Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/Dh7MbHj4Le1FjddsAP7NsesKNak.roa
File: Dh7MbHj4Le1FjddsAP7NsesKNak.roa (raw, json)
Hash identifier: En4LsGvH+Sy2ELMEMkDEr05rIEcg9J09dULw/wYD9jQ=
Subject key identifier: 0E:1E:CC:6C:78:F8:2D:ED:45:8D:D7:6C:00:FE:CD:B1:EB:0A:35:A9
Certificate issuer: /CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Certificate serial: 01A0D8694B7A8D3FAD769C33C1FA73B4E0BE
Authority key identifier: 31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/Dh7MbHj4Le1FjddsAP7NsesKNak.roa
Signing time: Fri 25 Sep 2026 11:52:54 +0000
ROA not before: Fri 25 Sep 2026 11:52:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31128
IP address blocks: 2a0f:3400:500::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:69:4b:7a:8d:3f:ad:76:9c:33:c1:fa:73:b4:e0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Validity
Not Before: Sep 25 11:52:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e1ecc6c78f82ded458dd76c00fecdb1eb0a35a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b5:e1:d1:7b:70:5b:a7:93:49:f5:33:fb:44:
1a:2b:0a:27:2b:8f:cd:32:3b:ef:d0:d8:aa:dd:47:
2d:a7:9c:25:91:fe:9e:2d:75:56:b3:72:01:32:a3:
23:28:dd:8f:43:99:13:ea:c4:d1:d0:6a:f2:4f:2d:
03:ef:1b:00:04:93:60:a1:a0:93:3a:db:9f:76:bc:
9b:17:f4:c0:be:02:85:f8:ad:c2:7a:98:6c:db:68:
e0:9f:2b:71:95:fa:bd:45:70:5f:da:0d:fd:db:1c:
94:e1:51:89:71:7d:a0:5c:78:3c:0b:7a:e7:32:bb:
09:88:5e:2b:67:e3:4e:d4:d3:ad:c2:64:ab:d8:20:
08:99:43:e5:4a:48:7b:60:20:da:7b:d8:1e:4e:fd:
d1:c5:4d:3a:b9:20:a4:82:2d:bc:0a:8e:a7:ce:42:
55:58:dc:c7:e6:03:6c:84:90:06:c2:91:3c:14:60:
19:c7:6c:60:c7:45:43:4e:b8:df:a3:13:da:6b:12:
d6:ab:c1:69:31:0b:a6:8a:ff:b8:db:7d:5d:82:c1:
9a:e9:cc:1b:b8:82:47:d4:bf:e6:f4:02:a1:77:4e:
b1:86:81:d1:49:a8:01:8c:43:04:c1:79:58:9f:02:
a8:fa:d1:cc:64:0d:3e:60:63:ba:8e:35:49:ca:47:
88:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1E:CC:6C:78:F8:2D:ED:45:8D:D7:6C:00:FE:CD:B1:EB:0A:35:A9
X509v3 Authority Key Identifier:
keyid:31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/Dh7MbHj4Le1FjddsAP7NsesKNak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3400:500::/48
Signature Algorithm: sha256WithRSAEncryption
b2:1f:82:de:3b:e5:95:f3:f0:40:67:2d:6c:d8:5f:89:9a:d4:
12:e1:b0:e1:e0:d2:c1:31:d1:97:95:47:8e:99:a9:6b:f1:7c:
15:1b:6f:59:14:2f:be:88:40:c1:6a:13:3a:eb:e5:f0:35:cb:
2a:14:64:8b:f2:60:f6:39:38:8d:73:72:9d:72:a0:92:87:fb:
8a:d6:85:98:a2:b2:88:24:dc:0c:70:bf:3d:88:2e:90:a1:9d:
7b:3f:c2:09:39:2c:73:1d:0c:ac:24:d4:bf:31:c4:ac:22:a5:
c2:11:20:56:d4:b1:f0:7c:31:02:cb:5d:44:4d:e1:f8:0d:3f:
a6:57:2e:84:f2:6e:6d:cc:fa:a9:17:b1:22:64:35:5a:fb:2c:
32:33:2a:b7:b2:57:ec:36:6e:13:5e:8a:6e:af:89:ae:93:14:
a6:c5:52:62:40:86:93:ab:f4:c4:07:f4:72:60:f6:7a:50:9b:
eb:9e:e2:38:3c:8e:6b:0f:47:6c:79:a4:e6:fe:4e:e4:93:a2:
07:aa:86:cc:ac:0c:90:bc:b7:1a:36:ae:cf:d3:b7:e1:e7:e1:
5c:35:b8:ae:d7:e3:c3:41:1b:dd:89:1c:88:69:c4:19:6f:f8:
bc:a9:2e:cb:37:5d:31:92:1b:ae:d2:cc:a5:8e:0b:34:23:bb:
85:80:f4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:49:36 2026 by rpki-client