Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/DR2qqwCcAQ68nO2JECL2f8u4qi8.roa
File: DR2qqwCcAQ68nO2JECL2f8u4qi8.roa (raw, json)
Hash identifier: Z6zOgGi+ZP+wYLY1uYpjPjR1I8TLLD50yf647yZYxE0=
Subject key identifier: 0D:1D:AA:AB:00:9C:01:0E:BC:9C:ED:89:10:22:F6:7F:CB:B8:AA:2F
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 01A0C8B0D77B64337879B673A4BC430850B6
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/DR2qqwCcAQ68nO2JECL2f8u4qi8.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402604
IP address blocks: 2a11:1300::/29 maxlen: 29
2a11:7dc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d7:7b:64:33:78:79:b6:73:a4:bc:43:08:50:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d1daaab009c010ebc9ced891022f67fcbb8aa2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:21:fc:0d:94:8d:bf:56:fd:98:5a:d1:f3:23:
fa:62:60:ea:0f:1e:cf:f3:ae:7a:01:0f:2e:31:b9:
c1:e7:b3:88:d7:6c:a0:6f:bb:e3:63:ed:1f:79:0b:
a2:61:7e:12:c7:35:90:b1:13:11:c8:32:8f:fa:c9:
0d:0d:59:44:27:06:84:a0:fc:14:67:ee:58:b6:fc:
97:03:09:74:82:d0:c0:81:ef:ee:57:6c:f4:ae:ff:
ab:ec:1d:28:21:a3:00:76:f4:0f:dc:b3:02:dc:75:
82:8a:62:41:26:43:52:97:85:1b:52:49:69:f8:75:
18:45:2f:3a:20:85:1e:a1:df:02:9b:21:3a:80:1b:
a8:1b:93:2d:91:1c:9c:f2:95:1d:95:37:a1:c0:16:
e5:58:73:74:18:07:59:19:5b:d4:23:22:a5:54:1d:
d2:18:69:a4:a2:46:06:f0:1c:da:ac:cc:cb:d8:23:
a5:45:e7:5f:72:2e:e9:30:2c:6b:af:82:14:ff:f9:
fc:17:c4:f3:c5:b5:1b:ea:53:88:b6:8f:ae:ed:c6:
37:f8:38:3e:e8:6b:16:c4:2a:4c:51:2d:45:62:42:
18:02:6d:fe:ee:d4:33:af:ec:2d:38:b1:1d:8a:e8:
78:87:30:ce:27:df:93:96:5c:20:c1:01:ae:12:b8:
ee:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1D:AA:AB:00:9C:01:0E:BC:9C:ED:89:10:22:F6:7F:CB:B8:AA:2F
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/DR2qqwCcAQ68nO2JECL2f8u4qi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1300::/29
2a11:7dc0::/29
Signature Algorithm: sha256WithRSAEncryption
88:37:35:66:e6:79:47:d3:e9:93:da:27:b2:6f:4f:2e:72:a9:
f4:62:61:c1:1c:c0:e7:32:dd:37:61:d2:22:f2:5c:76:96:78:
a2:00:ba:11:a2:9e:64:1f:56:89:7f:14:21:d7:ca:78:e5:d2:
b9:8c:48:60:b7:85:6d:b0:83:2d:b0:c4:92:ea:4f:06:03:a1:
6e:e6:a0:7c:a4:79:7e:f0:0a:01:2f:bd:49:84:f0:00:39:1b:
0e:67:13:50:59:20:ff:52:65:5c:d6:96:b5:2b:54:b8:76:78:
80:e4:4b:c7:23:54:14:c2:05:88:be:03:0e:48:24:1e:df:56:
2d:ba:b3:9c:99:4b:e2:e0:93:df:9f:7c:92:42:a4:c4:fc:97:
51:30:8d:d0:43:eb:57:9c:7c:8c:1e:ed:af:90:15:93:fc:52:
f0:39:f8:be:31:6a:cf:9b:e4:ca:2e:0f:34:15:61:06:40:ae:
ba:d5:1a:15:15:b3:75:18:ae:3c:80:89:09:8d:d1:1a:52:50:
dc:e3:f8:5a:c6:05:ae:e1:0d:da:a6:d1:08:09:53:6b:0f:fe:
0b:bf:16:a8:0a:76:aa:57:12:04:b7:c1:e3:56:b3:04:11:26:
2d:36:ad:03:2d:50:f0:0b:ab:b9:00:35:4a:bb:ca:26:a6:30:
4f:f5:9a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:07:01 2026 by rpki-client