Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/16w8fKX-NSNDBHMIkb6Syvbgttg.roa
File: 16w8fKX-NSNDBHMIkb6Syvbgttg.roa (raw, json)
Hash identifier: EfAdsi8h+oAMMwRDv56MXINYQxMMRARBe+9IrtMbR5Y=
Subject key identifier: D7:AC:3C:7C:A5:FE:35:23:43:04:73:08:91:BE:92:CA:F6:E0:B6:D8
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 01A0D45D487E5EB1662BFF48FA3FD173EE51
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/16w8fKX-NSNDBHMIkb6Syvbgttg.roa
Signing time: Thu 24 Sep 2026 17:01:18 +0000
ROA not before: Thu 24 Sep 2026 17:01:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63293
IP address blocks: 2a03:2887:ff00::/48 maxlen: 48
2a03:2887:ff02::/48 maxlen: 48
2a03:2887:ff03::/48 maxlen: 48
2a03:2887:ff04::/48 maxlen: 48
2a03:2887:ff05::/48 maxlen: 48
2a03:2887:ff06::/48 maxlen: 48
2a03:2887:ff07::/48 maxlen: 48
2a03:2887:ff08::/48 maxlen: 48
2a03:2887:ff09::/48 maxlen: 48
2a03:2887:ff0a::/48 maxlen: 48
2a03:2887:ff18::/48 maxlen: 48
2a03:2887:ff19::/48 maxlen: 48
2a03:2887:ff1b::/48 maxlen: 48
2a03:2887:ff1c::/48 maxlen: 48
2a03:2887:ff1d::/48 maxlen: 48
2a03:2887:ff1e::/48 maxlen: 48
2a03:2887:ff1f::/48 maxlen: 48
2a03:2887:ff20::/48 maxlen: 48
2a03:2887:ff21::/48 maxlen: 48
2a03:2887:ff22::/48 maxlen: 48
2a03:2887:ff23::/48 maxlen: 48
2a03:2887:ff24::/48 maxlen: 48
2a03:2887:ff25::/48 maxlen: 48
2a03:2887:ff27::/48 maxlen: 48
2a03:2887:ff28::/48 maxlen: 48
2a03:2887:ff29::/48 maxlen: 48
2a03:2887:ff2a::/48 maxlen: 48
2a03:2887:ff2b::/48 maxlen: 48
2a03:2887:ff2e::/48 maxlen: 48
2a03:2887:ff2f::/48 maxlen: 48
2a03:2887:ff30::/48 maxlen: 48
2a03:2887:ff33::/48 maxlen: 48
2a03:2887:ff35::/48 maxlen: 48
2a03:2887:ff36::/48 maxlen: 48
2a03:2887:ff37::/48 maxlen: 48
2a03:2887:ff38::/48 maxlen: 48
2a03:2887:ff39::/48 maxlen: 48
2a03:2887:ff3a::/48 maxlen: 48
2a03:2887:ff3b::/48 maxlen: 48
2a03:2887:ff3e::/48 maxlen: 48
2a03:2887:ff3f::/48 maxlen: 48
2a03:2887:ff40::/48 maxlen: 48
2a03:2887:ff41::/48 maxlen: 48
2a03:2887:ff42::/48 maxlen: 48
2a03:2887:ff43::/48 maxlen: 48
2a03:2887:ff44::/48 maxlen: 48
2a03:2887:ff45::/48 maxlen: 48
2a03:2887:ff48::/48 maxlen: 48
2a03:2887:ff49::/48 maxlen: 48
2a03:2887:ff4a::/48 maxlen: 48
2a03:2887:ff4b::/48 maxlen: 48
2a03:2887:ff4d::/48 maxlen: 48
2a03:2887:ff4e::/48 maxlen: 48
2a03:2887:ff4f::/48 maxlen: 48
2a03:2887:ff51::/48 maxlen: 48
2a03:2887:ff52::/48 maxlen: 48
2a03:2887:ff53::/48 maxlen: 48
2a03:2887:ff54::/48 maxlen: 48
2a03:2887:ff55::/48 maxlen: 48
2a03:2887:ff56::/48 maxlen: 48
2a03:2887:ff57::/48 maxlen: 48
2a03:2887:ff58::/48 maxlen: 48
2a03:2887:ff59::/48 maxlen: 48
2a03:2887:ff5a::/48 maxlen: 48
2a03:2887:ff5f::/48 maxlen: 48
2a03:2887:ff60::/48 maxlen: 48
2a03:2887:ff61::/48 maxlen: 48
2a03:2887:ff62::/48 maxlen: 48
2a03:2887:ff63::/48 maxlen: 48
2a03:2887:ff64::/48 maxlen: 48
2a03:2887:ff65::/48 maxlen: 48
2a03:2887:ff66::/48 maxlen: 48
2a03:2887:ff67::/48 maxlen: 48
2a03:2887:ff68::/48 maxlen: 48
2a03:2887:ff69::/48 maxlen: 48
2a03:2887:ff6a::/48 maxlen: 48
2a03:2887:ff6b::/48 maxlen: 48
2a03:2887:ff6c::/48 maxlen: 48
2a03:2887:ff6f::/48 maxlen: 48
2a03:2887:ff70::/48 maxlen: 48
