Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/AAtWsYPKSMLBq85kSJWV6gQpJvo.roa
File: AAtWsYPKSMLBq85kSJWV6gQpJvo.roa (raw, json)
Hash identifier: yYAx9veeLlEHk2rcZuXtkYNbTuh/k5Nd+cm24BjUlZQ=
Subject key identifier: 00:0B:56:B1:83:CA:48:C2:C1:AB:CE:64:48:95:95:EA:04:29:26:FA
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 01A0D35BA9108F0ABE0B43555EBB24094709
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/AAtWsYPKSMLBq85kSJWV6gQpJvo.roa
Signing time: Thu 24 Sep 2026 12:19:54 +0000
ROA not before: Thu 24 Sep 2026 12:19:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218588
IP address blocks: 2a07:e000:3b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:5b:a9:10:8f:0a:be:0b:43:55:5e:bb:24:09:47:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: Sep 24 12:19:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=000b56b183ca48c2c1abce64489595ea042926fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cb:f3:7a:ef:4a:a8:d4:fb:f9:67:a3:8b:2b:
e6:d9:c7:40:7a:35:ea:24:3a:21:31:72:57:7e:cf:
d8:7c:3c:56:f1:ed:a0:f0:b3:7d:1c:7c:07:26:52:
93:4d:92:f0:1d:32:06:7b:d3:2a:43:29:21:35:b9:
cb:59:c8:4c:e6:7b:ba:cf:6a:ba:71:ee:c9:42:f7:
3b:8c:ff:b1:62:20:7a:44:1b:64:a1:e5:5e:ee:4b:
b8:75:59:9d:0d:9a:c5:30:5c:99:45:21:8e:a2:17:
ec:f3:eb:be:8f:b3:72:86:54:60:6c:aa:53:b6:ba:
28:f9:d4:73:08:d0:49:6a:7a:99:eb:f1:27:b9:3a:
02:b6:ca:e7:5a:15:97:90:41:02:21:f1:f1:18:d2:
8b:37:e2:bb:78:78:25:87:eb:c7:70:90:a7:37:54:
27:38:1b:3a:a2:73:35:5a:fe:71:03:52:45:3a:fc:
d6:cc:00:24:e2:4e:0e:30:63:53:a2:d1:87:06:7e:
62:3f:3e:bc:fb:e9:5a:7d:97:36:b7:57:09:76:c8:
81:29:e9:c7:16:c0:83:6e:64:b2:24:51:29:98:0e:
d7:f9:57:4b:59:fc:72:82:6c:da:52:ab:c1:b2:d3:
a4:01:03:57:ef:48:42:95:9a:30:c5:4c:c0:75:94:
75:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0B:56:B1:83:CA:48:C2:C1:AB:CE:64:48:95:95:EA:04:29:26:FA
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/AAtWsYPKSMLBq85kSJWV6gQpJvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e000:3b::/48
Signature Algorithm: sha256WithRSAEncryption
14:e7:81:8d:f2:9b:59:15:b7:1c:d6:ab:f1:b7:ea:ac:cc:8e:
f2:6a:3a:6f:9a:35:2c:a0:36:49:d1:8b:89:c6:06:59:bf:c8:
51:4e:2b:2d:54:8f:1d:1d:0b:63:19:15:ac:17:91:41:22:06:
d4:05:9e:95:57:01:e8:3c:ff:80:af:d3:a0:e1:5a:d5:33:0c:
53:57:94:36:4f:27:81:a6:e0:68:16:e8:69:74:47:01:eb:ea:
94:9c:2c:c9:44:e1:46:51:8e:cd:50:33:68:bc:92:21:f4:6e:
7a:81:3b:73:51:ee:a2:a0:b5:b2:de:ae:d9:4e:ff:8e:28:55:
41:47:b7:ac:ee:e8:1b:c7:03:81:04:c8:38:05:63:b3:03:80:
26:3c:42:90:4d:1a:75:26:33:90:7e:46:81:9d:9c:6c:59:94:
58:ba:92:aa:2e:1f:77:53:c0:a1:0a:c3:d6:13:00:19:ed:ff:
ce:5e:31:26:00:5a:fe:55:d4:02:66:5f:10:80:d3:2b:d3:b3:
9d:68:58:b2:7d:bf:a9:c0:38:23:be:8d:24:33:4f:44:c4:12:
70:18:53:f3:12:fc:e8:9e:fe:86:97:52:1f:23:b7:95:93:7f:
4c:26:a5:00:8d:19:05:5e:f0:b2:13:a7:b8:a2:03:ed:5c:77:
30:40:59:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:19:41 2026 by rpki-client