Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/rq3fkhz4OoDKXquo3uR_D-6vC1w.roa
File: rq3fkhz4OoDKXquo3uR_D-6vC1w.roa (raw, json)
Hash identifier: 73V+DII7r+St6LpEvqvSyy8+t1cfvDonaj5KSz7KD+4=
Subject key identifier: AE:AD:DF:92:1C:F8:3A:80:CA:5E:AB:A8:DE:E4:7F:0F:EE:AF:0B:5C
Certificate issuer: /CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
Certificate serial: 019D96C92F60ECD31399286B7E405AB69873
Authority key identifier: 2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/rq3fkhz4OoDKXquo3uR_D-6vC1w.roa
Signing time: Thu 16 Apr 2026 14:54:20 +0000
ROA not before: Thu 16 Apr 2026 14:54:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198834
IP address blocks: 2001:678:124c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:c9:2f:60:ec:d3:13:99:28:6b:7e:40:5a:b6:98:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c2d883449f67ad4709d5cabb406ea8bc3873421
Validity
Not Before: Apr 16 14:54:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aeaddf921cf83a80ca5eaba8dee47f0feeaf0b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f0:14:8d:48:c2:70:30:81:cf:24:23:78:e3:
4d:ea:a1:5c:27:b8:9a:61:59:40:26:a7:a2:84:bf:
e4:07:39:6d:f6:3f:d2:86:3d:1e:a4:06:b5:21:47:
35:ba:93:9a:d7:bf:4f:0b:15:85:34:98:80:10:c3:
96:bd:c6:1b:33:ed:92:d2:8e:38:27:ec:02:3a:42:
f4:62:e4:d7:12:5f:fa:c2:57:87:f2:fc:df:d1:6e:
c1:07:31:c3:87:26:50:da:65:bc:19:01:e4:56:a4:
c4:09:f1:89:8f:12:d3:c7:31:20:32:10:1a:1f:f5:
4b:7b:7f:4b:d7:b6:65:aa:a9:7d:0d:b7:97:11:f7:
01:07:8a:96:fa:41:85:4c:09:f4:cb:d6:fb:fe:71:
54:28:cf:b5:b5:38:ca:e1:83:2f:ae:37:32:7c:5e:
10:79:2d:14:f2:ea:7f:c7:7d:94:36:71:23:0d:6c:
c8:46:14:93:f2:57:af:6c:d7:a7:b1:95:a4:14:0c:
85:4e:5a:be:0b:84:35:1f:28:58:98:b4:1b:26:18:
f6:73:09:33:79:de:d2:14:65:3f:0e:75:42:00:b9:
65:f4:64:0f:34:e2:bf:d4:12:0f:91:10:2a:b0:b7:
a0:b1:b6:09:c3:2c:c4:5d:7b:1e:40:41:ef:52:d2:
6b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AD:DF:92:1C:F8:3A:80:CA:5E:AB:A8:DE:E4:7F:0F:EE:AF:0B:5C
X509v3 Authority Key Identifier:
keyid:2C:2D:88:34:49:F6:7A:D4:70:9D:5C:AB:B4:06:EA:8B:C3:87:34:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LC2INEn2etRwnVyrtAbqi8OHNCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/rq3fkhz4OoDKXquo3uR_D-6vC1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dbe8a3-30fb-4dfe-9ffd-1234aecd513e/1/LC2INEn2etRwnVyrtAbqi8OHNCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:124c::/48
Signature Algorithm: sha256WithRSAEncryption
1c:ea:ce:93:f2:3c:e8:e4:fc:a1:ee:60:bd:df:40:78:5a:78:
7d:d2:16:56:c6:75:25:88:5a:45:bd:69:ca:5e:be:2b:05:82:
dd:45:8e:68:b7:02:d2:ef:21:e0:ae:25:e0:52:2d:5d:44:04:
82:1f:94:93:6c:d1:1a:5f:c8:5d:8d:5b:b1:a2:30:45:3b:81:
16:3f:d0:03:67:b4:04:8c:b1:e6:38:24:2c:c0:fa:c5:1c:37:
d5:85:26:9f:e1:86:d6:7a:bc:ec:58:25:03:47:64:68:b3:4a:
77:ac:0c:39:25:59:16:2a:be:d4:fb:f8:6a:9b:77:f4:65:5a:
ef:ea:1d:6c:44:84:ec:6a:08:19:a1:c2:8e:68:08:b9:8f:d4:
f6:c7:49:06:b4:78:51:0e:67:b4:fc:4e:e4:e9:91:d2:11:1c:
22:03:d0:ac:a2:07:86:0e:22:a4:3d:43:ab:7b:ea:34:86:73:
6e:e2:c7:3c:94:96:2a:bc:71:b5:f8:a4:0e:fe:cb:a5:e1:58:
6d:f0:9e:da:13:56:c3:40:51:0f:24:ea:16:15:4c:6e:19:d2:
fe:e2:20:4d:10:10:3c:b2:78:09:3b:0d:00:28:4e:09:d3:09:
39:1d:41:5d:73:5f:11:7f:b6:96:18:c4:31:5e:84:e4:fe:cf:
6c:d2:74:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:40:31 2026 by rpki-client