Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/rmFDE7ay2SaSeY5XInVoJtGaZ9U.roa
File: rmFDE7ay2SaSeY5XInVoJtGaZ9U.roa (raw, json)
Hash identifier: p8s3q3sUsUP6aPmFgau2I/opMoqUd0y8QfpLMPcHFxs=
Subject key identifier: AE:61:43:13:B6:B2:D9:26:92:79:8E:57:22:75:68:26:D1:9A:67:D5
Certificate issuer: /CN=230992191d853734bd572d61d1a8e3553bedf6c8
Certificate serial: 01A1BB576202AC8CF575AAA983EBDCBDBB38
Authority key identifier: 23:09:92:19:1D:85:37:34:BD:57:2D:61:D1:A8:E3:55:3B:ED:F6:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/rmFDE7ay2SaSeY5XInVoJtGaZ9U.roa
Signing time: Sun 08 Nov 2026 13:27:08 +0000
ROA not before: Sun 08 Nov 2026 13:27:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218150
IP address blocks: 2a12:dec0:333::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bb:57:62:02:ac:8c:f5:75:aa:a9:83:eb:dc:bd:bb:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230992191d853734bd572d61d1a8e3553bedf6c8
Validity
Not Before: Nov 8 13:27:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae614313b6b2d92692798e5722756826d19a67d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:27:58:83:82:15:9b:f8:30:c3:27:8b:7a:42:
1e:6b:93:01:39:39:ce:17:2f:79:bd:37:14:fb:7c:
6d:ba:a4:3e:e1:6d:80:11:2b:37:e3:40:9c:3d:f3:
c7:87:26:d3:7f:1d:54:e0:7d:a3:76:e2:51:02:89:
d3:42:b2:ed:79:f0:b1:19:26:a1:30:e8:bb:6c:39:
8c:12:21:c2:e2:66:99:12:0c:5d:2f:ca:33:18:3f:
0c:62:e4:f6:2b:46:42:26:c5:e2:d0:05:64:8a:ac:
a1:1e:59:be:1a:01:57:3e:22:84:80:10:b3:11:87:
d5:a8:28:13:b0:96:60:e8:6b:a9:ab:4a:1e:31:6c:
62:1d:b9:93:21:78:8e:d4:0e:d4:ac:19:b9:d3:ba:
1f:08:5f:1e:88:ca:88:ce:b5:36:4f:92:ab:4b:ee:
b9:0d:99:4c:61:8a:50:48:6a:8b:34:49:90:c8:44:
8e:3c:e4:cf:9e:ca:22:2a:75:b4:e2:77:d4:6b:c4:
43:76:15:93:bc:8b:bd:51:42:16:46:5e:42:3f:0b:
61:41:3a:dd:6d:4c:41:b0:f5:c7:5f:98:7f:89:3b:
c6:1f:58:cd:7a:e3:dc:89:42:7e:57:e3:7f:e6:47:
e0:2e:53:30:da:6d:f8:50:5a:bc:d4:1a:f7:69:1b:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:61:43:13:B6:B2:D9:26:92:79:8E:57:22:75:68:26:D1:9A:67:D5
X509v3 Authority Key Identifier:
keyid:23:09:92:19:1D:85:37:34:BD:57:2D:61:D1:A8:E3:55:3B:ED:F6:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/rmFDE7ay2SaSeY5XInVoJtGaZ9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dec0:333::/48
Signature Algorithm: sha256WithRSAEncryption
25:5d:e9:c4:f8:7a:13:8a:2b:39:fd:18:d7:a8:38:6a:e9:e6:
5b:28:cf:ab:70:7b:60:42:3b:b2:09:3e:8a:2d:0e:a9:0b:08:
46:b4:b0:30:55:f5:8e:c6:a5:3b:56:d4:b1:c6:70:d4:d6:e2:
fc:74:d1:a5:e5:4f:49:b4:35:a8:8a:e6:ff:e5:70:6d:b7:1d:
60:7d:c4:a3:53:56:27:1c:31:fe:11:ab:f0:60:cd:76:39:48:
06:cf:73:16:e2:65:bd:88:84:5a:97:64:22:9b:38:6e:9c:1b:
83:b2:2b:43:52:3d:01:9e:de:54:d6:e1:94:f8:c3:91:c6:e9:
c3:a7:7f:95:d0:6d:64:07:4e:56:56:54:16:a6:00:d1:7e:03:
44:21:38:e4:58:ab:9e:d1:dc:1b:cb:b4:5f:3e:71:79:07:b1:
71:ac:98:9f:11:93:7f:11:15:38:d9:ce:d1:23:af:79:43:98:
2d:00:fe:7a:f3:11:48:c7:51:54:18:fa:1f:bd:52:80:6e:76:
5a:78:88:15:97:a7:91:40:41:10:a4:23:42:37:4c:74:56:5e:
36:72:46:03:57:0d:02:77:2b:48:08:69:aa:ce:8a:8f:f8:52:
d6:aa:56:1c:86:1d:aa:3a:4c:15:cb:1f:f4:82:6f:09:5e:be:
d1:dc:b3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:23:57 2026 by rpki-client