Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/RhhybVhgxehJpyQFfu1dQiF3RZc.roa
File: RhhybVhgxehJpyQFfu1dQiF3RZc.roa (raw, json)
Hash identifier: vTXKPtYUm1UxDqfrm9GUHJ6eZM3EZfiTITZU7YFaPA8=
Subject key identifier: 46:18:72:6D:58:60:C5:E8:49:A7:24:05:7E:ED:5D:42:21:77:45:97
Certificate issuer: /CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Certificate serial: 019B7A5B5FA4B953DE8B300B403AE40E961C
Authority key identifier: 40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/RhhybVhgxehJpyQFfu1dQiF3RZc.roa
Signing time: Thu 01 Jan 2026 16:19:27 +0000
ROA not before: Thu 01 Jan 2026 16:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213052
IP address blocks: 2001:67c:10c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:5f:a4:b9:53:de:8b:30:0b:40:3a:e4:0e:96:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Validity
Not Before: Jan 1 16:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4618726d5860c5e849a724057eed5d4221774597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1b:53:13:cf:39:f9:f7:7a:eb:5f:f5:c7:20:
b2:e8:7a:25:94:bc:e4:49:c8:72:a6:4d:37:d1:5c:
e3:fd:73:f3:aa:8a:ca:26:1d:c9:48:7b:76:2d:43:
5e:ce:a3:13:15:85:dd:a3:a9:db:49:4a:f9:25:01:
0d:5d:5b:1f:fb:28:72:87:ae:72:53:b3:8e:ec:47:
ab:ad:ef:ee:0b:f2:0f:eb:33:9d:1f:e4:19:32:7e:
16:ec:43:8b:2d:2b:dd:1a:cf:29:f9:61:fc:90:2b:
f3:23:5c:f3:7b:e8:26:ff:1c:79:c8:a8:e4:9f:0b:
0c:32:f8:f3:32:d1:2f:5b:86:c9:bc:ab:3e:4d:28:
b9:90:81:0e:d1:82:55:dd:0a:1c:fe:55:84:e8:19:
c0:95:0d:b4:7a:2d:05:3c:e3:b2:d1:8d:54:46:44:
09:3a:4c:8a:59:44:73:04:73:29:3b:46:fc:1b:56:
ae:df:32:e0:d4:5b:b4:31:a9:31:f5:5d:8e:98:e0:
0e:3a:e9:c2:88:d9:a8:8f:b3:7d:49:fb:6f:78:b6:
9a:13:09:b6:1f:77:a4:d4:3c:a9:b1:b2:a6:3e:ff:
cd:a7:43:1d:8e:1a:23:8c:82:70:a0:57:19:5f:ae:
1b:6b:01:25:35:cc:b3:e6:45:e0:ea:2c:55:b6:a2:
cc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:18:72:6D:58:60:C5:E8:49:A7:24:05:7E:ED:5D:42:21:77:45:97
X509v3 Authority Key Identifier:
keyid:40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/RhhybVhgxehJpyQFfu1dQiF3RZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:10c::/48
Signature Algorithm: sha256WithRSAEncryption
04:1c:60:be:0c:ae:2c:75:fd:4a:1e:c7:ba:ad:85:57:d1:9c:
da:34:2b:a6:52:62:be:57:91:42:40:a4:0c:b3:bc:c0:cb:0f:
5b:fe:2b:0e:61:f2:b0:fd:a0:c9:79:50:76:61:15:9e:3c:39:
86:f1:bb:e3:f2:0c:d7:14:4f:01:06:a7:0d:02:1b:f5:8a:f6:
d5:54:9e:85:18:b9:53:8a:f2:70:f9:8d:34:b0:dc:9d:27:89:
04:f4:4b:e0:63:58:d1:56:5a:d6:66:60:7d:a1:12:0c:32:23:
d0:be:e3:c6:51:74:9b:81:e8:d8:bd:8c:a0:f0:c3:7b:f2:2c:
83:92:3d:91:b6:de:22:1e:5b:28:9e:6c:ab:5a:df:05:21:82:
ff:f7:30:b2:87:eb:3b:78:a5:1a:19:9b:9b:05:25:64:31:48:
d9:a1:24:8b:58:bc:15:f3:83:92:46:b2:fb:f8:b8:e2:61:76:
10:10:77:36:9d:eb:ca:dc:1d:c7:f4:ff:ec:e9:de:0c:5e:d6:
ab:0f:f3:58:50:6d:d4:c1:8d:11:6f:22:ba:9b:6b:46:74:49:
82:d5:4c:a9:45:ac:92:6c:8f:81:09:bb:0a:94:33:32:17:10:
02:66:7a:dc:34:a8:09:b6:b5:ec:4c:b7:aa:45:51:8a:e0:21:
f1:01:6a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:55:16 2026 by rpki-client