f1:ee:b7:03:ec:50:b3:01:70:33:8e:b6:1d:ce:87:b5:
06:19:b9:b9:10:b7:87:a6:59:3c:f8:57:96:b9:4f:f6:61:19:
10:1f:23:68:60:82:53:7d:f5:85:c6:e3:ff:d7:a3:9b:2f:d7:
5b:63:20:56:fc:7e:ac:89:20:44:57:43:15:7b:64:27:1a:53:
41:d6:d3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:14:07 2026 by rpki-client