Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/t2TYwTlako10G5CCSET_H4ujOkc.roa
File: t2TYwTlako10G5CCSET_H4ujOkc.roa (raw, json)
Hash identifier: MazsB1vFKvUSku3TIJgQkd0SuY/8tHfSWSbrWR4nyt4=
Subject key identifier: B7:64:D8:C1:39:5A:92:8D:74:1B:90:82:48:44:FF:1F:8B:A3:3A:47
Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Certificate serial: 01A0C59C920D371415650B430E37E1F1E356
Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/t2TYwTlako10G5CCSET_H4ujOkc.roa
Signing time: Mon 21 Sep 2026 20:16:07 +0000
ROA not before: Mon 21 Sep 2026 20:16:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200203
IP address blocks: 2a01:ecc0:9000::/36 maxlen: 36
2a01:ecc1::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:9c:92:0d:37:14:15:65:0b:43:0e:37:e1:f1:e3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Validity
Not Before: Sep 21 20:16:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b764d8c1395a928d741b90824844ff1f8ba33a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:ab:ce:95:99:0e:f9:14:73:80:2b:45:52:
08:90:83:8a:c6:ca:49:e1:ca:bc:7b:fc:ec:1a:ff:
6d:49:d7:05:5c:ec:39:51:d4:7c:c8:0b:af:53:bf:
e3:b6:b2:9b:a4:e6:7c:2b:2b:00:d4:28:28:c6:ba:
d8:18:c5:90:b4:57:2e:b6:da:96:99:e1:32:8e:b8:
45:34:21:6c:07:12:54:3e:9d:62:6d:03:b9:91:ad:
c9:92:37:40:b5:f9:85:bc:07:64:84:e9:c7:cc:01:
59:c4:03:77:ec:ee:b6:82:bd:94:d7:97:b7:dc:66:
41:49:25:f0:78:11:14:92:bb:90:48:55:4d:42:c9:
db:c7:ff:e5:19:16:9b:51:e3:05:79:09:ad:b7:54:
88:ff:eb:f3:2a:ab:74:74:96:5b:bc:a0:96:c0:8b:
91:8d:ec:ed:62:2f:b5:a5:d3:54:e4:ff:a3:2a:f7:
39:59:9c:e6:6c:98:fc:ce:9c:58:7e:ff:c5:51:cc:
8d:66:15:72:21:48:4d:25:78:ef:0e:1f:86:f1:da:
b9:21:5f:48:a5:c9:11:10:11:87:14:eb:5f:8e:39:
b8:65:cc:5b:cd:c8:ac:d9:10:4f:56:93:27:4e:63:
99:42:45:c7:44:92:1b:28:02:31:cd:db:0e:bc:ab:
90:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:64:D8:C1:39:5A:92:8D:74:1B:90:82:48:44:FF:1F:8B:A3:3A:47
X509v3 Authority Key Identifier:
keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/t2TYwTlako10G5CCSET_H4ujOkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ecc0:9000::/36
2a01:ecc1::/32
Signature Algorithm: sha256WithRSAEncryption
8d:8b:b5:69:26:1c:75:89:31:0b:58:b6:f1:2a:e1:58:e9:03:
3c:6c:e3:8d:c6:f3:68:8d:9f:ad:69:88:b5:ba:3c:84:ed:df:
71:c2:8a:23:c3:5b:f6:ac:53:80:c9:65:c1:70:4f:ec:20:a7:
cb:be:e8:c0:32:da:82:25:48:5d:24:6d:7b:2e:6e:06:b9:1a:
b5:6f:6c:ed:9f:6f:fe:c8:b8:78:87:5a:ac:6b:29:b8:4d:7e:
df:01:e7:8f:7b:69:a0:29:4c:06:65:8f:bf:bb:fc:05:20:2d:
54:ad:bb:b1:ff:8b:c2:e8:b5:fc:5f:c1:3c:14:65:91:3b:3c:
db:35:39:01:7c:1a:4b:a9:00:5f:1d:dc:c7:53:66:f3:02:59:
c6:a7:26:0d:7c:32:1e:22:4d:17:36:96:6f:76:48:d4:4b:4b:
ef:c3:ca:92:87:08:cc:d0:bf:71:67:c5:17:12:da:e0:ce:00:
3c:cc:23:38:f2:d1:9f:80:60:51:39:6c:9c:8b:d0:eb:89:3a:
29:1d:bf:e7:31:f3:06:a6:37:23:5a:b6:c8:72:a4:c0:7f:85:
8e:7e:a8:d8:9d:ab:f1:83:e7:3b:bc:ac:62:1a:61:ad:04:2c:
7e:bf:ea:29:b5:d6:76:86:85:57:95:b1:75:d6:66:15:2a:f1:
b2:70:72:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:20:04 2026 by rpki-client