Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/2oozdiFIvr6xRnNbn88EqYP_iVs.roa
File: 2oozdiFIvr6xRnNbn88EqYP_iVs.roa (raw, json)
Hash identifier: iod0xGXCKstshz9xrVnXQt4iJRfFbwyZriHgELQ4oc4=
Subject key identifier: DA:8A:33:76:21:48:BE:BE:B1:46:73:5B:9F:CF:04:A9:83:FF:89:5B
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01A0C220D71DBB3011CAD3C04AB2F217961A
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/2oozdiFIvr6xRnNbn88EqYP_iVs.roa
Signing time: Mon 21 Sep 2026 04:02:07 +0000
ROA not before: Mon 21 Sep 2026 04:02:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219001
IP address blocks: 2a0b:1f02::/40 maxlen: 40
2a0b:1f02:100::/40 maxlen: 40
2a0b:1f02:200::/40 maxlen: 40
2a0b:1f02:300::/40 maxlen: 40
2a0b:1f02:400::/40 maxlen: 40
2a0b:1f02:500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:20:d7:1d:bb:30:11:ca:d3:c0:4a:b2:f2:17:96:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Sep 21 04:02:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da8a33762148bebeb146735b9fcf04a983ff895b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:90:83:73:51:29:8f:c7:cf:50:50:e9:cb:
50:47:07:e4:78:3e:ee:8f:36:b8:8e:17:01:f7:cd:
ce:26:b4:70:1b:87:54:9e:ca:0e:9b:0d:90:a6:1a:
9b:bb:e8:0f:cf:04:bd:7c:36:94:d0:c6:7f:ed:7f:
df:2b:1c:56:03:0b:1d:43:b8:83:00:d3:f9:a8:82:
c0:c3:4a:42:df:32:e5:c4:de:5f:e9:05:19:32:71:
88:da:38:81:57:8e:3b:16:f0:06:d8:f4:fe:b8:18:
17:13:ed:b4:04:3d:fa:0c:cc:1a:a7:6c:02:80:92:
e1:31:ca:98:7b:de:e6:3e:e3:5e:2f:01:30:e3:38:
f6:8e:f6:ff:75:80:fc:43:25:b6:a9:8a:05:3e:f5:
b9:7e:85:8c:74:1b:04:c8:6e:62:9b:14:eb:f1:6f:
66:26:96:5e:e5:1e:93:95:1c:32:1b:23:23:8a:c2:
a6:99:c6:43:29:e7:8a:13:ad:44:62:36:c7:dc:05:
0b:65:d5:2a:a2:5d:ce:34:1d:54:44:12:fa:15:cc:
e4:73:4c:b2:ed:a0:ec:52:c7:3e:bb:a4:ca:f2:00:
3d:a4:e6:60:ec:7c:30:a1:c7:52:78:d5:0b:eb:ca:
2f:d3:d8:57:9b:76:c7:67:27:b7:5c:49:d3:a9:1a:
1e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8A:33:76:21:48:BE:BE:B1:46:73:5B:9F:CF:04:A9:83:FF:89:5B
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/2oozdiFIvr6xRnNbn88EqYP_iVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:1f02::-2a0b:1f02:5ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
86:82:e3:b1:17:c5:21:5a:1f:51:f4:a5:1e:4c:b1:78:20:29:
89:d3:6b:56:5d:93:8b:12:ba:21:9c:bc:f1:7b:6a:45:0f:5b:
b6:9c:af:fd:b7:70:38:e4:de:a7:e8:5d:6e:14:23:9e:e2:5c:
b3:71:64:61:ff:bc:3d:96:13:83:71:9c:d1:98:f7:a1:53:dd:
45:87:d4:6f:1d:49:f0:55:6d:91:ea:c9:ed:72:59:f5:e7:58:
72:dd:66:1e:1c:9c:a1:b6:59:e1:95:c8:5c:27:c4:c8:b3:19:
4a:9b:f1:6f:0c:c3:3b:13:d0:76:fa:af:75:c5:e8:c5:bf:22:
ec:88:87:95:d2:6b:54:0d:57:ac:93:5d:03:44:13:c4:08:9a:
b5:8f:65:7c:72:11:78:c1:71:9d:da:11:9b:f0:3d:9c:f1:af:
df:b2:d4:44:13:07:06:45:e2:13:66:ce:ca:3c:de:01:e4:94:
30:1a:34:70:d7:4f:c4:2e:bf:51:78:7f:6a:05:ad:17:d0:2c:
1a:1a:40:ab:d4:57:da:4b:5c:91:e6:a2:8b:e9:dd:b6:3e:ad:
bb:8c:1a:d6:cc:53:a3:06:23:62:a7:08:93:b4:6c:5d:b0:7a:
cf:58:e8:63:ea:56:f3:0a:e8:25:00:88:46:38:f4:24:69:b3:
d7:e0:17:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:59:30 2026 by rpki-client