Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/ddPF5IXwtHP8cqPDz5EJOduiQxo.roa
File: ddPF5IXwtHP8cqPDz5EJOduiQxo.roa (raw, json)
Hash identifier: DUmSyQho/F9e/s62qQAzd/gG0iMM1Y29ogzTRdGXlbg=
Subject key identifier: 75:D3:C5:E4:85:F0:B4:73:FC:72:A3:C3:CF:91:09:39:DB:A2:43:1A
Certificate issuer: /CN=54137c32249107f26b1741451cf10039380b8bc3
Certificate serial: 01A09CFF3A10F414D35A39C34F55F77726B6
Authority key identifier: 54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/ddPF5IXwtHP8cqPDz5EJOduiQxo.roa
Signing time: Sun 13 Sep 2026 22:59:27 +0000
ROA not before: Sun 13 Sep 2026 22:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219494
IP address blocks: 2a14:eb87:20::/48 maxlen: 48
2a14:eb87:60::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9c:ff:3a:10:f4:14:d3:5a:39:c3:4f:55:f7:77:26:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54137c32249107f26b1741451cf10039380b8bc3
Validity
Not Before: Sep 13 22:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75d3c5e485f0b473fc72a3c3cf910939dba2431a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:bd:5f:6b:65:77:a0:b2:60:52:2a:54:7e:
07:c9:ae:f0:ca:91:9c:ad:90:06:15:b9:57:29:ef:
b0:e8:1e:da:20:55:f0:38:33:f8:00:4a:0d:fb:da:
42:7c:57:57:e6:1a:6e:6e:09:d0:9f:a9:18:87:4f:
22:d5:d5:60:76:fb:61:ea:33:a8:3e:95:20:bb:dc:
0d:05:fb:4b:e7:86:58:d8:ad:7c:85:63:04:c5:b8:
ef:a8:49:e4:ce:e0:79:fd:6e:ee:d6:92:fb:68:3b:
69:76:74:4b:88:37:cc:15:34:05:62:49:a1:38:a0:
01:77:9d:ce:87:5d:6d:fe:27:1c:b7:62:21:99:a0:
62:89:32:3f:5c:63:20:94:3a:68:05:56:c7:bc:a9:
c3:f2:8d:62:7b:ae:de:c5:f3:62:a0:d3:c0:d0:be:
ee:be:e9:dc:f4:8a:ef:16:a9:68:da:26:29:97:b1:
f6:73:76:64:72:f0:5c:92:8e:09:59:3a:1f:a0:15:
2d:74:b6:5c:6f:bb:58:f2:09:43:34:21:d5:37:f9:
97:55:c4:7e:23:0c:3d:6c:7f:97:69:dc:8a:7d:26:
cd:a7:02:62:72:87:9b:84:50:46:14:2f:e4:a3:c2:
57:66:f4:83:e4:83:07:36:90:25:c2:95:db:96:f0:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D3:C5:E4:85:F0:B4:73:FC:72:A3:C3:CF:91:09:39:DB:A2:43:1A
X509v3 Authority Key Identifier:
keyid:54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/ddPF5IXwtHP8cqPDz5EJOduiQxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:eb87:20::/48
2a14:eb87:60::/48
Signature Algorithm: sha256WithRSAEncryption
7b:90:4a:be:fc:cd:d4:a1:ec:d7:87:e9:4b:18:26:ab:97:d2:
65:de:e9:52:70:91:36:1d:1b:68:72:1b:c7:68:8d:f8:2a:90:
55:ea:16:75:23:ed:ef:0e:a3:4e:fc:42:ab:6d:89:3d:86:9a:
1b:e3:6a:3d:08:15:4d:f6:62:34:ba:8f:15:9c:5f:5f:4e:cb:
df:9f:44:59:c3:6d:02:49:7c:ef:72:54:aa:5d:e6:e5:fa:c7:
bc:05:7f:48:27:3d:50:91:ad:cf:6d:12:bf:ba:69:1e:a5:a1:
ee:ca:d6:df:a3:26:c2:32:82:76:79:03:3b:91:fb:76:23:09:
f4:40:43:52:5c:38:0c:e1:d3:44:84:ef:0b:85:a3:73:f1:61:
dc:fc:e1:f4:2c:d9:f8:64:d9:c5:3a:5a:46:f9:af:ff:5f:4b:
9e:43:64:40:c1:39:d6:d0:54:ae:f3:04:eb:b1:20:05:cb:e3:
d1:6d:dd:cf:f6:b4:d9:8e:1b:24:80:4b:29:d9:44:0e:4a:2d:
1b:99:03:ca:96:f7:3c:64:c3:36:65:00:9f:49:08:13:84:5b:
14:c8:62:d0:ca:4a:98:80:02:3e:31:aa:8b:63:cd:54:2a:5d:
21:cc:29:b8:66:bb:81:02:b9:40:9a:10:88:75:cc:9a:03:7a:
49:48:60:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:51:09 2026 by rpki-client