Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/u5CSgLCjQCqcJjbyI9taBpgkoxo.roa
File: u5CSgLCjQCqcJjbyI9taBpgkoxo.roa (raw, json)
Hash identifier: ErHFD6v5DF3TbMGI7nA5I6bGPfjcdbfhAJTY7b2Ns60=
Subject key identifier: BB:90:92:80:B0:A3:40:2A:9C:26:36:F2:23:DB:5A:06:98:24:A3:1A
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0EBA9948D6A3D7B3FBAB013E83E08FF7D
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/u5CSgLCjQCqcJjbyI9taBpgkoxo.roa
Signing time: Tue 29 Sep 2026 05:35:54 +0000
ROA not before: Tue 29 Sep 2026 05:35:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 2a10:fa80:1b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:a9:94:8d:6a:3d:7b:3f:ba:b0:13:e8:3e:08:ff:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 29 05:35:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb909280b0a3402a9c2636f223db5a069824a31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a1:c6:2d:01:04:fb:a1:0f:ad:3f:53:97:40:
ff:15:02:79:a1:cc:e9:b9:57:99:d8:bc:0b:7e:ba:
f8:60:3c:fa:80:27:78:04:80:57:d2:81:c8:27:07:
be:72:1c:f6:89:d9:c6:af:78:bd:58:33:3a:aa:da:
ad:46:f3:3d:cc:4a:53:ac:2c:e5:07:1b:26:9f:90:
9f:cd:2d:77:d7:fe:b6:d8:54:b9:57:68:a1:f4:67:
2c:28:84:f2:2e:70:e3:c5:54:0d:55:76:08:18:f6:
12:fa:aa:7c:a1:aa:d3:db:00:d0:ef:70:fb:8e:d2:
32:b5:98:04:cf:5e:30:9e:50:f1:4f:e5:61:21:8a:
4c:a4:b1:d9:a9:eb:50:41:10:4c:58:ee:40:b3:1c:
f7:cf:47:44:79:e9:95:29:dd:e0:e6:e3:c8:d3:d7:
6b:a0:94:a8:a8:1b:96:a1:fa:92:e8:b3:54:89:4a:
95:50:22:ac:dd:31:01:58:94:b1:da:37:0a:0a:e0:
45:73:b3:e2:c0:7f:78:e2:22:cc:a3:7f:50:95:1f:
06:36:30:c2:fd:50:9d:79:df:b3:d8:54:48:7c:45:
8c:76:5c:f7:78:7b:4d:51:31:8f:a3:49:dd:4e:e0:
56:f7:39:86:8d:fb:ab:7b:eb:9e:c0:64:4a:8d:48:
7a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:90:92:80:B0:A3:40:2A:9C:26:36:F2:23:DB:5A:06:98:24:A3:1A
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/u5CSgLCjQCqcJjbyI9taBpgkoxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:1b::/48
Signature Algorithm: sha256WithRSAEncryption
8e:b1:97:44:b2:16:66:54:ee:ea:3f:9a:6d:60:e9:d0:d0:08:
0b:88:43:8f:a3:b9:79:1f:4b:56:b5:d3:3c:2a:70:3c:60:5d:
f4:ff:48:08:f5:b2:45:c1:7c:61:ca:d3:0f:ea:cd:94:6a:34:
c8:21:8d:b6:cf:94:52:cd:f8:d7:6a:a8:91:55:a3:2a:64:0f:
f8:51:d3:c3:39:da:bb:93:c9:92:63:a6:b6:ee:2c:f1:2d:5c:
7e:46:6a:84:8d:56:a0:e5:5e:e3:03:ac:9f:c4:dc:c7:58:11:
2e:2b:df:de:2f:56:0a:68:06:11:95:af:6e:64:c4:4f:3e:0b:
52:63:e5:f8:99:05:ba:60:31:55:e4:ef:56:6a:a9:62:fc:31:
42:61:0d:d9:1f:63:da:1e:22:58:1c:68:2b:5b:7b:54:3e:9e:
72:c0:1f:ec:81:9b:f4:88:23:b5:cd:62:ce:56:83:e5:53:0a:
32:dc:68:67:c9:c1:f4:3f:67:25:d9:2c:03:16:a2:77:ca:96:
71:02:71:c1:f9:7e:88:8d:85:08:66:b3:1f:a6:a3:79:e9:49:
aa:62:8f:28:d6:34:6b:86:e6:31:50:2d:f0:0b:3c:7b:4b:8f:
4e:f8:f0:8f:c1:a2:4a:fb:17:cf:c5:ea:32:40:c0:6a:49:2c:
e2:d4:d5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:58:37 2026 by rpki-client