Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/dA71ri1vZ1z3NttsB88D71_1g7o.roa
File: dA71ri1vZ1z3NttsB88D71_1g7o.roa (raw, json)
Hash identifier: W2VdxbO/hlyELCXolXHggSHaVhy4bBg4u0pcUCkVWuk=
Subject key identifier: 74:0E:F5:AE:2D:6F:67:5C:F7:36:DB:6C:07:CF:03:EF:5F:F5:83:BA
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01A0C8B0D84245DAAFB4F905F632F780C4BE
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/dA71ri1vZ1z3NttsB88D71_1g7o.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401293
IP address blocks: 2a0e:c180::/29 maxlen: 29
2a0f:32c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d8:42:45:da:af:b4:f9:05:f6:32:f7:80:c4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=740ef5ae2d6f675cf736db6c07cf03ef5ff583ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:7d:0d:a7:c0:86:66:84:98:92:84:df:99:
ec:0f:3e:10:f6:e3:08:4f:68:be:8d:71:d5:bd:2a:
29:75:c9:dd:da:15:dd:ba:20:0a:b7:c0:9f:9b:37:
5a:06:82:87:55:ec:89:54:b5:02:c5:51:5e:1e:9c:
da:97:0e:ff:8f:b2:a3:ea:f0:08:ca:06:b9:cb:3c:
ae:bd:44:fb:98:ec:5e:49:58:fb:7c:21:8f:79:e6:
f0:e4:04:ed:12:d0:25:20:15:37:b6:df:6b:56:8c:
70:8c:d3:79:e1:39:43:6c:35:2b:57:ba:60:c4:5e:
32:a5:9c:e9:21:bc:83:c2:33:5a:73:ff:d6:13:8b:
d2:27:ba:f5:73:a9:da:99:3a:78:5a:ce:40:5f:b0:
0e:ad:af:a9:5a:ae:ed:35:b7:93:5d:1e:58:f5:22:
ea:d8:7a:a3:20:40:b0:52:b0:27:3c:8f:3a:4b:ba:
23:f8:72:74:e7:5d:4c:74:07:12:17:2f:d4:86:bf:
21:c4:4d:71:30:4f:10:3a:ec:90:09:41:b8:ad:23:
50:2d:18:44:e4:f6:7d:a4:f8:45:e9:27:a5:27:5a:
8b:d0:ea:9e:e3:fe:d9:d9:d0:04:6b:da:97:4b:08:
ab:bc:e0:e2:5e:9e:bb:9b:75:5b:83:f2:ee:9b:d4:
b7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0E:F5:AE:2D:6F:67:5C:F7:36:DB:6C:07:CF:03:EF:5F:F5:83:BA
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/dA71ri1vZ1z3NttsB88D71_1g7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:c180::/29
2a0f:32c0::/29
Signature Algorithm: sha256WithRSAEncryption
4d:b9:cd:81:70:e1:8e:fa:ea:39:da:77:89:67:28:88:03:37:
ba:fd:f8:21:c2:d4:73:2f:fb:52:d7:04:3c:1a:2e:05:49:87:
cd:c1:59:fa:a2:bd:4c:48:74:ce:8d:a7:ca:29:30:2e:f4:0b:
a0:fb:59:49:08:1b:eb:9a:20:f0:bd:04:c1:26:7c:bf:14:a4:
bc:b5:b6:76:ed:4a:d4:2f:f4:16:69:22:18:08:29:69:8c:6a:
b1:28:ec:74:90:31:68:fc:2a:db:da:54:0f:ba:f0:b3:fc:92:
59:11:51:7b:c9:ba:08:69:47:4f:53:0f:01:b2:7a:8f:d4:0f:
15:a6:59:42:c5:93:bb:97:44:3a:7c:6b:bb:91:e7:e9:37:be:
e4:0f:a7:a6:1d:8b:e8:a2:2e:af:ae:48:5b:e6:f9:a4:8e:74:
e0:bd:14:db:24:90:b9:ea:98:ff:55:18:b7:7a:a9:a3:d4:5c:
cc:90:a2:88:9b:1e:d1:60:b2:07:27:3a:2a:0d:fd:50:29:5b:
bf:1b:a2:f0:18:7e:35:bb:77:2c:fe:86:60:93:dd:9c:2e:95:
61:99:a2:a9:54:72:b7:90:7e:f2:9d:9c:8b:39:44:68:b8:5c:
a7:ee:82:01:39:f1:eb:13:b8:18:2f:66:08:ec:69:23:02:53:
a0:d8:63:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:16:00 2026 by rpki-client