Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/UD9iF_R6L0ElBhP-UEdIcwVMsf0.roa
File: UD9iF_R6L0ElBhP-UEdIcwVMsf0.roa (raw, json)
Hash identifier: gpzn1rcAvQwpd3pJlORD2TbtHm+k7RVVJwafWKS8Tz8=
Subject key identifier: 50:3F:62:17:F4:7A:2F:41:25:06:13:FE:50:47:48:73:05:4C:B1:FD
Certificate issuer: /CN=70c6d535b0f275a26185f8f4dca580d26d7a9746
Certificate serial: 019B7CED3FB4780BF7996AD980BFA0961F66
Authority key identifier: 70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/UD9iF_R6L0ElBhP-UEdIcwVMsf0.roa
Signing time: Fri 02 Jan 2026 04:18:01 +0000
ROA not before: Fri 02 Jan 2026 04:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204183
IP address blocks: 2a0f:c000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:3f:b4:78:0b:f7:99:6a:d9:80:bf:a0:96:1f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c6d535b0f275a26185f8f4dca580d26d7a9746
Validity
Not Before: Jan 2 04:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=503f6217f47a2f41250613fe50474873054cb1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:8d:8c:96:12:dd:62:78:29:1c:47:95:39:
45:be:9e:66:a6:27:43:43:95:0d:01:de:d5:3e:fd:
12:c0:5c:82:27:18:13:3d:f7:26:4a:6f:c3:58:c5:
64:2d:ea:42:06:52:09:d6:40:12:55:42:c7:d8:f9:
68:d3:4b:39:8e:fe:a5:59:fd:24:85:d6:8d:cd:24:
4d:98:20:8a:3b:58:f2:5c:dd:d6:ec:5f:53:3e:2c:
41:05:9a:69:12:38:59:14:97:36:bf:66:5a:6b:cd:
0b:ed:b2:75:1c:00:ad:5d:f4:6e:0d:b6:51:e7:16:
e7:cf:4a:a1:98:bf:aa:8b:c7:5d:ed:4b:4f:f0:75:
a3:99:53:ae:8d:43:bc:b2:49:10:4a:d3:5a:f2:30:
f2:87:76:3b:b9:8b:20:18:b7:79:e8:5f:5a:38:71:
72:f9:53:53:28:34:98:a5:c7:c2:14:3d:15:89:79:
07:fc:0f:98:5c:9e:e4:ce:bd:25:52:74:80:87:74:
e6:b7:1c:b1:71:f5:30:a4:7c:da:42:b5:f9:b8:7e:
3b:44:53:8c:ed:c4:33:de:bc:45:6d:31:f1:db:a5:
b9:54:a0:e8:12:6e:7d:39:31:2a:fa:5b:72:37:bc:
36:6e:1e:74:bc:7e:d3:a2:ba:98:15:01:cf:db:76:
50:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3F:62:17:F4:7A:2F:41:25:06:13:FE:50:47:48:73:05:4C:B1:FD
X509v3 Authority Key Identifier:
keyid:70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/UD9iF_R6L0ElBhP-UEdIcwVMsf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:c000::/29
Signature Algorithm: sha256WithRSAEncryption
53:65:5f:90:91:92:c6:7d:9d:ed:8b:76:ea:91:28:2d:d2:20:
d5:17:8e:9b:ad:c0:bf:47:37:73:cd:ee:25:7d:70:ed:05:66:
4e:47:92:e1:08:20:14:fa:94:36:8c:71:97:04:88:b0:de:0f:
38:63:f5:74:9c:ed:f8:02:44:3f:ad:72:8f:2f:cb:1b:5c:ce:
c2:5e:2d:72:8c:16:b5:6a:aa:31:6c:37:4c:e5:3f:b0:16:b7:
ba:24:d3:2a:c8:28:9b:0f:56:d0:3f:34:3c:4e:54:dd:68:94:
6d:f6:f4:a7:a7:e5:3e:4d:60:b4:e4:8c:f9:a9:51:07:df:a3:
2f:50:fb:51:78:b7:eb:f8:c0:87:e8:51:b2:f2:80:cb:6d:90:
ed:94:d6:71:fc:16:9c:68:bd:62:ae:cc:07:a4:d2:18:d3:8e:
f9:03:d1:6b:7f:cd:7a:7d:83:15:5a:9e:a1:f4:f9:9b:52:6f:
51:61:de:de:c3:db:63:8b:43:19:92:2d:39:5d:ed:ea:0b:65:
31:ad:4c:ac:5f:23:1a:8f:7e:9b:b7:66:e1:fc:ac:b2:ec:59:
9e:2b:f0:d4:84:ce:86:46:6d:3e:47:a6:fc:6e:3b:27:a0:aa:
6b:12:77:1f:57:0b:54:80:db:d7:06:29:30:f1:80:62:e0:05:
af:39:5c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:56:01 2026 by rpki-client