Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/tAw6UWp4Vho-zpkm30XeR1AGxBo.roa
File: tAw6UWp4Vho-zpkm30XeR1AGxBo.roa (raw, json)
Hash identifier: xVzBzy0UOlq/6p8VAzGTotI7a9rCoLnmSdnBkIqkeX4=
Subject key identifier: B4:0C:3A:51:6A:78:56:1A:3E:CE:99:26:DF:45:DE:47:50:06:C4:1A
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01A024EB7DFA064AD7867648C3BFAE3BBF28
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/tAw6UWp4Vho-zpkm30XeR1AGxBo.roa
Signing time: Fri 21 Aug 2026 15:23:28 +0000
ROA not before: Fri 21 Aug 2026 15:23:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218898
IP address blocks: 2a03:5840:15f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 16:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:eb:7d:fa:06:4a:d7:86:76:48:c3:bf:ae:3b:bf:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Aug 21 15:23:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b40c3a516a78561a3ece9926df45de475006c41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:56:04:a1:ab:92:19:1b:79:ae:7c:dd:b9:
41:1f:ec:24:68:19:35:d5:33:f0:49:32:e7:30:f0:
49:42:3e:98:8e:0f:2f:f5:b1:74:2c:8c:31:77:26:
4d:5e:8b:64:d3:b6:ab:7c:aa:75:62:f9:f7:be:01:
b2:8b:dd:d1:61:75:b9:3f:cf:73:31:c7:95:c5:3e:
a1:5c:9c:a8:1a:10:b2:80:ec:7e:66:b5:e9:d7:4e:
5b:2f:27:99:14:38:64:b0:cf:23:de:ff:23:dd:f6:
69:14:a8:83:07:07:f3:ad:9e:3b:59:0b:a3:5e:99:
a5:6b:e9:87:b5:18:34:de:19:95:3f:54:1d:39:4c:
b3:cb:ad:a7:26:ce:c9:83:c9:1c:e3:0c:a2:4e:7f:
41:79:0e:3d:21:4c:4b:a4:a8:17:af:50:01:79:ec:
31:b8:b1:30:4b:44:3c:aa:7f:a0:07:e8:e1:64:73:
7b:a2:27:f2:33:bc:b8:21:96:b8:70:68:bf:6a:04:
29:6f:2a:47:11:cf:d2:7d:1d:d6:b9:1e:0f:75:0a:
42:ad:ae:ad:4f:a1:47:2a:20:1b:df:66:00:c2:4f:
a8:24:7b:46:92:e7:ee:47:60:a9:c8:7c:85:02:bf:
b5:7a:31:b4:f7:bc:07:ab:40:15:0c:48:e3:db:d0:
c8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0C:3A:51:6A:78:56:1A:3E:CE:99:26:DF:45:DE:47:50:06:C4:1A
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/tAw6UWp4Vho-zpkm30XeR1AGxBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:15f::/48
Signature Algorithm: sha256WithRSAEncryption
40:2c:cf:27:a3:7a:96:b4:1a:6d:3b:5b:2d:a7:25:97:67:67:
38:47:91:aa:4f:34:b8:67:f9:e5:3f:01:6c:de:ac:79:b5:b1:
3f:a9:d4:5b:b7:d4:01:1c:6d:90:e3:79:ae:4e:3b:22:2d:98:
25:86:0b:11:f6:2e:9e:df:12:f3:88:21:3b:e5:a9:4a:78:2c:
ae:11:72:d8:b7:2a:e9:b7:e1:49:82:a9:f0:a4:bd:2a:70:bb:
58:15:38:07:d7:5e:1b:cd:c6:b6:4a:5b:2a:95:a4:ca:4a:6e:
c6:22:1a:e8:88:81:db:c7:de:33:eb:79:db:09:51:59:60:03:
28:dc:a3:d7:84:f8:21:04:12:9c:82:28:f5:6b:65:76:e3:2b:
96:e1:0f:a9:c2:bd:35:98:c0:4f:d1:04:fc:bb:5a:b2:a4:b1:
0e:24:0a:e4:f1:5c:a3:95:55:45:ee:d0:ab:f2:7c:04:ce:99:
b4:16:c0:7e:c0:08:87:0c:bc:f0:e0:02:bd:71:35:39:1a:14:
d1:ce:af:3b:14:ad:72:3d:06:5b:5e:37:5d:55:19:29:01:b3:
51:9c:77:15:3d:17:bb:88:e2:0f:93:f8:8d:17:f1:bf:76:d4:
14:53:64:10:22:ab:e6:0e:bf:27:45:46:af:2f:46:ff:54:74:
00:c1:e1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:04:41 2026 by rpki-client