Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/gO0a5FDZod4Jet6G6YYJr_EtnDI.roa
File: gO0a5FDZod4Jet6G6YYJr_EtnDI.roa (raw, json)
Hash identifier: PnnZ1H5Rz6I7wFohxglAVGkiq7nttb4OpkbD/Vecin0=
Subject key identifier: 80:ED:1A:E4:50:D9:A1:DE:09:7A:DE:86:E9:86:09:AF:F1:2D:9C:32
Certificate issuer: /CN=270c42fdec2e22e0d7d9aed353ab7eb7a6cf8dd8
Certificate serial: 01A1C0F6D5E639FF0F87F20E4723F5C762FD
Authority key identifier: 27:0C:42:FD:EC:2E:22:E0:D7:D9:AE:D3:53:AB:7E:B7:A6:CF:8D:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/gO0a5FDZod4Jet6G6YYJr_EtnDI.roa
Signing time: Mon 09 Nov 2026 15:39:24 +0000
ROA not before: Mon 09 Nov 2026 15:39:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210864
IP address blocks: 2a01:e901:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:f6:d5:e6:39:ff:0f:87:f2:0e:47:23:f5:c7:62:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270c42fdec2e22e0d7d9aed353ab7eb7a6cf8dd8
Validity
Not Before: Nov 9 15:39:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80ed1ae450d9a1de097ade86e98609aff12d9c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:75:db:e6:48:10:4f:09:1a:c5:1a:d1:54:9e:
94:40:b9:7f:d9:44:c8:8b:4a:ac:48:14:fb:7a:78:
c5:dc:10:2b:7d:a6:02:0e:c5:f4:a4:4b:78:c7:12:
6b:aa:66:77:0f:98:58:f7:c6:83:d2:d1:e8:e5:74:
34:61:cf:da:03:48:74:42:40:be:c0:20:67:2c:b2:
b3:6c:3b:ab:39:da:d5:85:6b:10:20:bb:2b:af:84:
b8:d0:06:8f:53:d8:53:57:21:fa:1f:51:c1:d8:eb:
db:b9:8c:f0:db:58:c4:09:75:9d:43:b3:58:7c:2b:
6c:23:57:e5:41:55:73:fd:e8:a1:47:2d:17:26:c6:
fd:0d:a8:a6:a0:73:af:f6:98:61:de:71:d5:fb:3e:
57:35:42:07:08:30:ff:f9:3d:95:54:59:2c:b5:df:
e6:31:b9:18:1e:c3:bf:41:6d:e3:84:e7:5c:38:18:
f0:0f:ea:d2:9c:31:20:82:c6:f4:6a:5e:56:6a:38:
a4:88:84:ab:b4:02:7d:d8:92:d1:c5:a7:42:ad:b5:
29:9e:e4:ab:c6:e8:6f:7a:49:97:e5:fd:c9:32:9f:
78:83:27:3f:8c:87:37:6f:77:b3:68:78:d6:e2:2e:
4a:4c:1b:da:df:ff:8f:3a:6a:76:22:6c:51:2b:e2:
0e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:ED:1A:E4:50:D9:A1:DE:09:7A:DE:86:E9:86:09:AF:F1:2D:9C:32
X509v3 Authority Key Identifier:
keyid:27:0C:42:FD:EC:2E:22:E0:D7:D9:AE:D3:53:AB:7E:B7:A6:CF:8D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/gO0a5FDZod4Jet6G6YYJr_EtnDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:12::/48
Signature Algorithm: sha256WithRSAEncryption
2e:95:47:6f:a1:ab:21:77:de:82:29:a4:06:04:db:ad:19:ec:
71:5b:13:ff:d7:28:22:83:08:27:aa:c5:e3:89:c0:41:01:95:
83:4c:19:fa:8c:ae:67:4a:19:fe:f1:83:27:a0:8b:f5:1d:4d:
f0:22:22:88:a5:97:54:79:30:58:5e:be:b5:32:4a:69:4a:05:
39:4a:98:7b:55:11:ea:7a:be:bf:f3:55:50:79:a1:69:fe:71:
1b:82:bb:2a:f8:d3:95:e4:4f:2f:71:3d:11:16:e0:6d:3c:6e:
b9:14:97:37:af:02:78:3e:99:e3:83:4f:1b:dd:23:b7:63:f8:
22:02:4a:32:8c:4c:e8:a2:96:4a:77:1c:1c:c6:11:1e:53:88:
ca:5c:02:d9:52:2f:44:49:c4:62:78:2d:c9:19:64:b8:3f:40:
14:0f:7e:eb:ee:cb:8b:9d:fc:cd:a9:6a:b1:7f:95:88:89:27:
57:48:db:30:7f:0b:bc:74:6b:ca:e3:5c:2e:3d:9e:cf:d8:8c:
e2:9f:25:97:b5:2b:8b:a6:71:3e:0a:e9:18:12:d5:94:94:f3:
e1:bc:fa:74:4a:6d:36:7b:4b:7c:78:72:f3:07:44:81:0c:69:
4f:f2:32:07:d4:3e:7c:a3:a2:9a:14:ac:9b:62:22:87:0d:f9:
00:cb:1b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:14:04 2026 by rpki-client