Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/aQZ9Ia4Qj4fGzR9MmDNlo8VgIq0.roa
File: aQZ9Ia4Qj4fGzR9MmDNlo8VgIq0.roa (raw, json)
Hash identifier: onEzGkvIuJTxu+66hjC7ghR3Y8KNhPwZRvAQZPov804=
Subject key identifier: 69:06:7D:21:AE:10:8F:87:C6:CD:1F:4C:98:33:65:A3:C5:60:22:AD
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A079FB7F95F655FB5154F8B8B7D21A219B
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/aQZ9Ia4Qj4fGzR9MmDNlo8VgIq0.roa
Signing time: Mon 07 Sep 2026 03:48:40 +0000
ROA not before: Mon 07 Sep 2026 03:48:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214566
IP address blocks: 2a10:fa81:a00::/40 maxlen: 40
2a10:fa81:a03::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:79:fb:7f:95:f6:55:fb:51:54:f8:b8:b7:d2:1a:21:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 7 03:48:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69067d21ae108f87c6cd1f4c983365a3c56022ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:38:a4:a6:fe:f4:78:8d:ef:cc:76:ec:65:
91:66:a8:67:84:c1:e9:4e:53:33:8f:ff:a9:a9:68:
ec:03:54:d7:d9:1d:09:72:80:2c:da:6b:84:59:2c:
92:1e:96:13:29:68:fd:cd:77:39:77:36:c1:4a:44:
ee:2c:31:3a:f6:b3:d2:eb:6a:07:7e:5a:ea:f4:97:
75:59:56:a0:cd:11:4b:2c:e5:27:5a:31:70:e4:03:
4f:8f:92:bd:bf:db:9d:fa:4c:95:64:29:06:3f:3f:
0c:c6:e5:35:1e:cf:c4:e4:8a:37:33:d4:67:7c:9a:
ed:07:5f:77:a9:4b:79:05:74:db:e3:7f:1e:36:4c:
65:54:8d:49:2b:fb:b0:cf:b5:7c:85:63:43:6f:3f:
ca:8c:7a:91:4e:c0:d5:a2:cb:a1:f5:ae:96:83:d7:
ba:4f:90:75:3b:33:b6:9b:18:12:40:49:35:53:c7:
eb:77:c0:57:0e:bd:8d:59:dd:e5:50:85:22:b0:c6:
69:eb:60:ff:80:89:65:fa:57:7c:70:26:f8:1b:de:
e8:15:aa:cc:8a:4e:46:b7:aa:94:54:69:31:cc:fb:
37:26:80:ac:00:e7:17:17:cb:89:cd:a2:eb:4b:86:
76:c4:85:5b:b0:55:8a:ab:7b:30:9e:26:da:c5:62:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:06:7D:21:AE:10:8F:87:C6:CD:1F:4C:98:33:65:A3:C5:60:22:AD
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/aQZ9Ia4Qj4fGzR9MmDNlo8VgIq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:a00::/40
Signature Algorithm: sha256WithRSAEncryption
33:6e:a2:6c:67:65:0b:c7:47:3a:da:9a:7f:9e:e5:fa:08:3e:
d2:e1:6e:70:86:0e:05:33:58:02:58:d2:16:70:75:30:fd:58:
87:9e:e5:88:ed:45:33:ec:c6:a8:fa:36:61:64:20:e3:2d:02:
bc:41:38:13:a6:8b:94:51:49:4d:97:63:11:28:e8:38:4d:7b:
7c:0b:0d:39:00:63:6a:5f:f2:24:ff:8b:00:82:28:b8:e0:f7:
d2:41:cf:22:f3:8f:f8:6a:9f:c2:89:b9:62:ad:1a:40:31:02:
96:8d:be:f4:c3:27:5a:e8:7f:f5:b7:11:94:7c:0e:fd:ab:3d:
92:44:5a:72:35:db:1b:df:1b:de:5d:91:dc:32:20:f7:d0:3e:
85:90:4e:19:39:c2:76:e5:4b:00:78:1a:0f:15:f0:86:c9:4e:
2c:9b:fc:4a:cb:59:3e:7f:3e:06:3d:75:c0:4e:65:fd:88:c1:
a2:51:71:73:b9:2f:f6:8b:b0:6b:46:21:33:a9:d8:55:df:df:
cf:34:da:da:6a:f1:12:2e:84:27:ba:cd:c8:20:1a:05:57:0a:
e5:d5:d3:2a:c1:5d:ca:7a:12:b8:60:bb:3e:f8:86:0d:12:47:
0b:39:d7:67:92:57:96:9d:69:c9:f1:75:95:79:f7:70:f5:68:
f1:85:1e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:27:15 2026 by rpki-client