Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/fb0be8-e715-4f6c-8e04-a8930b55498d/1/DqyhA6Ot2Kmk9D6T7nu8Gik7H5M.roa
File: DqyhA6Ot2Kmk9D6T7nu8Gik7H5M.roa (raw, json)
Hash identifier: wwZm7PW1Rl0wBFrNPH5T+W/u3PkMQP+3dex/s92b+xU=
Subject key identifier: 0E:AC:A1:03:A3:AD:D8:A9:A4:F4:3E:93:EE:7B:BC:1A:29:3B:1F:93
Certificate issuer: /CN=e25d0beb3bd3ab70736aca9fa9ff6a91541e6069
Certificate serial: 01A1D5B46B67BAC8FF90726EEA29643F276A
Authority key identifier: E2:5D:0B:EB:3B:D3:AB:70:73:6A:CA:9F:A9:FF:6A:91:54:1E:60:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4l0L6zvTq3Bzasqfqf9qkVQeYGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fb0be8-e715-4f6c-8e04-a8930b55498d/1/DqyhA6Ot2Kmk9D6T7nu8Gik7H5M.roa
Signing time: Fri 13 Nov 2026 16:18:53 +0000
ROA not before: Fri 13 Nov 2026 16:18:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:678:13f4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fb0be8-e715-4f6c-8e04-a8930b55498d/1/4l0L6zvTq3Bzasqfqf9qkVQeYGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fb0be8-e715-4f6c-8e04-a8930b55498d/1/4l0L6zvTq3Bzasqfqf9qkVQeYGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4l0L6zvTq3Bzasqfqf9qkVQeYGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d5:b4:6b:67:ba:c8:ff:90:72:6e:ea:29:64:3f:27:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e25d0beb3bd3ab70736aca9fa9ff6a91541e6069
Validity
Not Before: Nov 13 16:18:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0eaca103a3add8a9a4f43e93ee7bbc1a293b1f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d7:95:2f:a2:0c:e7:95:09:4b:bf:9c:2c:7e:
3b:d6:85:39:33:85:14:04:c1:51:73:1e:45:65:87:
d2:6b:6f:58:9a:32:67:9f:92:f3:af:88:f7:3c:4c:
c4:6f:74:9f:b7:30:6e:4a:4a:f3:41:15:c1:24:1b:
35:fb:2a:5c:9a:9f:37:5c:a0:6f:35:36:8c:f9:4b:
2f:ba:2b:d4:b9:38:c1:cb:1f:a3:c3:b7:d4:c6:a3:
c2:f9:35:50:d6:ce:e5:45:62:0b:5b:9b:bb:03:ce:
1e:56:22:ca:01:dc:34:95:ae:59:7c:bc:e0:73:9f:
7a:67:de:c0:9a:db:19:a0:cf:be:aa:bd:e7:9c:16:
77:20:a6:92:ea:20:5f:1c:e0:8a:1c:2d:9a:78:87:
f7:5a:89:96:66:45:28:43:7d:a9:d5:65:34:7d:1f:
43:52:ed:93:f4:6a:7d:4a:24:6e:f6:5f:4a:e4:8e:
b8:d9:67:a1:0a:5b:78:43:ae:9e:14:86:34:45:83:
36:90:a0:0a:af:fe:8c:3d:82:74:5e:09:ae:d8:a8:
6d:7f:e0:c8:cf:8f:83:9f:29:d5:63:07:fe:d3:f3:
fa:c2:43:6b:a4:b3:bf:5c:92:20:58:5d:e8:60:fb:
51:79:65:d9:a9:ce:11:13:24:e6:6e:18:f6:9d:cc:
6c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AC:A1:03:A3:AD:D8:A9:A4:F4:3E:93:EE:7B:BC:1A:29:3B:1F:93
X509v3 Authority Key Identifier:
keyid:E2:5D:0B:EB:3B:D3:AB:70:73:6A:CA:9F:A9:FF:6A:91:54:1E:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4l0L6zvTq3Bzasqfqf9qkVQeYGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fb0be8-e715-4f6c-8e04-a8930b55498d/1/DqyhA6Ot2Kmk9D6T7nu8Gik7H5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fb0be8-e715-4f6c-8e04-a8930b55498d/1/4l0L6zvTq3Bzasqfqf9qkVQeYGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:13f4::/48
Signature Algorithm: sha256WithRSAEncryption
80:95:21:d2:b2:93:e9:8e:67:b8:17:2f:d2:95:c2:84:e0:1b:
98:85:b1:3e:d4:62:d9:a8:17:a0:f5:a7:9a:95:75:bf:70:23:
c2:bb:9e:42:b1:5f:6e:c3:a7:10:10:c0:2f:7a:be:64:16:f3:
99:1f:5a:44:00:87:e0:bf:01:91:9e:d7:bc:06:fa:67:d2:f4:
8f:97:e8:67:2d:e1:0c:92:c6:e5:87:fa:b6:ba:06:59:c5:20:
c3:fa:5b:a8:af:b8:3b:97:5b:d3:54:b1:15:49:36:24:b0:5c:
55:3c:d9:6c:ec:3c:7a:2c:8b:42:92:ab:63:60:d4:ca:36:73:
c2:e0:2c:b3:49:12:60:23:69:d2:8c:50:92:be:8a:02:ca:82:
c2:63:f1:4f:bc:88:49:68:35:59:2d:2e:d0:11:94:43:d3:f5:
34:0d:9b:57:95:1d:34:c6:54:51:02:b5:fa:eb:5d:a0:3b:c2:
69:8a:ca:d7:c0:cd:b3:c9:d6:2a:ff:68:c6:7b:2e:9c:e9:8c:
50:86:49:39:28:f7:75:96:eb:82:92:de:1a:4f:f0:2e:61:fb:
cb:c0:b2:44:f6:f8:5a:50:f0:56:6f:2b:72:72:74:cc:eb:7f:
80:b3:5b:11:0f:01:d0:39:1c:93:02:ef:cf:81:7f:ad:d8:2e:
0e:5c:92:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:32:03 2026 by rpki-client