Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/2SbyTQi-Svltsg1LOFhC3Kp4o28.roa
File: 2SbyTQi-Svltsg1LOFhC3Kp4o28.roa (raw, json)
Hash identifier: J4eiJ4eja+mWZSFpdOGtUdxZPpm2OOJPyPVdQ1z7Ur4=
Subject key identifier: D9:26:F2:4D:08:BE:4A:F9:6D:B2:0D:4B:38:58:42:DC:AA:78:A3:6F
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019F8F94B15088B7F2A4A5EEF9502062AAFF
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/2SbyTQi-Svltsg1LOFhC3Kp4o28.roa
Signing time: Thu 23 Jul 2026 15:25:14 +0000
ROA not before: Thu 23 Jul 2026 15:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6517
IP address blocks: 2a10:fa85::/32 maxlen: 48
2a10:fa87::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:94:b1:50:88:b7:f2:a4:a5:ee:f9:50:20:62:aa:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jul 23 15:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d926f24d08be4af96db20d4b385842dcaa78a36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:8a:75:86:17:9d:ee:1b:a8:2a:62:8d:ac:
b0:ce:de:41:4a:8d:5b:e0:3c:fc:ec:a6:0c:2f:a1:
40:1e:a0:39:21:d2:09:65:82:92:aa:61:ce:4d:9c:
89:bc:11:b2:03:0f:63:0f:18:24:b3:d3:b5:33:1b:
1e:58:51:96:da:ff:00:42:d4:5e:80:49:97:28:cc:
65:71:f8:08:8a:d3:5e:07:53:e5:8f:fd:9d:42:68:
d8:90:f1:b2:14:e4:3e:2a:2c:2e:f5:54:5e:5d:b1:
6e:ec:d4:b5:84:e7:88:f8:9d:6e:d3:09:8d:2b:c2:
a9:62:c8:83:52:e9:16:f3:59:86:a7:4e:d1:dc:f7:
fd:7f:da:1d:e6:7d:da:d5:0a:75:48:5b:8f:dd:10:
62:f5:55:08:f9:35:ed:bf:69:bf:f7:c9:08:e0:a3:
c8:f9:d6:24:57:ff:aa:15:e6:a8:88:b3:78:4d:c2:
68:c6:d3:4a:5f:44:7c:4d:f5:4d:ac:16:29:92:7b:
53:10:87:7f:6e:16:55:6e:d6:77:7b:f8:02:54:6a:
6e:df:2b:b3:87:9f:52:7c:49:7a:e1:d1:4c:40:e7:
d1:cf:d3:ba:91:b3:53:78:06:50:4b:97:21:9e:2c:
08:c2:00:f2:98:4c:87:b9:3e:45:d4:3e:0b:3f:01:
4b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:26:F2:4D:08:BE:4A:F9:6D:B2:0D:4B:38:58:42:DC:AA:78:A3:6F
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/2SbyTQi-Svltsg1LOFhC3Kp4o28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa85::/32
2a10:fa87::/32
Signature Algorithm: sha256WithRSAEncryption
02:47:7b:09:f1:7a:51:ca:7a:3c:d4:bf:eb:04:94:1e:de:bd:
dd:8f:27:6b:64:65:9f:4e:58:96:5e:64:e0:04:cd:6a:b1:f8:
c8:c5:77:08:28:00:1d:85:b9:86:c2:09:a7:d2:c5:cf:bd:ca:
0c:e2:31:f8:28:53:5f:b2:3d:a7:92:7f:3c:52:b8:0c:24:56:
15:ec:37:91:4b:bf:28:53:2b:45:12:3c:89:0f:c5:a3:f9:f3:
79:b3:22:e3:42:d5:30:4a:ca:24:95:fe:c0:df:07:b1:d0:88:
54:f5:ff:df:86:6f:9f:1d:8b:95:f6:1a:6b:fa:0a:c3:42:b4:
cb:39:dc:23:ad:f1:b9:e5:0d:77:2f:2e:ea:d6:be:c4:99:96:
41:d1:f4:dc:47:bf:79:3d:58:e6:05:82:0c:da:d8:5e:be:3f:
11:9b:84:32:03:d8:40:d1:2a:d9:07:0e:61:fe:07:b5:48:f7:
51:eb:47:b7:8d:5f:ad:41:e5:7d:c3:95:a2:30:2f:aa:2c:b5:
7a:43:83:9c:45:66:bf:bd:bc:d0:c7:5d:20:5e:4c:05:ec:65:
7d:15:89:02:e9:dd:fb:9e:23:bb:48:e6:06:e9:93:7b:3b:53:
e1:a2:87:ee:8b:d3:79:b2:bc:69:91:af:2b:82:c3:6f:9a:a6:
49:55:b6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:01 2026 by rpki-client