Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/a73ilWUc_Nrs3Jl6BZxzTzmJLZs.roa
File: a73ilWUc_Nrs3Jl6BZxzTzmJLZs.roa (raw, json)
Hash identifier: WvDo87B2C+QVONEixLsbWJGXRyfPQL9c6V0kT+6W0SI=
Subject key identifier: 6B:BD:E2:95:65:1C:FC:DA:EC:DC:99:7A:05:9C:73:4F:39:89:2D:9B
Certificate issuer: /CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Certificate serial: 019C9A1BBC32556246BC903A547B10C3BE2E
Authority key identifier: B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/a73ilWUc_Nrs3Jl6BZxzTzmJLZs.roa
Signing time: Thu 26 Feb 2026 13:20:34 +0000
ROA not before: Thu 26 Feb 2026 13:20:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214803
IP address blocks: 2a11:5dc0:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9a:1b:bc:32:55:62:46:bc:90:3a:54:7b:10:c3:be:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Validity
Not Before: Feb 26 13:20:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bbde295651cfcdaecdc997a059c734f39892d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0f:88:57:08:3d:ca:2f:64:29:45:9e:ea:25:
7d:3b:45:08:7a:dc:0e:ab:5a:79:23:bb:4d:7f:a4:
55:d3:8f:82:0b:4e:a8:f8:28:50:6b:e6:dc:6d:d5:
75:49:f1:c9:40:4d:a1:31:18:28:a0:77:d5:43:8e:
dd:dd:75:63:ba:66:0d:0b:87:19:ce:23:74:00:37:
11:02:32:40:0a:3c:96:62:a6:89:7b:7c:ce:0e:0e:
b4:68:99:bc:ab:72:ba:3b:eb:80:e1:27:8a:7c:56:
0a:35:78:36:c3:40:ac:96:81:d7:03:62:0d:26:25:
b6:92:18:11:83:2b:f6:c4:f4:f2:ad:7a:20:c5:30:
03:9b:6a:07:c6:c0:53:92:54:67:ec:76:4d:3e:a5:
97:63:84:4e:7b:65:bc:d5:b6:c6:29:9c:66:1a:6b:
d4:32:3d:70:ff:6d:cc:ea:09:a2:fe:33:48:2a:f0:
40:5e:96:be:f1:17:65:74:74:4c:08:9c:8a:69:d6:
7f:fd:ee:66:65:2d:42:13:58:e6:a7:69:8a:f9:53:
f5:61:06:ba:5e:80:8c:c0:c0:7b:13:66:ed:0b:d1:
0e:3e:fd:79:a0:9a:e4:83:52:b4:14:b9:08:62:03:
62:98:e7:94:1e:41:77:38:b0:35:1c:2f:f3:fc:2c:
21:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BD:E2:95:65:1C:FC:DA:EC:DC:99:7A:05:9C:73:4F:39:89:2D:9B
X509v3 Authority Key Identifier:
keyid:B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/a73ilWUc_Nrs3Jl6BZxzTzmJLZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5dc0:50::/48
Signature Algorithm: sha256WithRSAEncryption
1d:1b:26:38:d1:e1:34:de:2d:2f:ce:8a:b0:10:4f:dd:16:50:
c0:eb:b8:82:1f:77:f4:9c:4e:eb:40:e8:97:df:7a:76:81:f8:
c3:84:ee:25:eb:96:b6:8b:35:65:d3:88:8f:77:d8:16:e7:b4:
e8:1f:f3:ba:b5:54:58:68:d8:9c:b6:2f:69:6b:f2:85:48:df:
44:9a:2b:38:25:14:60:3a:12:45:c8:71:26:2b:78:32:12:d1:
ec:23:a4:8e:e4:12:e5:7c:68:f0:58:8a:87:43:b8:18:9c:d2:
58:63:b2:8c:1e:73:c2:6e:25:71:0a:67:c4:63:36:33:75:90:
04:53:73:99:a5:d9:0f:fc:14:18:db:52:62:0a:9d:a6:c3:25:
31:5b:f8:72:72:63:d7:b3:d9:53:19:6f:c6:f1:9f:5c:c5:8c:
62:6e:ba:19:80:21:9c:cd:ef:fc:2c:e4:2c:d9:b7:8a:b6:8a:
6a:68:22:39:a8:70:0a:4d:ae:79:d1:44:f1:d8:e2:22:e3:28:
c5:ef:67:18:ad:c7:bf:f2:2b:31:8d:1f:e8:1e:79:4f:d5:e3:
f5:e3:d9:f6:3a:bf:21:04:78:0b:ec:c8:ab:bd:22:95:fd:e6:
1a:0d:14:65:f0:0a:d3:9f:25:49:dd:28:1d:ac:65:9e:14:c6:
78:84:36:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:05:24 2026 by rpki-client