2a03:2887:ff71::/48 maxlen: 48
2a03:2887:ff72::/48 maxlen: 48
2a03:2887:ff73::/48 maxlen: 48
2a03:2887:ff74::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:48:7e:5e:b1:66:2b:ff:48:fa:3f:d1:73:ee:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Sep 24 17:01:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7ac3c7ca5fe35234304730891be92caf6e0b6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3f:f7:e5:8b:61:22:42:95:e1:23:20:8c:23:
f9:41:8b:06:bd:be:49:ae:f2:fb:6c:c6:a6:41:1a:
41:10:ce:ee:63:6c:80:68:4a:09:6a:ff:4a:c2:e1:
3d:7a:d3:ee:8f:0c:26:82:ae:58:f5:80:06:e3:91:
7a:a0:fa:99:22:12:7c:be:33:47:a5:5b:bd:44:52:
e4:a0:bf:57:ae:8d:b8:41:79:9b:59:8b:87:44:1a:
64:2e:50:0c:8b:30:3d:0f:92:36:10:81:bc:57:38:
6b:fa:f4:2a:b6:0f:4f:1f:e9:38:60:0a:5d:17:1f:
fb:32:38:c4:96:62:88:57:06:81:e3:d5:67:89:ae:
21:5f:e1:c4:5b:14:2e:4f:0d:7a:1f:37:f2:d1:e8:
be:69:93:0f:ba:cf:e0:c8:93:e1:39:67:a6:c1:fb:
c6:bd:c7:58:f7:18:f7:45:e4:53:73:61:21:92:13:
24:3a:32:05:38:76:b8:4a:4b:82:5f:f6:f0:0e:91:
76:7b:6b:7d:93:56:a5:c4:bf:5e:88:bc:09:27:3f:
c8:19:33:80:85:28:85:0c:98:36:92:5b:70:6b:29:
c2:9e:50:76:9e:f0:87:92:a6:8f:dc:6d:14:e9:69:
cf:72:1e:46:b8:79:22:1f:65:12:e2:d7:13:6b:4d:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AC:3C:7C:A5:FE:35:23:43:04:73:08:91:BE:92:CA:F6:E0:B6:D8
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/16w8fKX-NSNDBHMIkb6Syvbgttg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2887:ff00::/48
2a03:2887:ff02::-2a03:2887:ff0a:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff18::/47
2a03:2887:ff1b::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff27::-2a03:2887:ff2b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff2e::-2a03:2887:ff30:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff33::/48
2a03:2887:ff35::-2a03:2887:ff3b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff3e::-2a03:2887:ff45:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff48::/46
2a03:2887:ff4d::-2a03:2887:ff4f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff51::-2a03:2887:ff5a:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff5f::-2a03:2887:ff6c:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff6f::-2a03:2887:ff74:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
33:d1:7b:dd:06:22:78:72:03:d2:5a:a3:b7:8b:24:ef:81:d7:
33:de:64:11:e5:89:78:e8:2d:81:86:94:ea:94:a7:d1:c6:3b:
d3:a1:9e:85:96:3b:c3:05:c5:e9:73:53:43:c7:5b:66:2b:1a:
21:76:4e:9b:76:3f:59:0e:be:ab:5c:c4:04:32:1d:8d:e5:a4:
1d:30:62:2a:4c:2a:89:8d:ab:35:f2:60:b0:3e:6d:dd:f7:78:
ce:d1:41:2b:40:32:06:40:3b:ff:04:22:4a:46:6f:2c:88:aa:
73:0a:ec:fc:a9:25:7b:e0:2e:d0:f9:78:90:56:3c:6c:1d:52:
38:f3:f5:90:83:4e:20:3d:4c:c0:55:c8:4b:f1:b0:41:da:7f:
fd:d5:03:72:6f:8f:99:96:9a:4a:7e:f3:11:c4:2c:96:fb:5c:
a7:c8:83:ff:c9:09:d7:61:7b:da:1b:33:e2:0b:4e:da:19:f0:
4b:5a:59:6c:20:cd:1b:e6:94:d3:0a:af:08:42:e3:2f:0e:56:
5e:89:93:f6:3b:ee:61:61:c3:6b:f1:02:01:e5:a8:a9:1b:b5:
c2:34:54:31:7f:60:a3:19:50:f6:77:be:4f:4e:84:ab:6e:6f:
1d:03:04:9f:ed:eb:f3:6f:33:f8:b7:52:bb:f6:60:cd:d0:19:
fe:e3:45:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:00:30 2026 by rpki-client