Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/fNJHOI_npL-WTGLoYfT_nf8Tb6E.roa
File: fNJHOI_npL-WTGLoYfT_nf8Tb6E.roa (raw, json)
Hash identifier: mFkaDrlFV08Av+1m9vFJTRA6w6Z9IBsStwY7QqmS/gc=
Subject key identifier: 7C:D2:47:38:8F:E7:A4:BF:96:4C:62:E8:61:F4:FF:9D:FF:13:6F:A1
Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial: 01A13E9F5DBB7455B97F925440CA8100F714
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/fNJHOI_npL-WTGLoYfT_nf8Tb6E.roa
Signing time: Thu 15 Oct 2026 08:13:13 +0000
ROA not before: Thu 15 Oct 2026 08:13:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43902
IP address blocks: 2a11:4141:2001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 02:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:9f:5d:bb:74:55:b9:7f:92:54:40:ca:81:00:f7:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Validity
Not Before: Oct 15 08:13:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cd247388fe7a4bf964c62e861f4ff9dff136fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2b:15:e8:99:b0:c6:b2:36:ae:fb:ca:0c:77:
df:cb:b0:6e:2c:b6:0d:07:52:15:31:1d:6b:9c:ca:
e9:db:ba:21:e2:c5:2f:6d:ef:4d:3c:92:2e:d6:07:
88:e8:bc:eb:4f:fa:e6:77:91:0e:9b:07:89:11:40:
5e:18:3f:83:40:e5:9a:40:4b:1b:df:a9:b9:0f:a6:
b3:6f:bd:d8:1d:d2:84:f3:d5:90:c0:fe:5a:c4:a7:
91:7c:04:54:d0:64:11:82:dd:6a:0f:dc:3a:cc:d4:
ad:5f:2a:89:37:f7:59:84:e3:be:ba:cd:b0:ff:18:
ae:44:85:2d:f1:1d:83:d9:7e:74:42:92:7c:50:73:
50:15:58:0a:2c:fa:b5:9c:17:02:e7:f7:ab:3c:97:
5f:57:d3:71:67:4a:e9:9c:05:cc:36:ef:ff:9d:29:
90:e9:cb:4b:f7:20:3a:4c:fb:5d:b3:55:aa:78:aa:
0f:1d:c1:b7:43:02:80:f8:ba:4f:0f:4b:de:9f:45:
c1:32:46:a5:87:19:58:ff:0d:bc:36:60:e2:da:b2:
38:48:7f:0b:99:ef:3a:52:61:a2:65:d8:bc:f5:d4:
2e:48:f6:98:be:05:c3:33:a6:ed:19:e6:32:1b:dc:
ed:24:b9:76:29:57:3e:67:e5:46:e8:cd:57:61:f6:
e5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D2:47:38:8F:E7:A4:BF:96:4C:62:E8:61:F4:FF:9D:FF:13:6F:A1
X509v3 Authority Key Identifier:
keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/fNJHOI_npL-WTGLoYfT_nf8Tb6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4141:2001::/48
Signature Algorithm: sha256WithRSAEncryption
28:68:03:60:ee:06:b2:88:a3:ed:82:68:bd:74:64:66:b5:0d:
62:b7:ae:ec:83:45:67:41:4c:41:0f:3e:a4:78:f1:ed:97:28:
f9:52:7e:31:22:36:89:58:3e:7f:c1:26:d0:ab:1b:70:4a:d3:
4c:3c:cd:e3:86:a4:bc:a9:72:72:24:8d:6a:47:45:67:14:88:
7b:ff:00:a6:53:78:e8:17:ea:00:5a:cb:30:56:6e:57:cc:74:
6d:e8:5b:8b:f4:72:05:35:cf:89:9c:10:68:45:4f:e0:b8:2d:
10:92:22:4d:ff:90:61:30:6b:cc:23:71:54:98:77:23:e8:de:
0f:c6:58:06:62:a3:8a:59:58:a4:e2:58:01:3a:8e:20:89:b7:
d9:3b:06:10:6c:af:da:3e:76:85:4d:bd:21:f2:24:45:1e:c9:
a0:21:bc:4f:4b:4b:e4:bc:ee:db:e1:1b:96:1b:84:59:66:7c:
89:f0:82:cd:36:6c:75:92:4e:f2:04:9f:fc:d8:d3:77:a8:84:
be:92:88:67:bb:b5:4d:33:b1:06:d5:09:3d:f3:f3:78:98:34:
72:ef:63:16:69:ab:6c:8e:b5:58:ad:9a:09:95:0c:03:b8:a1:
82:b6:0e:1b:70:f9:da:83:5c:3d:b5:ed:db:40:95:6a:aa:39:
c6:6a:36:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 11:11:53 2026 by rpki-client