Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/1qMmcHDN945CuZgDR18NDqRQdqM.roa
File: 1qMmcHDN945CuZgDR18NDqRQdqM.roa (raw, json)
Hash identifier: FNr3J+i8yiYlB9DXA5hhbjpjwwCUIQy9C+lJ0EPwyMU=
Subject key identifier: D6:A3:26:70:70:CD:F7:8E:42:B9:98:03:47:5F:0D:0E:A4:50:76:A3
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 01A1CEB60F58DF5ABA00B0A19F0B4BF3D990
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/1qMmcHDN945CuZgDR18NDqRQdqM.roa
Signing time: Thu 12 Nov 2026 07:43:20 +0000
ROA not before: Thu 12 Nov 2026 07:43:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 2a0a:79c0:1700:2d6::/64 maxlen: 64
2a0a:79c0:1700:af0::/64 maxlen: 64
2a0a:79c0:1700:cd0::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ce:b6:0f:58:df:5a:ba:00:b0:a1:9f:0b:4b:f3:d9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Nov 12 07:43:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6a3267070cdf78e42b99803475f0d0ea45076a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:55:bf:a9:56:21:09:5d:d7:f9:3d:d6:ac:6f:
64:d3:9f:e5:b3:93:2e:5a:92:28:45:40:f8:a6:19:
f9:b3:50:9a:48:78:b8:0f:a8:08:b9:b0:fe:2e:2e:
17:1c:a3:14:75:32:01:a1:02:d6:e8:66:42:c6:a6:
d8:ff:07:59:63:cb:4d:05:e4:43:bf:5f:b2:a7:78:
35:1c:5d:fe:62:4d:8f:c0:e4:69:cb:3f:cd:2c:b7:
00:db:74:dd:05:c1:03:20:d6:df:a4:52:bf:bf:2e:
36:46:d4:ed:18:8e:d9:ef:ce:d9:cc:ed:3c:c3:80:
f0:11:b2:5a:86:4a:6c:a7:7b:87:b7:6d:c0:0d:25:
ac:5b:55:51:f4:2b:a3:5a:c7:22:88:e0:34:e4:83:
64:c1:07:19:13:55:2d:b4:f7:65:a2:82:bb:8c:89:
59:eb:f6:95:9b:dc:59:6f:9a:90:8c:55:4a:4e:0a:
31:e4:d1:1e:d6:0a:d0:1c:eb:a1:27:b8:7d:93:b0:
54:62:a0:04:98:6d:c4:6a:97:ae:bc:e2:4d:26:e2:
99:03:18:14:24:bd:8d:46:84:4f:68:9d:dd:65:ef:
29:7c:bb:7a:46:07:ad:ba:ac:6b:e3:a9:bd:99:1a:
27:a8:fc:22:37:98:bf:44:4e:8b:13:65:f0:92:35:
04:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A3:26:70:70:CD:F7:8E:42:B9:98:03:47:5F:0D:0E:A4:50:76:A3
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/1qMmcHDN945CuZgDR18NDqRQdqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c0:1700:2d6::/64
2a0a:79c0:1700:af0::/64
2a0a:79c0:1700:cd0::/64
Signature Algorithm: sha256WithRSAEncryption
34:f8:12:03:71:b1:5b:f4:31:ae:38:fb:a3:8e:f6:4c:5f:7b:
49:0f:d4:3d:18:d9:71:fb:bd:63:88:a3:d7:77:c0:d5:b2:e3:
05:67:5d:b0:24:af:1e:87:b7:2e:0b:8a:1b:38:02:26:77:24:
2d:a8:e0:d2:c3:9d:0f:c0:78:91:f2:a0:b0:20:79:7e:a9:9d:
2f:fa:c3:78:9c:6d:3d:a6:bc:93:11:4a:12:23:60:01:ae:3b:
60:db:6b:4b:c2:c0:5f:f4:45:60:2b:ed:05:d8:5f:94:63:cd:
e0:99:fe:22:81:03:bb:a7:9f:ed:55:de:0b:61:86:f9:ad:95:
9c:48:c9:b8:5d:99:83:a0:8c:37:21:93:fc:06:d3:ee:7d:5e:
68:db:f2:61:f5:01:c1:91:cc:fd:bf:b6:d8:2f:ad:cf:56:dd:
d8:12:93:f9:37:36:bd:33:c8:4f:62:1e:85:79:28:92:f4:13:
7f:8c:46:ae:93:44:6b:bf:ac:43:de:c1:a6:bc:01:e1:60:bb:
4a:dc:1c:1c:c3:b9:bd:16:94:dc:25:69:4e:56:3e:51:8c:86:
b0:1b:62:2e:3e:1b:02:ad:19:f1:9c:7b:35:0b:1a:63:bc:9c:
a2:22:38:43:7d:0a:ec:3d:a6:c4:20:eb:9c:2a:60:70:b0:c9:
3a:d6:7e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:32:48 2026 by rpki-client