Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/4lpoPyc54CspjmK6yCSI59PYsg4.roa
File: 4lpoPyc54CspjmK6yCSI59PYsg4.roa (raw, json)
Hash identifier: WIEWYeSSvuiv2IoFrZniwYnkQw1IZWIvIhMEb8JojCc=
Subject key identifier: E2:5A:68:3F:27:39:E0:2B:29:8E:62:BA:C8:24:88:E7:D3:D8:B2:0E
Certificate issuer: /CN=a908487a0d7f4c6228d0dcc129a2a8320db8dbf1
Certificate serial: 01A167DD3B0DB16C3DD13FBA816A75D00203
Authority key identifier: A9:08:48:7A:0D:7F:4C:62:28:D0:DC:C1:29:A2:A8:32:0D:B8:DB:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQhIeg1_TGIo0NzBKaKoMg242_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/4lpoPyc54CspjmK6yCSI59PYsg4.roa
Signing time: Fri 23 Oct 2026 08:25:14 +0000
ROA not before: Fri 23 Oct 2026 08:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218479
IP address blocks: 2a0d:f906::/44 maxlen: 44
2a0d:f906::/48 maxlen: 48
2a0d:f906:1::/48 maxlen: 48
2a0d:f906:2::/48 maxlen: 48
2a0d:f906:3::/48 maxlen: 48
2a0d:f906:4::/48 maxlen: 48
2a0d:f906:5::/48 maxlen: 48
2a0d:f906:6::/48 maxlen: 48
2a0d:f906:7::/48 maxlen: 48
2a0d:f906:8::/48 maxlen: 48
2a0d:f906:9::/48 maxlen: 48
2a0d:f906:a::/48 maxlen: 48
2a0d:f906:b::/48 maxlen: 48
2a0d:f906:c::/48 maxlen: 48
2a0d:f906:d::/48 maxlen: 48
2a0d:f906:e::/48 maxlen: 48
2a0d:f906:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQhIeg1_TGIo0NzBKaKoMg242_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:dd:3b:0d:b1:6c:3d:d1:3f:ba:81:6a:75:d0:02:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a908487a0d7f4c6228d0dcc129a2a8320db8dbf1
Validity
Not Before: Oct 23 08:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e25a683f2739e02b298e62bac82488e7d3d8b20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:63:62:4d:d9:01:74:8e:38:02:c1:c4:b6:
e0:85:92:b9:23:30:f3:d7:84:21:7b:8d:4e:19:e6:
7d:98:fe:e0:e2:6c:8a:c0:b6:fe:18:7b:ef:15:53:
78:03:79:1b:77:6f:9b:85:21:a1:a7:ac:b1:1c:9e:
79:f7:77:06:e3:c4:22:bb:95:2e:15:5b:ae:9d:94:
fe:aa:6f:93:98:1a:99:50:c9:88:c7:fe:c7:b2:10:
18:dd:51:af:e1:61:5f:81:78:1d:9e:e9:fc:86:93:
c7:00:db:5d:e0:26:38:a5:32:85:9d:fd:15:04:3e:
fb:59:ec:c4:8f:f2:6f:7f:94:60:c9:c5:62:fb:e0:
a6:e8:48:55:dc:e3:33:86:52:6a:1d:05:a3:a7:ce:
79:b8:63:a9:2d:28:22:9e:76:37:81:5a:c9:2d:bd:
9d:10:16:74:95:00:6e:63:d1:b0:d1:92:47:02:88:
43:80:1e:5f:81:b6:68:6e:07:6d:49:31:ee:c6:45:
3f:b7:c0:93:e2:92:81:b9:61:1e:07:c6:38:f9:1d:
e5:e4:da:d2:e6:4d:97:0c:1c:fe:5d:0d:bf:fb:43:
6c:6e:30:42:b8:3c:49:f5:60:c7:24:c4:b8:14:97:
8f:58:09:02:2e:6a:39:16:fd:9a:e7:8c:00:87:ea:
2b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5A:68:3F:27:39:E0:2B:29:8E:62:BA:C8:24:88:E7:D3:D8:B2:0E
X509v3 Authority Key Identifier:
keyid:A9:08:48:7A:0D:7F:4C:62:28:D0:DC:C1:29:A2:A8:32:0D:B8:DB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQhIeg1_TGIo0NzBKaKoMg242_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/4lpoPyc54CspjmK6yCSI59PYsg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f906::/44
Signature Algorithm: sha256WithRSAEncryption
a1:12:84:81:a1:d8:cd:ab:5a:1f:ff:4b:56:a3:87:a0:1a:a7:
6f:30:06:0c:3f:55:f9:ba:cb:d7:37:78:95:66:ce:ca:e4:20:
f9:98:01:ed:6a:84:c3:44:a1:c1:0a:14:c9:e5:ed:5f:cb:56:
e9:cf:13:e7:53:23:82:f5:50:95:9a:d4:ec:8f:10:58:3e:c5:
d4:3e:3e:6b:59:e0:14:ec:72:e9:93:9e:c7:d1:c4:07:8e:83:
2f:0b:32:77:47:36:0e:ef:e8:73:26:fa:44:a7:63:4d:8b:b2:
e3:f0:80:42:f1:fe:e8:6e:52:0f:39:d9:e3:67:26:97:ab:8a:
93:4c:2b:0f:55:dd:2d:c1:1e:24:cc:11:06:60:fd:4f:f6:af:
cf:62:32:01:70:b3:d2:cf:c6:2c:ec:b5:e4:fc:3c:15:98:99:
5b:78:06:35:1c:a4:27:28:dd:7c:76:81:21:0d:9c:dc:6c:29:
c4:88:7e:ed:6c:24:20:c3:ad:d9:82:06:27:a5:60:64:da:20:
4e:c1:aa:d4:9b:b9:f2:86:84:e4:8e:ba:c3:cc:e6:83:5e:19:
fa:cb:1a:b4:0b:fc:29:25:49:27:2b:62:7e:4a:d2:55:1a:11:
05:9d:ab:8f:21:03:2b:bc:b4:7e:0b:8e:cf:70:f6:ac:3c:5e:
77:5d:2d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:36:14 2026 by rpki-client