Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/aVfiDdiO3_7xVwpchOesrdpV8Ec.roa
File: aVfiDdiO3_7xVwpchOesrdpV8Ec.roa (raw, json)
Hash identifier: +pbamB9cvdk7zKzg0rdrCzQOvcNcMcB6drbK+uIDsl4=
Subject key identifier: 69:57:E2:0D:D8:8E:DF:FE:F1:57:0A:5C:84:E7:AC:AD:DA:55:F0:47
Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial: 01A0D39814562D175551D609EC8BA1546EDA
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/aVfiDdiO3_7xVwpchOesrdpV8Ec.roa
Signing time: Thu 24 Sep 2026 13:25:54 +0000
ROA not before: Thu 24 Sep 2026 13:25:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215467
IP address blocks: 2a10:e0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.mft
rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:98:14:56:2d:17:55:51:d6:09:ec:8b:a1:54:6e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Validity
Not Before: Sep 24 13:25:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6957e20dd88edffef1570a5c84e7acadda55f047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:29:bd:6d:13:fe:8c:08:4d:25:12:fa:fb:
18:c8:f6:8e:5b:ca:fd:1b:e2:6f:8c:eb:d7:24:4a:
ef:5d:01:b2:2b:6a:e1:35:fd:29:bf:22:42:37:37:
ff:c8:e3:92:2e:68:fe:c3:34:77:90:d7:a7:4c:cf:
d5:fb:7f:27:15:cf:05:d7:f1:54:f6:41:25:60:01:
93:27:bb:43:19:4c:ce:85:7c:72:11:d9:fd:a1:28:
e4:8a:04:27:09:45:ad:8f:79:cf:05:b5:72:57:0c:
4e:4d:46:f9:a8:0b:30:1a:b4:98:27:03:8d:bc:67:
69:44:90:6d:d1:68:98:5b:12:80:f0:04:fc:95:de:
26:0d:f3:8a:d8:bb:92:80:98:7b:97:a2:d5:b9:79:
de:5e:7e:df:75:ac:f1:08:8f:c2:9f:98:04:11:d3:
45:e6:2e:b1:79:46:4e:09:04:5a:50:41:52:29:f6:
dc:34:a3:71:2c:b1:5f:85:d6:10:cb:16:05:40:4c:
ae:ff:61:1c:b1:d5:05:a1:05:7c:d0:c1:86:96:bb:
ad:64:50:de:bb:f5:a9:75:6b:68:1f:bb:0c:f2:b5:
df:5d:c2:b5:61:3c:e7:26:5d:1f:4f:3c:9a:ab:8a:
bb:47:ea:ff:71:11:04:eb:96:66:19:95:57:5c:a2:
df:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:57:E2:0D:D8:8E:DF:FE:F1:57:0A:5C:84:E7:AC:AD:DA:55:F0:47
X509v3 Authority Key Identifier:
keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/aVfiDdiO3_7xVwpchOesrdpV8Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:e0c0::/48
Signature Algorithm: sha256WithRSAEncryption
77:b8:b6:13:4e:94:b7:39:3e:d0:54:92:f1:d9:aa:f6:2b:a8:
5b:9c:bf:c1:d4:67:54:e2:f7:cd:f4:d0:75:1e:90:22:51:3b:
0f:9a:c1:60:29:fb:c8:e1:a7:aa:63:a2:b1:7d:07:3a:ca:ae:
78:48:c4:34:16:46:64:f7:86:d4:68:7c:fc:97:65:be:a7:33:
89:92:ec:1a:3c:1d:42:2c:a9:09:1e:da:d7:41:48:81:33:9c:
e0:4a:88:5b:a1:11:ed:03:f8:f6:d3:cc:d6:b2:d2:ea:a5:f4:
e1:d2:27:74:70:c3:75:fa:96:c8:b2:fe:8c:81:71:26:f9:09:
c3:d0:aa:87:49:5e:d3:a8:a8:c6:75:08:bf:78:a6:cf:02:e2:
1b:ca:2e:75:14:bb:2e:8e:06:92:51:35:e7:1e:ad:db:21:92:
4d:b3:1d:35:aa:11:71:eb:d4:16:2c:17:f2:30:5e:79:69:44:
86:12:c3:50:ff:fa:24:97:69:c6:98:30:f3:77:b3:01:c1:1a:
50:04:37:58:37:b3:b8:1e:e7:62:9f:ca:37:9d:1e:a2:5b:39:
8a:ef:ad:68:08:78:09:3c:ea:6d:31:d6:e9:99:f7:a5:3b:9e:
f9:ec:ed:e1:c0:29:a6:94:91:56:71:03:b9:1f:4f:7f:7c:d1:
25:b6:59:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:47:23 2026 by rpki-client