Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/d19101-3ea8-4fde-b48b-c5b720e5bd3d/1/F80AkPvxmwIHyAR6F8toovNMCkM.roa
File: F80AkPvxmwIHyAR6F8toovNMCkM.roa (raw, json)
Hash identifier: dK0wx2YRv7h0ZvOvdMVuvxi9wIRvBmc/ZoM0bUsZpsc=
Subject key identifier: 17:CD:00:90:FB:F1:9B:02:07:C8:04:7A:17:CB:68:A2:F3:4C:0A:43
Certificate issuer: /CN=0726144ebaf904b81d0a3bbc04b4a87073550533
Certificate serial: 01A07BD03F0794C82172C7AD31600A8F6F39
Authority key identifier: 07:26:14:4E:BA:F9:04:B8:1D:0A:3B:BC:04:B4:A8:70:73:55:05:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByYUTrr5BLgdCju8BLSocHNVBTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d19101-3ea8-4fde-b48b-c5b720e5bd3d/1/F80AkPvxmwIHyAR6F8toovNMCkM.roa
Signing time: Mon 07 Sep 2026 12:20:40 +0000
ROA not before: Mon 07 Sep 2026 12:20:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205869
IP address blocks: 2a0e:d3c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d19101-3ea8-4fde-b48b-c5b720e5bd3d/1/ByYUTrr5BLgdCju8BLSocHNVBTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d19101-3ea8-4fde-b48b-c5b720e5bd3d/1/ByYUTrr5BLgdCju8BLSocHNVBTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByYUTrr5BLgdCju8BLSocHNVBTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:d0:3f:07:94:c8:21:72:c7:ad:31:60:0a:8f:6f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0726144ebaf904b81d0a3bbc04b4a87073550533
Validity
Not Before: Sep 7 12:20:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17cd0090fbf19b0207c8047a17cb68a2f34c0a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:41:06:c0:7e:45:16:02:21:d8:da:4c:f9:82:
31:05:c0:86:55:c0:ae:e0:cf:53:34:57:35:b9:9d:
cf:bb:58:d8:af:95:ea:2a:b2:f3:ea:ad:9f:e3:72:
44:35:5a:a1:4c:06:57:b6:66:61:eb:1a:37:72:e1:
d4:cc:d1:f0:ab:90:75:ff:08:16:ed:1c:a8:90:cb:
8d:c0:0d:e8:04:91:aa:7c:71:ed:34:d8:93:61:56:
a5:9c:94:cf:1d:12:f2:18:78:f7:10:54:fc:ee:92:
76:fe:47:74:98:c8:da:3d:f0:9d:89:66:22:f1:30:
bd:de:f9:2a:8c:2c:6b:bd:80:80:88:38:ee:68:f8:
fd:db:c4:58:2a:d6:3e:39:ca:1a:0e:f9:15:9b:c9:
d4:91:37:d0:8f:09:55:29:e8:cc:5f:ac:a7:72:68:
4f:3e:b7:3e:c5:5f:fe:49:36:4f:68:4a:a3:8f:71:
d1:7d:cc:54:4c:65:13:03:26:33:56:cd:6d:6e:4f:
95:d1:db:25:2c:f0:51:55:ee:27:c3:96:de:6e:72:
97:23:0d:9d:7a:0b:e1:9b:44:b8:dc:23:f5:7f:0e:
d1:05:1a:a0:de:f4:82:08:2b:e5:2b:90:64:14:a6:
cb:51:3f:e9:51:5e:a2:12:1f:9b:39:7d:0d:93:e5:
d0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CD:00:90:FB:F1:9B:02:07:C8:04:7A:17:CB:68:A2:F3:4C:0A:43
X509v3 Authority Key Identifier:
keyid:07:26:14:4E:BA:F9:04:B8:1D:0A:3B:BC:04:B4:A8:70:73:55:05:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByYUTrr5BLgdCju8BLSocHNVBTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d19101-3ea8-4fde-b48b-c5b720e5bd3d/1/F80AkPvxmwIHyAR6F8toovNMCkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d19101-3ea8-4fde-b48b-c5b720e5bd3d/1/ByYUTrr5BLgdCju8BLSocHNVBTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d3c0::/48
Signature Algorithm: sha256WithRSAEncryption
12:68:68:33:82:19:18:ca:a2:cb:64:50:4e:30:e8:0d:c1:33:
d7:7f:2b:bb:9b:fa:2c:84:64:fd:da:c4:44:b9:de:51:95:c8:
e7:ff:67:82:4c:0b:c9:87:96:c2:27:54:13:a0:05:de:a0:d5:
c7:77:b0:5e:e2:d4:51:3f:3a:30:95:c5:e8:61:b8:a1:67:9c:
7d:b6:ef:c8:31:09:e3:df:4e:c5:f4:bc:88:e9:d6:11:03:6c:
4a:ad:e2:7a:ff:61:ed:f1:c6:42:24:dc:7b:d1:69:e3:38:1e:
50:70:ea:fe:a9:ff:bf:f5:99:2e:a9:fc:35:14:82:73:0f:5f:
0c:ff:07:c2:d7:c5:ea:84:97:ea:a4:1c:86:66:bf:9d:93:ef:
b1:a1:d4:b9:7a:dc:f2:94:a7:3d:da:9d:55:bd:29:08:44:a5:
8a:25:fc:50:23:f2:d7:05:83:69:1c:52:e0:3b:c6:5c:8c:94:
98:86:2f:32:ba:d5:62:eb:ab:f4:7d:ac:72:5e:18:5e:63:96:
b0:9e:68:29:9d:26:1f:e1:43:f0:01:9c:12:75:c4:0b:3d:56:
e7:9f:f8:63:3f:0c:09:3f:77:7a:94:da:3d:ee:54:c7:44:45:
95:a6:f8:a9:c8:1a:06:d5:e6:d4:88:1f:08:ad:e1:cb:78:e7:
b2:97:bc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:07:30 2026 by rpki-client