Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/2uM43vacq6UoK2hdVQ3YP5tVUi4.roa
File: 2uM43vacq6UoK2hdVQ3YP5tVUi4.roa (raw, json)
Hash identifier: cEzBty0jRSDlkvueWOUzVLVLGhhKwqqGlOQahzVX8Nk=
Subject key identifier: DA:E3:38:DE:F6:9C:AB:A5:28:2B:68:5D:55:0D:D8:3F:9B:55:52:2E
Certificate issuer: /CN=a908487a0d7f4c6228d0dcc129a2a8320db8dbf1
Certificate serial: 01A18D774342E602CEFB13AC216D9ACE4255
Authority key identifier: A9:08:48:7A:0D:7F:4C:62:28:D0:DC:C1:29:A2:A8:32:0D:B8:DB:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQhIeg1_TGIo0NzBKaKoMg242_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/2uM43vacq6UoK2hdVQ3YP5tVUi4.roa
Signing time: Fri 30 Oct 2026 15:39:25 +0000
ROA not before: Fri 30 Oct 2026 15:39:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212683
IP address blocks: 2a0d:f900:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQhIeg1_TGIo0NzBKaKoMg242_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 06:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:77:43:42:e6:02:ce:fb:13:ac:21:6d:9a:ce:42:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a908487a0d7f4c6228d0dcc129a2a8320db8dbf1
Validity
Not Before: Oct 30 15:39:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dae338def69caba5282b685d550dd83f9b55522e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b8:a6:87:0f:b7:d6:ad:8e:7b:61:0f:ee:a8:
a0:57:87:bd:a8:cf:1e:60:67:bc:e9:47:ed:4b:a2:
99:01:a7:ae:73:7f:06:5a:b5:5e:8c:81:6c:d3:19:
53:f1:6e:31:b7:48:82:4e:c7:27:31:83:d4:fe:ca:
ef:87:be:80:81:7e:68:83:98:97:73:1c:cc:2b:c8:
f3:e7:b7:f6:f7:42:87:d7:60:1b:98:9c:47:f2:ad:
bb:e1:77:5b:b2:50:76:aa:69:4e:43:ca:31:a8:14:
e9:f7:c8:e6:21:1e:9a:71:0e:a9:29:3f:01:bd:bd:
d3:5a:dd:e8:f1:ad:77:de:80:4b:f5:6f:13:a2:c5:
e2:72:98:9f:3c:fd:0c:aa:5c:38:f2:53:89:40:7b:
76:42:92:4b:c4:a3:ca:e0:9b:be:d3:9f:06:ff:b3:
9e:0d:32:3d:80:c4:1a:de:6c:94:6a:76:4b:13:f1:
48:87:11:12:9d:54:2f:91:d6:83:ab:d6:54:0f:72:
f0:d5:b4:bf:50:c1:ea:56:6e:48:37:47:d2:d8:80:
85:a3:e1:53:e6:88:48:cb:19:8b:41:2b:52:b5:4e:
8c:d3:82:4a:e1:57:13:41:f2:ae:15:0a:b2:19:68:
99:b9:43:06:f8:b9:d0:2a:c1:5f:3a:85:fb:ff:13:
4e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E3:38:DE:F6:9C:AB:A5:28:2B:68:5D:55:0D:D8:3F:9B:55:52:2E
X509v3 Authority Key Identifier:
keyid:A9:08:48:7A:0D:7F:4C:62:28:D0:DC:C1:29:A2:A8:32:0D:B8:DB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQhIeg1_TGIo0NzBKaKoMg242_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/2uM43vacq6UoK2hdVQ3YP5tVUi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f900:2::/48
Signature Algorithm: sha256WithRSAEncryption
b2:87:96:b2:2d:54:cb:ef:3e:cb:e1:de:22:33:42:c9:fe:be:
57:13:b0:68:a0:63:1d:e9:50:94:ca:0f:d8:08:03:8b:f9:c2:
3a:3e:07:2f:92:81:29:f9:c1:24:c1:c2:06:24:cc:a6:fa:da:
90:cc:76:34:b4:5f:eb:3d:e0:8d:49:21:b2:b2:6f:d1:eb:14:
b4:da:4a:f0:8d:89:3c:1f:be:23:f5:45:44:22:b3:08:de:5c:
2b:0d:45:ac:37:c3:fa:bf:6c:c1:97:c5:73:23:e2:c9:e3:49:
57:27:71:87:98:2e:0d:f4:a6:19:65:08:81:ad:9d:83:b1:2f:
f0:8e:6b:f8:91:fa:92:d9:26:44:68:58:ee:db:71:62:83:4d:
9a:5a:15:82:65:bb:5e:00:0c:94:43:3b:ae:86:36:3a:e9:3c:
86:18:e7:8a:99:c1:bb:5f:f3:e6:03:4d:ea:54:a4:92:1a:fb:
72:2c:8f:d6:89:42:33:a9:de:c2:c8:67:97:3d:db:8b:c8:db:
9b:80:2a:07:20:42:ff:f5:2e:b6:de:d4:f6:7c:8c:ce:cc:51:
58:a0:aa:e2:fe:26:64:c3:f2:f0:6e:9a:a9:3d:b4:51:64:7d:
52:30:51:1f:30:5d:6d:30:ae:fe:36:f5:a4:95:eb:56:ac:6b:
87:9e:92:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:12:56 2026 by rpki-client