Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/RShy0Q_AHldE-P9AUjjAuVShyoQ.roa
File: RShy0Q_AHldE-P9AUjjAuVShyoQ.roa (raw, json)
Hash identifier: KW8HddN/VnzoVKNO3rCvX1obdhrUgNmYg2VgqU9hQxg=
Subject key identifier: 45:28:72:D1:0F:C0:1E:57:44:F8:FF:40:52:38:C0:B9:54:A1:CA:84
Certificate issuer: /CN=8242cde8355d539e9852c2b5ab8b224ea9815a6b
Certificate serial: 01A0CB3F70D0EC28668FF88116C879C56682
Authority key identifier: 82:42:CD:E8:35:5D:53:9E:98:52:C2:B5:AB:8B:22:4E:A9:81:5A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkLN6DVdU56YUsK1q4siTqmBWms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/RShy0Q_AHldE-P9AUjjAuVShyoQ.roa
Signing time: Tue 22 Sep 2026 22:32:07 +0000
ROA not before: Tue 22 Sep 2026 22:32:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19738
IP address blocks: 2a10:49c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.mft
rsync://rpki.ripe.net/repository/DEFAULT/gkLN6DVdU56YUsK1q4siTqmBWms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:3f:70:d0:ec:28:66:8f:f8:81:16:c8:79:c5:66:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8242cde8355d539e9852c2b5ab8b224ea9815a6b
Validity
Not Before: Sep 22 22:32:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=452872d10fc01e5744f8ff405238c0b954a1ca84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:99:06:9b:21:8e:49:f4:42:2c:fe:5e:ff:73:
da:50:6e:98:36:13:b9:db:80:d4:ea:14:f6:bf:28:
19:45:2a:89:23:a9:2c:75:2e:9a:db:9b:a8:3f:c8:
8a:ae:8e:3a:17:26:2e:02:14:d8:79:f8:59:10:44:
51:40:58:13:f7:97:c4:41:ca:a2:5f:8c:2c:94:d6:
f7:ef:fb:53:ea:38:4c:18:22:b2:f1:9f:f4:3b:bc:
ac:a0:40:b0:ee:0a:32:28:97:0d:c4:a5:e5:6d:45:
29:3b:91:97:df:09:ed:b4:6d:93:7a:14:40:17:36:
fd:38:f2:3a:78:c3:36:36:12:4c:38:fc:81:20:ac:
8d:1d:fe:4d:22:ef:34:58:58:4b:fb:a5:a0:76:0e:
97:25:bf:8e:58:7b:d7:ae:4e:bd:9c:82:7d:e0:44:
75:49:73:4f:38:e9:9f:87:86:7b:7c:47:3f:6a:7c:
28:eb:39:c6:ef:0e:9d:64:35:9a:ed:a3:24:c9:f8:
1e:35:ae:32:a6:55:16:d8:46:72:7a:23:49:34:3d:
2b:de:f2:4f:29:a0:fa:bb:68:ac:7e:0d:ca:7e:05:
ce:cb:3d:0d:0e:9e:91:30:5b:c8:cd:43:24:c3:80:
b5:b6:bd:5c:0d:e4:9a:3e:e8:df:55:d6:5d:2e:07:
b8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:28:72:D1:0F:C0:1E:57:44:F8:FF:40:52:38:C0:B9:54:A1:CA:84
X509v3 Authority Key Identifier:
keyid:82:42:CD:E8:35:5D:53:9E:98:52:C2:B5:AB:8B:22:4E:A9:81:5A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkLN6DVdU56YUsK1q4siTqmBWms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/RShy0Q_AHldE-P9AUjjAuVShyoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:49c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
46:eb:45:d5:35:61:57:b3:1b:31:26:31:37:df:0d:b6:6f:b4:
dd:88:2d:c4:19:10:4e:9e:ee:67:fc:83:37:c2:c1:d5:6b:f9:
5f:f8:4d:26:b7:62:5e:8d:fd:e3:89:b3:41:29:88:06:be:3c:
e1:0f:e8:5a:1a:1c:1a:41:9d:34:67:55:6e:ec:34:46:43:be:
48:78:7a:8d:8d:9b:7d:26:4c:68:67:50:3e:04:6a:ea:d6:15:
46:b0:cb:d1:6c:f2:05:d9:49:36:59:3f:50:b3:08:f9:ff:f5:
41:61:2e:29:ff:34:3e:4c:70:e2:26:dc:de:27:81:76:0e:6a:
83:3c:a0:61:d9:18:e8:da:16:6c:dc:15:63:4f:5c:70:a8:6f:
3b:0b:3b:09:56:16:4b:c9:01:60:b4:94:83:7c:19:f6:7e:b8:
1d:f0:6a:e7:b0:f5:97:36:b7:0b:bd:90:c3:20:72:36:08:e5:
ff:56:f6:d2:48:3a:e8:26:ee:a7:aa:2a:67:eb:70:56:60:df:
30:0a:81:e3:9a:14:31:7f:43:da:c0:a7:96:fa:da:07:bf:69:
cb:3b:f7:2d:ac:04:e1:a2:92:ef:77:ef:20:45:dd:5d:15:2d:
49:04:79:01:6b:28:97:48:6c:80:4f:07:2f:b7:ca:ce:f0:d8:
14:61:62:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:55:36 2026 by rpki-client