Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/_c-yox7HOqP9H_XVFsz0kYb2WRg.roa
File: _c-yox7HOqP9H_XVFsz0kYb2WRg.roa (raw, json)
Hash identifier: FmjzafDVKk5KjWlnqqFtYZE3UND6NuG+oIvznhU5oc8=
Subject key identifier: FD:CF:B2:A3:1E:C7:3A:A3:FD:1F:F5:D5:16:CC:F4:91:86:F6:59:18
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A1BAB296FAC86E92B32274E6639B375F1C
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/_c-yox7HOqP9H_XVFsz0kYb2WRg.roa
Signing time: Sun 08 Nov 2026 10:27:08 +0000
ROA not before: Sun 08 Nov 2026 10:27:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219378
IP address blocks: 2a0e:4005:ff10::/48 maxlen: 48
2a0e:4005:ff20::/48 maxlen: 48
2a0e:4005:ffd0::/48 maxlen: 48
2a0e:4005:ffdd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ba:b2:96:fa:c8:6e:92:b3:22:74:e6:63:9b:37:5f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Nov 8 10:27:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fdcfb2a31ec73aa3fd1ff5d516ccf49186f65918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:8c:ba:03:0c:8b:19:d2:bb:9e:62:e7:4d:
42:a5:72:68:6c:48:59:9d:b3:a1:6e:88:5a:2f:6f:
09:3d:3b:05:46:5f:d3:df:6a:19:fc:41:42:f2:43:
02:ba:b8:a4:f0:63:20:14:71:0f:ae:64:04:c3:55:
eb:6a:46:3b:4b:4c:ac:18:a9:2c:9c:17:d5:12:c4:
56:15:e6:62:6f:66:e3:f8:24:8f:6c:ca:45:8b:f3:
c3:cd:a2:ae:59:5a:87:84:0d:3c:48:e7:f6:4a:6a:
aa:45:d0:32:b1:39:26:8d:3d:6e:42:b5:2f:31:6f:
85:e1:d0:e6:2e:50:a3:d1:3b:a5:16:7e:ae:44:3b:
61:c3:ab:93:e9:df:ae:9a:89:52:41:94:9f:c9:97:
a4:6a:07:3d:f9:fa:90:14:88:da:3c:f3:bf:de:07:
2b:68:1a:86:98:7d:3e:f8:ba:1c:4d:5d:2c:94:65:
73:db:54:d1:10:b8:99:28:56:03:71:25:cc:52:c8:
7a:a4:c7:3c:0b:55:3f:58:a8:63:f6:87:fe:69:e9:
ad:b9:82:43:c1:0f:f1:d2:8f:17:5c:8c:7f:e3:4f:
2d:39:67:3b:e5:69:0d:5c:22:68:a8:41:19:b1:6d:
af:29:74:ff:cb:89:d8:d1:74:81:4f:62:9a:9e:63:
39:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CF:B2:A3:1E:C7:3A:A3:FD:1F:F5:D5:16:CC:F4:91:86:F6:59:18
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/_c-yox7HOqP9H_XVFsz0kYb2WRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4005:ff10::/48
2a0e:4005:ff20::/48
2a0e:4005:ffd0::/48
2a0e:4005:ffdd::/48
Signature Algorithm: sha256WithRSAEncryption
46:69:c5:c8:56:61:05:61:f9:e2:ac:ef:e9:26:50:9e:ee:fb:
f8:94:21:03:d0:8c:dc:c8:05:9b:68:ad:25:eb:5d:90:97:69:
5a:c4:1e:a1:bd:6a:2c:7f:f6:4d:58:c9:b4:f5:33:bc:99:7a:
ab:c0:cb:43:17:e5:89:b5:41:83:76:c2:02:dd:67:2f:aa:0a:
d9:7a:3d:ca:32:75:b6:d4:0f:1e:9c:2c:d4:3a:85:8f:46:6a:
4b:a4:f8:0c:1c:2b:ff:9a:32:45:6c:3e:a9:71:49:6b:71:ef:
2c:e0:77:4c:e5:bc:5e:60:8b:84:6d:e1:34:0c:dc:db:10:62:
0d:d0:72:3a:60:19:2e:e8:3d:d1:ee:fa:35:8b:97:ed:90:28:
17:1e:e5:b3:d5:bd:c7:18:fe:c8:fe:69:34:42:5e:e4:01:a3:
f7:aa:16:5c:c3:ba:88:2d:82:27:42:a3:79:31:c1:0a:64:b9:
b6:b0:4e:cf:d1:92:20:a4:cf:e3:7b:84:e9:4b:3e:57:aa:55:
53:98:1f:90:7c:ba:24:ef:14:1a:20:70:de:ca:a0:46:1a:1c:
a8:fa:af:09:d4:5b:2d:2e:ca:6d:44:ce:2d:50:cd:f1:72:35:
c1:d7:69:ec:69:69:90:0d:b3:0a:fe:7c:a6:b2:36:68:18:75:
d3:78:44:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:58:29 2026 by rpki-client