Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/AStgdonopkscysS31vyYsIqk84Q.roa
File: AStgdonopkscysS31vyYsIqk84Q.roa (raw, json)
Hash identifier: 61NnxaHUP/0GiJVjlZJly8O/SwR5d2QqekicHIjbroc=
Subject key identifier: 01:2B:60:76:89:E8:A6:4B:1C:CA:C4:B7:D6:FC:98:B0:8A:A4:F3:84
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 01A0C8B0D6A5DFA43DFABE46C433D673229F
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/AStgdonopkscysS31vyYsIqk84Q.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 2a11:cf80::/29 maxlen: 29
2a12:f700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d6:a5:df:a4:3d:fa:be:46:c4:33:d6:73:22:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=012b607689e8a64b1ccac4b7d6fc98b08aa4f384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:39:1a:bc:85:7b:cd:d5:6e:15:59:f9:3f:bd:
b6:8c:a4:5c:42:d6:9e:6b:7c:c9:3b:b5:71:b2:b5:
74:79:7f:e2:8b:67:14:f2:3f:cf:f8:47:d9:a3:12:
92:5e:45:a7:ad:7d:83:ee:40:e2:aa:c4:14:b2:0a:
06:98:96:1e:c0:b0:eb:a4:a1:60:40:8a:5f:be:df:
be:9d:2c:70:c5:99:99:06:c8:e8:0c:45:e5:be:d4:
12:7b:23:df:ac:84:2e:9b:a3:ee:27:20:2d:7e:d6:
59:8c:6c:41:a3:f6:f2:e8:f1:2f:b2:c8:08:a9:81:
46:f0:51:12:00:5d:7b:50:c6:b8:56:6a:63:71:b9:
81:7f:bb:6c:b0:ef:88:a3:88:63:c5:52:37:a9:e3:
27:df:6f:85:97:48:82:1a:ae:ef:c9:bc:57:7f:32:
01:ba:28:d4:1a:c0:d7:22:cd:f8:b7:fe:5b:c2:37:
2f:20:aa:61:f0:51:43:5a:8b:6b:cd:e9:8b:e2:ad:
95:a0:7a:4f:98:a6:02:09:6b:75:45:df:87:bd:8f:
58:db:d0:fa:07:6a:9f:17:13:d8:20:ee:6f:52:f6:
e9:13:1a:71:13:8d:99:2e:a0:82:44:95:3f:83:32:
8e:06:56:d3:c9:f3:96:85:5e:78:fd:d6:fa:4e:34:
7c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2B:60:76:89:E8:A6:4B:1C:CA:C4:B7:D6:FC:98:B0:8A:A4:F3:84
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/AStgdonopkscysS31vyYsIqk84Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:cf80::/29
2a12:f700::/29
Signature Algorithm: sha256WithRSAEncryption
1b:b1:92:9a:4f:bd:9a:c2:be:a7:62:55:de:be:80:77:c3:6f:
c9:3c:7f:d0:0f:3a:bb:3e:27:c9:d1:ae:2d:eb:27:73:0e:3c:
e1:c8:33:6b:39:09:c2:32:77:33:3e:43:c9:27:8f:ca:80:b2:
86:03:bd:c7:2c:66:f5:e2:2f:21:af:fc:65:20:e0:b2:11:02:
2d:0d:fc:31:e4:f1:9b:61:d9:04:6f:30:41:81:c7:9a:58:7d:
96:86:22:1a:b8:e1:e4:e0:83:e7:5f:9f:ce:0a:f7:13:32:01:
ad:7b:81:99:54:bf:fe:91:e0:ca:a1:d4:96:3a:6b:9b:8b:52:
12:6b:0b:12:9d:4d:ed:3d:bd:2e:dc:e6:1f:04:b7:4f:7a:36:
c3:a8:6b:f9:17:bd:0d:ca:84:ab:d7:4d:75:e6:83:88:ea:cf:
80:21:47:67:3e:26:d1:44:3a:e5:d6:3b:d5:4d:27:61:86:35:
b5:1c:ab:0f:94:16:47:50:8f:12:97:6a:21:f8:31:9f:ee:fb:
d5:8e:f7:5b:18:01:05:97:55:de:27:9b:d6:c4:68:ce:20:f8:
43:79:71:d3:b9:0a:84:b5:0f:10:00:0e:d7:02:bd:d6:8e:19:
1c:d5:ea:ec:f2:2d:66:dc:04:8b:00:ea:4a:1e:d2:62:4e:fc:
89:d3:cc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:54:24 2026 by rpki-client