Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/4a0yDVcuQM30Bp2hAQq77O8Dn58.roa
File: 4a0yDVcuQM30Bp2hAQq77O8Dn58.roa (raw, json)
Hash identifier: guVMjyqpcdVVIuh9vCcyEy34+90Y1Bla/SWOuYKSozs=
Subject key identifier: E1:AD:32:0D:57:2E:40:CD:F4:06:9D:A1:01:0A:BB:EC:EF:03:9F:9F
Certificate issuer: /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial: 01A061159831CEF9AE6114C7E778E4355405
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/4a0yDVcuQM30Bp2hAQq77O8Dn58.roa
Signing time: Wed 02 Sep 2026 07:46:40 +0000
ROA not before: Wed 02 Sep 2026 07:46:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218805
IP address blocks: 2a14:f705:c876::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:15:98:31:ce:f9:ae:61:14:c7:e7:78:e4:35:54:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Validity
Not Before: Sep 2 07:46:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1ad320d572e40cdf4069da1010abbecef039f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:73:75:95:17:1f:31:5e:63:fc:4d:aa:38:b8:
a9:7d:c9:e1:01:11:6a:51:25:bd:cd:fc:40:92:07:
47:62:c4:8e:0d:e8:71:99:5e:df:09:a6:60:80:f3:
8e:65:ef:0a:5d:43:46:1f:f1:70:a2:04:d0:6d:5f:
0a:e5:97:80:c4:95:46:b2:71:ea:2e:f9:3b:45:67:
fa:76:e2:50:fd:12:50:2f:fc:dc:79:03:63:af:11:
d4:ef:8d:b2:c6:c9:9d:c4:04:8d:53:7a:53:7d:33:
ca:57:fe:77:61:f6:71:45:7f:3a:37:7d:8f:e7:0f:
57:7e:d5:e0:37:85:1c:fe:f1:f0:10:d0:8e:09:79:
dc:fb:0f:f4:fd:80:4f:ca:2c:9a:3a:53:e7:ff:5d:
43:b6:6b:91:c2:00:38:84:99:f0:42:96:91:54:4f:
cd:58:22:fe:d2:7c:8d:c2:51:04:e0:55:e1:59:76:
35:67:50:3e:86:ae:38:1c:dd:7c:62:27:76:32:d6:
7f:4b:46:06:e7:9a:04:92:30:87:9b:72:8a:88:e5:
ec:16:b1:75:88:d7:11:f0:8f:15:40:d0:32:00:b7:
e5:b0:c9:25:cf:ad:ea:12:b4:d7:76:86:c1:eb:d6:
49:5a:2e:f2:c3:be:98:8f:97:09:9e:93:24:ae:e1:
08:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AD:32:0D:57:2E:40:CD:F4:06:9D:A1:01:0A:BB:EC:EF:03:9F:9F
X509v3 Authority Key Identifier:
keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/4a0yDVcuQM30Bp2hAQq77O8Dn58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:f705:c876::/48
Signature Algorithm: sha256WithRSAEncryption
25:cd:38:65:73:15:24:cc:f0:57:c4:cf:a2:29:7a:da:78:b2:
e7:7f:b7:e3:1f:fd:6e:7c:53:6c:34:b7:c8:bf:6c:f1:dd:91:
e2:db:93:5e:ee:d8:36:5f:fd:9c:9e:79:79:61:13:d3:70:bd:
b8:5c:c8:cb:9e:0b:01:b9:63:47:76:55:6d:86:76:95:82:d9:
ac:bc:86:ef:3d:3c:d4:cf:6e:bd:17:ca:18:14:e7:55:d7:71:
d7:4a:09:30:bf:d5:a0:a1:ca:ec:73:01:4e:34:39:70:60:be:
2b:1b:63:0f:40:9c:cb:0b:05:9e:a6:33:43:57:19:8e:a4:8f:
15:7a:5d:7d:e0:0d:3f:09:df:c8:8d:a5:5b:51:0a:7e:53:d2:
b2:77:c8:4b:d8:b8:5b:0a:2a:ae:c6:96:3c:00:5f:c5:d7:eb:
ce:92:78:65:b2:99:f6:d2:55:88:e7:91:dc:5a:1d:22:63:b7:
b3:97:91:36:40:8a:83:4e:8f:99:52:8d:2a:b6:d0:68:00:86:
7f:2f:74:47:b8:91:71:bf:10:1d:8d:3a:d8:93:44:0a:b7:8e:
c6:07:cd:d0:3a:e8:a0:80:04:5c:61:c4:21:26:0f:2a:7b:ea:
d8:fb:47:78:82:1b:f3:36:1d:f3:22:5f:70:7d:a3:f7:c5:71:
74:7b:00:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:54:20 2026 by rpki-client