Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/p3oDOHgOBUquyHxeOzPNLZDbBV8.roa
File: p3oDOHgOBUquyHxeOzPNLZDbBV8.roa (raw, json)
Hash identifier: SIpRRKiTJavAEPnglZMtAVfyMKpObUjWtFsTsETWsUE=
Subject key identifier: A7:7A:03:38:78:0E:05:4A:AE:C8:7C:5E:3B:33:CD:2D:90:DB:05:5F
Certificate issuer: /CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
Certificate serial: 01A095A890622DAF7B75F190F211FA61234B
Authority key identifier: D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/p3oDOHgOBUquyHxeOzPNLZDbBV8.roa
Signing time: Sat 12 Sep 2026 12:47:27 +0000
ROA not before: Sat 12 Sep 2026 12:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219369
IP address blocks: 2001:67c:b1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:95:a8:90:62:2d:af:7b:75:f1:90:f2:11:fa:61:23:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5712a9d69b4aec9789c14cb052b7139b06e75da
Validity
Not Before: Sep 12 12:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a77a0338780e054aaec87c5e3b33cd2d90db055f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:06:5c:ba:62:e1:50:28:c8:ea:e3:36:86:d3:
68:6c:3e:2e:fa:03:b2:47:40:30:d2:b9:fa:eb:5c:
84:71:bb:f5:16:04:b0:35:6d:53:ce:d5:a0:78:d1:
97:ea:4e:15:94:62:f8:aa:f8:81:1d:f8:21:d1:0a:
de:ed:b6:81:70:d0:47:d6:64:a3:c1:73:9a:e5:3b:
03:97:66:b3:b1:a7:ef:98:bb:03:77:4a:8e:b5:81:
70:f7:3e:bc:1a:19:d6:52:39:c6:c3:df:ce:27:ed:
f0:44:b0:6c:70:63:23:1a:cf:04:cd:23:fd:29:e4:
f5:93:3b:4d:da:21:b8:6a:eb:93:18:37:19:68:f4:
1a:c4:f1:14:bb:c5:14:5c:df:ea:c4:1e:c9:99:37:
79:25:a6:09:22:1d:e9:f8:b6:93:3e:32:cf:73:da:
3f:39:ee:e9:1c:a3:68:fa:08:3c:d3:eb:fa:09:91:
9b:f4:3d:9d:2a:12:e6:7c:bf:db:e4:30:4d:28:2a:
b3:0c:47:16:9a:c1:36:25:a6:45:e6:76:3f:20:0d:
d5:75:31:e6:3b:a5:71:3e:e5:3a:02:e1:aa:a7:e5:
1f:e7:29:6e:27:38:c6:50:ad:00:04:8b:e9:54:f1:
7a:a8:8b:68:5c:9d:ca:45:58:e0:4f:d0:38:e1:82:
c5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7A:03:38:78:0E:05:4A:AE:C8:7C:5E:3B:33:CD:2D:90:DB:05:5F
X509v3 Authority Key Identifier:
keyid:D5:71:2A:9D:69:B4:AE:C9:78:9C:14:CB:05:2B:71:39:B0:6E:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XEqnWm0rsl4nBTLBStxObBuddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/p3oDOHgOBUquyHxeOzPNLZDbBV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa442e-c88e-41ee-935f-84f07261e5e5/1/1XEqnWm0rsl4nBTLBStxObBuddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b1c::/48
Signature Algorithm: sha256WithRSAEncryption
bc:cd:fc:da:32:8d:bd:8c:f0:05:c0:b2:2e:e4:30:6f:09:a2:
8c:3d:cd:6e:62:be:26:37:5a:b3:d2:3e:b8:56:8f:dc:7d:3d:
a4:c8:22:0d:0f:04:9d:55:3e:89:0e:3b:37:b5:93:ea:c0:70:
35:9e:f3:8a:a2:4c:ae:f7:2c:1b:3b:56:78:f3:ff:28:43:40:
a1:fe:d3:51:b9:e4:cf:20:79:2f:d9:12:34:f0:c7:3e:e7:a8:
9a:4f:b5:74:0f:81:6b:34:6b:ec:43:56:69:86:a3:48:7a:17:
05:b5:be:f5:1a:cb:ad:27:6e:2b:bb:94:84:15:5d:b8:8f:23:
b7:d7:c1:5d:84:d1:5d:85:c4:1e:b7:06:b9:19:9f:09:57:2f:
64:72:3c:96:37:94:3e:c8:15:d0:65:17:fd:41:53:de:f7:9d:
20:20:cc:3f:f3:b0:44:34:07:64:70:b7:c0:6b:80:01:5f:87:
9f:02:95:fc:f6:0f:38:3f:c4:db:e3:00:28:f8:0e:10:e9:63:
ff:0d:bf:fe:6e:e4:e4:8a:37:39:ce:e5:aa:b9:06:30:60:4e:
e8:57:2c:57:72:b0:2a:09:ac:9a:9c:69:6c:58:58:64:8d:8e:
61:f7:51:a3:1c:9b:7e:84:b5:a0:14:90:0e:de:b5:5f:9f:a7:
07:dd:00:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:21:39 2026 by rpki-client