Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/Fk_c5L0wQwxkpXo3UxRRNG9l1-A.roa
File: Fk_c5L0wQwxkpXo3UxRRNG9l1-A.roa (raw, json)
Hash identifier: wN5o+cwte1lA5WSPFaOEn3vX2sseejPcuHFmyVi24W8=
Subject key identifier: 16:4F:DC:E4:BD:30:43:0C:64:A5:7A:37:53:14:51:34:6F:65:D7:E0
Certificate issuer: /CN=069483175568ff6308da25ce69042f49a51e6ecb
Certificate serial: 01A09AA6A4CF2895949D0C12D529A5A1A6C8
Authority key identifier: 06:94:83:17:55:68:FF:63:08:DA:25:CE:69:04:2F:49:A5:1E:6E:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpSDF1Vo_2MI2iXOaQQvSaUebss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/Fk_c5L0wQwxkpXo3UxRRNG9l1-A.roa
Signing time: Sun 13 Sep 2026 12:03:27 +0000
ROA not before: Sun 13 Sep 2026 12:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198120
IP address blocks: 2a0d:2500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpSDF1Vo_2MI2iXOaQQvSaUebss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:a6:a4:cf:28:95:94:9d:0c:12:d5:29:a5:a1:a6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=069483175568ff6308da25ce69042f49a51e6ecb
Validity
Not Before: Sep 13 12:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=164fdce4bd30430c64a57a37531451346f65d7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:d7:2e:70:ab:bf:32:f1:f0:9b:b9:a3:25:
c2:f9:61:cd:f3:51:38:72:54:6e:67:bb:c9:22:0d:
f0:cd:4c:f0:17:da:84:ee:1f:8b:75:d1:61:85:10:
1e:84:3f:1c:a3:0a:a6:68:04:3b:c6:ff:de:04:63:
e4:00:67:93:0a:d0:4a:3a:4a:2b:8e:be:7e:8e:5c:
c8:eb:02:be:9d:49:5e:fb:49:e6:ab:c2:97:7a:3d:
76:9a:95:d5:f9:01:7f:33:2e:2c:03:5c:6a:fb:c0:
58:ec:9a:04:03:d1:cb:95:b2:ee:05:fa:5d:a6:40:
80:93:00:9e:ec:3d:6a:f6:01:3d:bd:1a:f7:f6:2e:
cf:e1:a6:2b:f5:c3:ac:50:be:63:9d:16:72:01:48:
37:65:34:70:a7:75:59:d6:d5:c8:b7:f7:ef:b9:50:
a3:8f:91:05:0b:a4:66:43:01:97:a9:a7:7d:a4:25:
80:eb:8f:2d:97:f4:35:68:29:3f:53:6a:2b:28:72:
02:ea:88:26:26:5c:f4:f2:7e:96:05:41:2a:20:b4:
c6:24:99:0c:43:7d:f2:b9:46:a9:b0:70:ff:1a:fe:
2c:22:fb:0b:cd:d6:63:10:84:9e:e7:6a:f9:9e:35:
15:a9:5a:1c:e5:b0:3d:bc:83:ef:2d:8c:73:98:5b:
3a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4F:DC:E4:BD:30:43:0C:64:A5:7A:37:53:14:51:34:6F:65:D7:E0
X509v3 Authority Key Identifier:
keyid:06:94:83:17:55:68:FF:63:08:DA:25:CE:69:04:2F:49:A5:1E:6E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpSDF1Vo_2MI2iXOaQQvSaUebss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/Fk_c5L0wQwxkpXo3UxRRNG9l1-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2c866a-131e-4bab-962c-64604518bcbf/1/BpSDF1Vo_2MI2iXOaQQvSaUebss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2500::/32
Signature Algorithm: sha256WithRSAEncryption
89:b5:51:b4:a6:1b:be:98:b9:3b:af:b0:a8:78:06:af:62:3b:
b9:fe:28:61:10:dc:58:4f:f1:34:fc:7c:f6:89:19:0f:cf:57:
71:ad:92:52:2e:1c:14:f9:01:b9:63:8d:02:e8:31:82:9e:47:
45:7e:89:50:1e:43:be:9c:6d:51:58:0d:71:22:61:ad:48:79:
74:1c:5a:95:88:6d:a7:a3:ae:e9:ba:f0:c2:8c:a2:33:24:9f:
79:57:cb:d0:1f:ca:59:09:41:ab:e8:4a:4b:2c:b8:77:30:be:
49:61:79:59:78:6a:eb:83:22:27:e1:9e:cf:a5:36:3f:d5:ec:
b8:e6:e9:91:7f:be:f8:b0:8c:d0:c5:0f:ef:4d:9b:da:49:05:
a0:5a:cf:e1:37:af:5f:e8:da:f1:64:23:1f:cc:41:eb:c9:e5:
ca:a3:ad:3a:29:6e:5c:c0:be:ad:9f:cf:45:79:a7:dc:82:f0:
e6:df:d5:f5:bd:17:2a:91:ad:6e:6c:49:84:f4:78:ca:64:cd:
00:b6:21:6b:58:89:b2:d1:5e:31:3f:8c:9e:6e:c5:1e:9c:2e:
0f:3a:9b:0d:14:ee:18:a0:0c:c0:61:d6:6d:14:d7:87:e7:89:
3e:4c:6b:5d:b3:7b:24:38:71:4f:3d:17:de:ea:de:0c:45:66:
f1:6c:77:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:55:58 2026 by rpki-client