Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/xNvqMbqZTN-rWB9-yKf3tgUR2vk.roa
File: xNvqMbqZTN-rWB9-yKf3tgUR2vk.roa (raw, json)
Hash identifier: ArMnQt2ke5qfE/+Ex3Acn5H6+ZTyiDLGDgbUwdBZDuc=
Subject key identifier: C4:DB:EA:31:BA:99:4C:DF:AB:58:1F:7E:C8:A7:F7:B6:05:11:DA:F9
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A0B1A442C6B58B3BCBB760BFF473E72D7F
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/xNvqMbqZTN-rWB9-yKf3tgUR2vk.roa
Signing time: Thu 17 Sep 2026 23:12:07 +0000
ROA not before: Thu 17 Sep 2026 23:12:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218776
IP address blocks: 2a0e:4001:600::/40 maxlen: 40
2a0e:4001:600::/48 maxlen: 48
2a0e:4001:601::/48 maxlen: 48
2a0e:4001:602::/48 maxlen: 48
2a0e:4001:603::/48 maxlen: 48
2a0e:4001:604::/48 maxlen: 48
2a0e:4001:605::/48 maxlen: 48
2a0e:4001:606::/48 maxlen: 48
2a0e:4001:607::/48 maxlen: 48
2a0e:4001:608::/48 maxlen: 48
2a0e:4001:609::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:a4:42:c6:b5:8b:3b:cb:b7:60:bf:f4:73:e7:2d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Sep 17 23:12:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4dbea31ba994cdfab581f7ec8a7f7b60511daf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6a:94:c4:a4:4c:da:92:43:0a:99:0b:18:77:
2e:37:cc:c5:df:e9:dd:1a:53:c9:6a:fd:5e:cd:c0:
2b:51:6a:f3:de:b6:61:20:a4:81:75:e4:58:c4:fa:
13:c2:d0:7e:d4:0c:c1:a9:78:1a:71:b6:ea:d4:f4:
a7:f7:b3:3c:0c:e1:10:f6:ee:05:c6:0b:d0:9e:98:
81:c6:87:73:ab:7f:25:da:25:01:3f:ae:7a:79:30:
8b:6c:8d:05:4d:a7:fc:e8:ff:38:4c:ab:56:b8:a9:
5d:d2:c3:85:a5:9f:2b:6c:66:d4:d9:34:71:01:af:
c2:dd:4e:7a:49:66:28:71:47:e4:d2:f1:53:4b:fe:
b2:ba:f2:b0:98:b9:97:e6:1e:14:69:1f:44:13:4b:
f4:e3:d7:9a:a3:34:43:46:f0:3b:ad:42:4b:41:b3:
a6:9d:62:03:98:33:c5:8d:4e:13:d7:2d:35:42:9d:
79:91:33:b1:98:4b:3c:b2:33:84:c3:84:45:0c:63:
28:e0:7f:28:03:70:11:3c:76:ab:9a:98:71:a8:75:
dc:31:e5:12:a8:fe:03:01:bc:41:3b:81:03:35:df:
94:1d:f2:6e:d3:1a:00:e3:26:7e:66:c7:25:0c:73:
63:0d:e7:57:0d:e7:35:23:79:4e:1b:f0:08:2b:11:
d2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DB:EA:31:BA:99:4C:DF:AB:58:1F:7E:C8:A7:F7:B6:05:11:DA:F9
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/xNvqMbqZTN-rWB9-yKf3tgUR2vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4001:600::/40
Signature Algorithm: sha256WithRSAEncryption
a8:f6:d2:07:ab:96:e2:d2:6e:33:67:d3:22:d9:79:6a:ad:0f:
34:66:62:a8:15:cc:4f:ae:cb:d2:f4:a6:c0:1f:5d:17:54:7d:
ff:19:98:3d:ec:b7:8b:93:10:fc:93:ec:b8:f8:26:f0:27:46:
b5:9a:b2:12:1b:53:2f:9d:9a:22:9c:68:e4:62:7a:7b:74:52:
a4:3b:f8:09:68:63:fb:9c:05:17:7c:d4:72:e4:51:d7:c4:58:
77:c0:11:63:11:01:0c:5e:74:89:1f:45:5f:9a:f1:21:26:58:
6d:00:42:69:74:8a:84:09:1f:0e:f2:0e:60:d0:b9:fa:4a:03:
a0:c3:f2:fb:3c:fc:de:96:e3:df:cd:50:56:29:fd:d3:98:08:
8d:2f:1d:73:e3:9d:dc:f7:1c:7a:bd:9d:bd:43:dd:d7:75:1e:
65:a2:80:ba:19:41:66:86:2d:ba:f8:05:6f:88:70:02:72:b9:
31:ea:4e:9e:89:b9:17:ce:13:ae:ac:d2:ff:39:c9:c7:63:c8:
fc:fc:5f:63:bd:39:eb:90:d1:55:ac:ac:e1:dc:f0:77:15:d3:
8c:b4:20:9e:9f:d9:27:27:46:cd:01:7e:05:86:ef:02:2b:d2:
cf:7a:3f:04:49:d6:40:18:00:62:b4:c4:3c:3e:c2:99:25:fc:
f6:bb:39:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:26:00 2026 by rpki-client