Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/1d-v5UPcBJhyCd2pyPy5E0gynEw.roa
File: 1d-v5UPcBJhyCd2pyPy5E0gynEw.roa (raw, json)
Hash identifier: 0Ks7OWy4fQ6txceig4Bqr/8jiGLEXTtFfCjk7QRIjoA=
Subject key identifier: D5:DF:AF:E5:43:DC:04:98:72:09:DD:A9:C8:FC:B9:13:48:32:9C:4C
Certificate issuer: /CN=a908487a0d7f4c6228d0dcc129a2a8320db8dbf1
Certificate serial: 01A080FA446AE599B4C312FCA453C2AB0165
Authority key identifier: A9:08:48:7A:0D:7F:4C:62:28:D0:DC:C1:29:A2:A8:32:0D:B8:DB:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQhIeg1_TGIo0NzBKaKoMg242_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/1d-v5UPcBJhyCd2pyPy5E0gynEw.roa
Signing time: Tue 08 Sep 2026 12:24:40 +0000
ROA not before: Tue 08 Sep 2026 12:24:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218744
IP address blocks: 2a0d:f900::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQhIeg1_TGIo0NzBKaKoMg242_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:fa:44:6a:e5:99:b4:c3:12:fc:a4:53:c2:ab:01:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a908487a0d7f4c6228d0dcc129a2a8320db8dbf1
Validity
Not Before: Sep 8 12:24:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5dfafe543dc04987209dda9c8fcb91348329c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:67:b8:72:43:0a:19:f7:62:cc:cc:c1:ac:c3:
de:1f:1a:ae:63:24:79:86:b3:a9:35:c5:41:4d:56:
ed:86:3d:e6:29:31:4e:df:e6:9e:98:64:e6:15:4d:
c2:85:f9:44:cb:47:3b:d5:58:04:e0:66:2e:26:db:
1a:cd:2e:42:b8:c2:66:0e:7d:03:73:f9:03:60:00:
e8:ec:c7:99:79:dd:16:99:12:fe:a6:cb:8d:76:9e:
f3:ff:d8:78:dc:36:e0:fe:76:01:ea:fe:b4:a4:be:
73:81:cd:fa:d8:ce:dd:63:d1:20:98:7e:81:f5:5c:
82:71:72:1e:c6:77:bb:b6:ea:2a:7f:1f:09:63:e9:
a2:fa:0b:d3:9d:c8:d6:a9:87:14:2b:28:4e:ed:d1:
46:c1:d4:12:f9:69:42:ea:6e:4c:9e:84:e0:ba:77:
53:88:fd:35:16:93:91:a0:b8:e4:37:ae:63:62:e6:
9f:92:81:37:48:e7:e5:47:f0:78:53:7e:64:a1:a6:
ee:ba:d5:20:b6:95:90:95:1b:48:32:71:2a:dd:cd:
16:9d:50:4f:3e:b4:3f:96:5f:01:8a:ab:93:80:80:
d2:e9:86:bd:de:d2:85:b0:f3:c0:ad:fa:32:9a:88:
fc:80:05:7d:bc:8f:64:e0:20:80:60:7d:91:68:80:
36:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DF:AF:E5:43:DC:04:98:72:09:DD:A9:C8:FC:B9:13:48:32:9C:4C
X509v3 Authority Key Identifier:
keyid:A9:08:48:7A:0D:7F:4C:62:28:D0:DC:C1:29:A2:A8:32:0D:B8:DB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQhIeg1_TGIo0NzBKaKoMg242_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/1d-v5UPcBJhyCd2pyPy5E0gynEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f900::/48
Signature Algorithm: sha256WithRSAEncryption
79:f2:65:38:77:27:f8:65:10:77:73:b6:e2:24:8c:04:19:64:
2c:fd:b4:db:a8:4c:c4:44:f7:e2:5c:6e:b7:4a:93:f0:30:b0:
7e:65:85:7c:8d:74:36:0b:42:24:1d:a2:f3:b8:1b:b1:1a:e7:
40:c8:b8:9f:a9:7d:ca:36:64:9c:b9:d8:ea:fd:78:6f:d7:30:
af:84:b0:db:8a:0c:b7:9d:35:cf:18:8e:81:9e:2c:c4:34:9f:
02:36:a1:9d:0c:60:0b:4e:ea:5c:41:c2:16:7f:34:b9:63:40:
08:95:c6:7c:50:6a:e6:8e:64:a9:66:6b:c3:4b:71:6f:29:6e:
d3:d6:18:fd:ed:97:83:dc:12:8b:b0:6a:4d:0b:f7:e8:98:b4:
a9:9f:28:b6:2c:71:e5:97:77:81:11:83:2a:32:1e:65:a2:64:
51:fc:5a:53:52:15:40:2d:46:f4:9d:c7:d2:c1:62:f2:87:8c:
b6:f7:65:fa:72:22:55:2e:0c:57:c0:bd:fd:b6:43:79:3e:b2:
e6:52:aa:03:d6:10:14:51:5e:25:ce:25:63:bf:4b:c3:3a:11:
9e:9b:4c:05:7f:33:8b:64:02:e5:34:8a:bf:af:b1:27:50:c7:
9f:91:ac:20:32:4f:0a:6a:92:98:3c:28:d4:8a:ac:ad:0b:16:
30:9d:1a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:02:52 2026 by rpki-client