Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/qSW___RGOpEO6wiNjMdMLDZ-PH0.roa
File: qSW___RGOpEO6wiNjMdMLDZ-PH0.roa (raw, json)
Hash identifier: 3TwVM+dNx1KwFBm7vXZYFppvoQWgsP2ReVe040C/Z6Q=
Subject key identifier: A9:25:BF:FF:F4:46:3A:91:0E:EB:08:8D:8C:C7:4C:2C:36:7E:3C:7D
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0EA2BCE728C7735426CB0961EB2E9F70D
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/qSW___RGOpEO6wiNjMdMLDZ-PH0.roa
Signing time: Mon 28 Sep 2026 22:38:54 +0000
ROA not before: Mon 28 Sep 2026 22:38:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a10:fa80:5::/48 maxlen: 48
2a10:fa80:6::/48 maxlen: 48
2a10:fa80:f::/48 maxlen: 48
2a10:fa80:110::/44 maxlen: 48
2a10:fa80:110::/48 maxlen: 48
2a10:fa80:2000::/36 maxlen: 36
2a10:fa81:f00::/40 maxlen: 40
2a10:fa81:1500::/40 maxlen: 48
2a10:fa81:2100::/40 maxlen: 48
2a10:fa81:2943::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:2b:ce:72:8c:77:35:42:6c:b0:96:1e:b2:e9:f7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 28 22:38:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a925bffff4463a910eeb088d8cc74c2c367e3c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e5:57:33:1b:eb:9a:21:c6:40:e9:1f:a8:ee:
ec:28:c6:00:41:00:8c:53:c9:0c:4d:4a:f8:db:f6:
78:a6:00:ec:78:06:4d:c7:c9:6d:ff:36:58:aa:18:
30:ba:34:39:f7:ec:ce:7a:ee:ea:ad:f9:a5:ea:94:
f9:69:2a:a3:f0:5f:28:bb:4a:50:76:90:b9:17:dd:
5e:cc:ad:12:d6:2e:25:af:e7:15:bd:37:c4:c7:9d:
9d:71:b5:e9:5c:06:98:6c:73:3b:56:f4:74:ed:16:
f8:11:fe:d9:9e:90:21:9a:1e:2b:35:8c:26:10:c9:
04:73:aa:e2:5c:ca:4d:4f:f5:00:42:16:30:e0:f0:
0c:46:27:eb:64:a2:8a:3a:13:9e:02:82:a1:2c:22:
76:d2:b2:7b:c5:88:1a:41:9c:0a:85:4e:8f:df:aa:
01:6f:c7:63:95:a4:e9:5e:7c:ff:60:a0:fd:89:5c:
b6:c0:91:d7:21:e5:aa:ef:8c:0e:08:8b:48:8f:17:
66:7f:e2:f4:cf:eb:e1:b7:d3:06:74:05:69:9d:38:
39:99:03:0e:0b:36:32:3c:9c:b6:67:0e:58:c4:9f:
a4:0e:48:c5:e9:57:46:c1:43:2e:42:2a:09:b4:14:
ca:d4:2c:69:a9:b9:36:05:10:7e:31:02:28:05:72:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:25:BF:FF:F4:46:3A:91:0E:EB:08:8D:8C:C7:4C:2C:36:7E:3C:7D
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/qSW___RGOpEO6wiNjMdMLDZ-PH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:5::-2a10:fa80:6:ffff:ffff:ffff:ffff:ffff
2a10:fa80:f::/48
2a10:fa80:110::/44
2a10:fa80:2000::/36
2a10:fa81:f00::/40
2a10:fa81:1500::/40
2a10:fa81:2100::/40
2a10:fa81:2943::/48
Signature Algorithm: sha256WithRSAEncryption
17:a9:a6:74:67:b0:e3:81:73:7c:31:8a:67:9b:95:d6:37:dd:
4e:23:76:af:81:4c:3b:28:e3:af:22:0f:68:da:64:2e:19:2b:
af:03:4b:09:48:ca:de:c5:52:b5:c1:a0:e7:ba:d2:26:52:57:
49:fc:28:6a:3a:2b:c7:61:d5:e5:21:4a:3d:3c:2f:ec:92:9d:
58:ab:2a:20:37:37:80:e1:40:f4:2d:c7:02:2b:c0:c0:0a:7c:
52:d7:47:28:e6:39:b7:59:50:46:c9:28:bb:05:a2:ee:44:9b:
88:a6:90:3d:eb:b1:6a:66:7b:97:d4:42:27:19:9e:b1:14:fa:
44:cb:00:c7:a4:6f:14:7e:48:8e:dc:6c:0b:1c:b8:83:24:94:
7b:5e:92:aa:86:dc:3e:38:ea:50:b0:97:20:35:0d:3a:4c:5c:
01:b3:71:0d:3f:74:a0:84:1e:1b:ca:e9:e9:9f:bb:d3:e1:57:
a5:62:24:f5:c7:94:ff:b1:a9:d4:6a:44:b3:f5:2b:e2:59:fe:
61:46:9e:4e:56:72:e2:2d:36:7a:b9:cf:d0:d5:0b:c5:93:ad:
1b:e5:00:20:37:14:66:ed:a6:59:cc:7c:3a:cc:78:50:9c:26:
dd:fe:aa:cd:0e:8b:84:f9:ac:16:b6:e6:68:3d:f0:09:0b:5b:
13:72:c9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:15:54 2026 by rpki-client