Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/gSERig0cPWTCn-dCTAMp6foyxXs.roa
File: gSERig0cPWTCn-dCTAMp6foyxXs.roa (raw, json)
Hash identifier: MTaB77L3kXcNrA/PNGTPyrpzVJbELRSz7zmac2JcjzM=
Subject key identifier: 81:21:11:8A:0D:1C:3D:64:C2:9F:E7:42:4C:03:29:E9:FA:32:C5:7B
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0F3A6F3465B707ED28A0D6998D8CBAA4B
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/gSERig0cPWTCn-dCTAMp6foyxXs.roa
Signing time: Wed 30 Sep 2026 18:49:59 +0000
ROA not before: Wed 30 Sep 2026 18:49:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218995
IP address blocks: 2a10:fa81:1a01::/48 maxlen: 48
2a10:fa81:1a02::/48 maxlen: 48
2a10:fa81:1af0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:a6:f3:46:5b:70:7e:d2:8a:0d:69:98:d8:cb:aa:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 30 18:49:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8121118a0d1c3d64c29fe7424c0329e9fa32c57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e9:2c:64:52:ec:ce:d4:bc:6b:3d:21:1f:42:
33:31:4a:75:51:68:c1:e0:1c:28:c8:8c:7e:80:37:
eb:3c:61:48:bb:0e:9b:ab:a1:8e:73:41:ca:f9:de:
9d:99:b0:cb:94:a0:6b:f7:05:32:c3:75:71:9d:42:
77:eb:4f:59:6f:06:bf:79:db:ed:58:32:89:1e:09:
8b:ec:83:df:e8:31:67:3a:94:18:64:e6:49:ce:31:
5c:41:82:9b:78:71:d7:ea:be:f7:81:40:37:c9:d0:
08:f8:0a:93:e3:90:04:7a:e2:65:66:6c:40:f7:f5:
d5:9e:1d:4d:00:35:49:86:6e:8b:af:35:b6:8e:8c:
d4:a1:d2:b6:6a:22:5c:16:c6:68:8f:a8:5e:e7:2e:
eb:9c:bc:d7:dd:e0:a0:6c:0f:34:9d:6e:f5:f7:30:
c1:df:2d:50:5f:cb:20:de:f3:14:8a:59:dd:ba:c6:
7a:6b:8c:ec:3a:d6:37:91:22:1c:c2:ae:83:3a:a5:
f6:ec:61:24:08:3c:ce:ee:a8:f2:d0:03:fa:7d:35:
f1:13:bb:9a:c0:e1:97:7f:ee:ba:06:2a:99:54:09:
a2:68:b3:20:c2:89:69:86:0e:3c:5c:93:7f:5f:ab:
5b:2d:de:d7:5e:28:0f:d5:48:e6:ff:79:c1:f1:68:
8b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:21:11:8A:0D:1C:3D:64:C2:9F:E7:42:4C:03:29:E9:FA:32:C5:7B
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/gSERig0cPWTCn-dCTAMp6foyxXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:1a01::-2a10:fa81:1a02:ffff:ffff:ffff:ffff:ffff
2a10:fa81:1af0::/44
Signature Algorithm: sha256WithRSAEncryption
83:ea:74:dd:cb:18:6b:dd:20:08:56:f3:91:3e:4e:0e:73:44:
c2:26:5c:62:65:62:bb:d4:f4:20:27:1e:f8:1f:cf:e6:1a:08:
8d:7b:96:9d:8a:d8:ae:cf:43:62:ff:61:4d:62:18:1c:49:98:
61:1f:0c:6b:e0:16:60:52:ce:c4:a3:bf:e9:a6:8e:cd:4d:6a:
cd:3d:5b:fb:f0:1e:f2:5e:7d:ee:fc:7a:b5:59:2c:e3:6a:18:
48:7a:d2:98:18:2e:00:ff:52:93:1e:70:d4:cc:7f:62:0e:99:
e4:a4:25:5c:da:8c:79:0f:6a:63:25:3e:08:dd:41:93:d4:55:
25:d3:af:07:5b:f5:6b:7d:c6:e6:44:6c:53:be:e0:3c:f2:5e:
41:a8:e3:99:dd:06:68:ec:db:1d:cc:df:39:f1:7b:87:99:1f:
cc:4d:4e:7a:bf:f9:8c:c8:66:22:e4:eb:7e:a7:a9:34:5b:82:
5e:4e:c2:81:2e:d4:d4:9e:4e:11:4d:3f:32:97:fd:e2:d6:fb:
70:e6:1d:02:f8:e3:69:93:8e:17:7c:fb:e2:ea:32:41:f6:ae:
e2:47:66:8f:ca:ba:63:b9:f9:30:6f:75:0b:25:97:ce:c2:36:
b9:81:eb:95:a2:00:ee:23:29:82:9e:36:18:fd:4e:b6:18:2c:
78:cd:25:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:15:53 2026 by rpki-client