Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/U40woe4t5L3G0u-LTfcj5cxfaU8.roa
File: U40woe4t5L3G0u-LTfcj5cxfaU8.roa (raw, json)
Hash identifier: gDcGs3cvNtDcrQmnu+d2LGcZqFkPSX7n6H8BVd1x9QM=
Subject key identifier: 53:8D:30:A1:EE:2D:E4:BD:C6:D2:EF:8B:4D:F7:23:E5:CC:5F:69:4F
Certificate issuer: /CN=9e06003c5715874fdab0e31572280ef8e4e4798c
Certificate serial: 01A0629AB1F25609260AF279AF66F43E1779
Authority key identifier: 9E:06:00:3C:57:15:87:4F:DA:B0:E3:15:72:28:0E:F8:E4:E4:79:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngYAPFcVh0_asOMVcigO-OTkeYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/U40woe4t5L3G0u-LTfcj5cxfaU8.roa
Signing time: Wed 02 Sep 2026 14:51:40 +0000
ROA not before: Wed 02 Sep 2026 14:51:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202168
IP address blocks: 2a0d:ae40::/32 maxlen: 48
2a0d:ae41::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngYAPFcVh0_asOMVcigO-OTkeYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:9a:b1:f2:56:09:26:0a:f2:79:af:66:f4:3e:17:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e06003c5715874fdab0e31572280ef8e4e4798c
Validity
Not Before: Sep 2 14:51:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=538d30a1ee2de4bdc6d2ef8b4df723e5cc5f694f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:0e:d3:19:a7:eb:6c:5d:21:5c:b4:61:bb:
7b:66:83:83:1e:fe:a3:36:ee:bc:14:1b:4a:bd:ce:
38:e9:4d:af:5b:ed:b3:d7:5c:02:e7:d0:58:49:fe:
7e:dc:65:9a:83:71:a6:bb:7d:e3:ed:41:0e:9a:4d:
db:61:6f:08:ea:a5:8d:04:21:63:50:e8:83:d0:87:
0d:e7:a3:00:38:db:dc:7a:87:ff:bb:5d:f0:59:cc:
75:9f:05:ff:8e:be:3a:f3:8c:95:f0:07:2f:47:5f:
d9:0e:b5:af:d3:f8:11:3b:3a:d2:85:78:80:86:ad:
0d:46:f5:6a:f2:0b:7b:eb:4b:65:52:40:b4:b2:d2:
e2:8d:a6:72:97:ae:b8:7b:45:30:64:54:db:7f:84:
32:c2:81:2e:a3:ea:85:4a:39:87:08:3c:4b:a7:c7:
32:ae:83:2c:a1:12:07:e2:76:e6:d5:cd:b9:d7:84:
d4:95:dc:9a:41:df:61:3d:d8:95:29:0f:00:f4:0e:
5d:dd:3e:36:57:05:83:cd:54:40:5f:ce:4c:52:97:
4c:8b:53:58:bc:38:f2:c4:e6:c2:26:ab:31:0a:26:
a5:af:8b:d1:b9:fc:8b:8c:fb:98:2b:d8:37:18:44:
e7:c3:f4:0b:34:84:31:cf:c4:73:aa:71:eb:b1:5c:
26:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8D:30:A1:EE:2D:E4:BD:C6:D2:EF:8B:4D:F7:23:E5:CC:5F:69:4F
X509v3 Authority Key Identifier:
keyid:9E:06:00:3C:57:15:87:4F:DA:B0:E3:15:72:28:0E:F8:E4:E4:79:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngYAPFcVh0_asOMVcigO-OTkeYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/U40woe4t5L3G0u-LTfcj5cxfaU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/dec3f3-2b27-4643-9380-e7cf9be3080c/1/ngYAPFcVh0_asOMVcigO-OTkeYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:ae40::/31
Signature Algorithm: sha256WithRSAEncryption
5b:d2:af:db:f4:31:70:91:a4:af:07:23:a9:3a:eb:15:d3:86:
e3:6e:56:9e:5b:9b:d0:7b:bc:9e:31:b6:d2:9a:7b:ba:f4:90:
b3:e9:8c:73:cf:0b:64:54:dc:1f:a3:f5:8f:b7:ce:39:a4:da:
0c:68:85:27:0a:3a:8f:d9:67:6a:06:c1:e7:ae:98:4a:fb:24:
2e:a6:a3:37:f7:4a:19:04:99:65:4a:ed:07:f1:d6:bd:7a:90:
f2:01:e5:ba:2c:d5:84:67:1a:89:61:f8:72:61:76:b4:e7:20:
cc:39:12:5f:42:dc:c8:4a:b4:89:aa:41:0f:4f:c9:40:d0:27:
fe:e4:9f:48:36:30:cf:f8:2e:a3:98:98:56:07:d2:35:cd:ff:
21:18:fa:24:ba:1e:9e:4c:8c:2f:2e:3d:4c:53:e8:68:66:05:
8c:af:82:0b:ad:6a:85:06:0b:ca:57:17:22:f6:bb:98:64:76:
2a:f6:f6:6a:7b:68:c8:39:21:05:c6:07:0f:7d:c7:02:50:b2:
e6:64:1c:34:b0:5b:60:90:c8:58:61:28:01:3a:75:14:a2:ab:
06:6b:65:8c:cc:6c:f9:47:fb:1d:3f:7b:42:69:a0:9d:b2:99:
c4:c3:9e:a1:b2:0b:f1:9a:d7:1c:68:f0:0d:1c:3b:10:f6:7a:
ff:84:54:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:21:06 2026 by rpki-client