Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/F3j0DS6wR1WWm7lYntYngphPs1w.roa
File: F3j0DS6wR1WWm7lYntYngphPs1w.roa (raw, json)
Hash identifier: Ye/B8sKhUCPXCevv4SfoJ2o7nJLMGjMaE4Qb575tGk4=
Subject key identifier: 17:78:F4:0D:2E:B0:47:55:96:9B:B9:58:9E:D6:27:82:98:4F:B3:5C
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 01A0AF9A68A7914AAAB4D79E4113DEC0F86F
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/F3j0DS6wR1WWm7lYntYngphPs1w.roa
Signing time: Thu 17 Sep 2026 13:42:07 +0000
ROA not before: Thu 17 Sep 2026 13:42:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213861
IP address blocks: 2a09:a501::/32 maxlen: 32
2a09:a503::/32 maxlen: 32
2a0d:fcc4::/32 maxlen: 32
2a14:a406::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:9a:68:a7:91:4a:aa:b4:d7:9e:41:13:de:c0:f8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Sep 17 13:42:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1778f40d2eb04755969bb9589ed62782984fb35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:6d:11:19:cc:03:02:5e:78:09:16:e8:c7:
81:44:f5:88:e3:79:70:6e:22:89:6e:f1:c7:8a:4f:
88:35:9f:00:a8:c3:23:0d:61:44:4b:45:22:40:ff:
b2:6e:55:e2:0c:4a:99:a1:2e:18:1f:ee:ba:58:6e:
e9:1d:67:86:dd:00:9c:82:06:d1:68:37:9c:2f:df:
54:b8:e4:4b:e8:54:0c:62:7b:39:15:56:3e:8b:ef:
2b:a0:ed:20:e8:df:43:d8:6a:d0:fc:9c:6d:e9:97:
74:9f:c4:87:a3:45:30:bb:b5:5b:5c:50:bc:1b:af:
17:76:41:bd:bd:e2:82:4c:57:98:51:86:06:5a:74:
74:eb:7f:4b:c2:aa:9c:a4:29:af:35:2f:6f:39:a7:
43:db:3b:b0:2f:57:bb:ae:28:06:da:eb:4d:6a:77:
93:50:31:98:4b:f3:23:e3:a3:38:94:75:65:5f:16:
24:b7:75:78:8a:32:e0:c7:75:6f:1d:df:07:4c:d8:
26:fe:85:5f:bc:f0:1f:58:78:11:cf:5c:8c:7a:4d:
e3:71:60:81:e0:fc:3d:20:b0:11:1b:fe:cd:90:3a:
5c:45:df:27:68:76:6a:33:c3:34:0b:28:a6:23:d0:
07:d3:6a:ad:fa:98:7a:62:16:31:aa:ad:d7:69:f4:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:78:F4:0D:2E:B0:47:55:96:9B:B9:58:9E:D6:27:82:98:4F:B3:5C
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/F3j0DS6wR1WWm7lYntYngphPs1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:a501::/32
2a09:a503::/32
2a0d:fcc4::/32
2a14:a406::/32
Signature Algorithm: sha256WithRSAEncryption
33:bc:e2:32:93:c4:7a:5f:c4:99:ae:1b:9d:7f:c6:d7:5c:e3:
cd:a1:8a:18:ab:18:32:07:cb:aa:ee:cc:18:ca:ad:8c:98:87:
84:0e:f3:d5:4d:3d:60:e7:f3:51:11:0f:e6:04:0d:ff:65:c5:
6a:80:89:ae:e6:44:28:d9:f9:9f:95:47:cc:fa:c2:05:61:86:
1d:a0:7b:ac:60:0f:13:3e:16:28:cd:6c:40:fb:e0:ca:c1:9c:
04:c5:57:e0:41:d6:e3:23:1a:08:8e:48:d0:65:b4:2f:fd:b3:
13:13:7d:4b:1e:16:b6:0a:d4:dc:20:e1:a2:1d:ff:fe:2d:eb:
30:df:62:4c:ba:49:92:1e:ff:c9:9c:64:1b:f6:b5:47:10:48:
54:d4:8f:93:0e:24:14:72:34:71:5b:80:1d:26:da:0a:b3:98:
af:a5:d6:e2:da:f1:9a:91:f7:0a:11:1a:8d:6c:f3:96:8f:f7:
2c:2f:e7:0a:53:a6:b5:60:b8:cf:db:3d:84:85:02:25:8d:e7:
25:db:54:a3:2d:05:b4:d8:57:fa:71:87:52:7c:fe:c2:e6:5f:
b5:ff:c3:19:b9:e9:db:f5:cf:a0:ad:22:99:36:1b:b5:d0:3a:
1b:df:ed:d2:ee:7e:53:7e:72:a5:f9:43:62:b9:fb:2e:ab:93:
f5:c3:46:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:28:50 2026 by rpki-client