Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/4gw6ivUlx5RhKF01WchRSIyjw6k.roa
File: 4gw6ivUlx5RhKF01WchRSIyjw6k.roa (raw, json)
Hash identifier: yvGXQJHvCvBUZwEB+2AUU7LQeWkM7iGBhAxvrY3Xm9M=
Subject key identifier: E2:0C:3A:8A:F5:25:C7:94:61:28:5D:35:59:C8:51:48:8C:A3:C3:A9
Certificate issuer: /CN=dbe47e559d2a82cf50b4151965e36937e3ff767a
Certificate serial: 01A0551EBABDCC2A47F38D41A17A6FF85037
Authority key identifier: DB:E4:7E:55:9D:2A:82:CF:50:B4:15:19:65:E3:69:37:E3:FF:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/4gw6ivUlx5RhKF01WchRSIyjw6k.roa
Signing time: Mon 31 Aug 2026 00:01:12 +0000
ROA not before: Mon 31 Aug 2026 00:01:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 2a05:6340:200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:55:1e:ba:bd:cc:2a:47:f3:8d:41:a1:7a:6f:f8:50:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe47e559d2a82cf50b4151965e36937e3ff767a
Validity
Not Before: Aug 31 00:01:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e20c3a8af525c79461285d3559c851488ca3c3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:a1:46:27:f7:e4:73:2a:0f:bd:a0:bb:8d:
39:2b:d3:32:63:be:19:f1:ff:99:ec:80:96:2e:19:
cf:23:95:fc:b1:fb:41:3b:03:f6:46:6c:bc:b4:2a:
c8:98:fc:11:16:dc:fd:38:1a:9a:77:f8:c5:2a:f8:
27:f4:ea:5c:2d:6e:d0:02:43:33:23:36:aa:f0:de:
f6:d1:e4:60:d3:05:3f:36:a0:c7:85:e5:88:3e:cd:
e5:2e:1e:97:95:b7:cf:d9:fe:cc:1d:e9:cb:a9:28:
91:00:d6:09:98:88:03:ab:91:0a:04:20:2f:18:38:
c0:50:65:d8:37:be:96:a1:98:06:18:7a:05:fa:05:
b8:8a:bc:07:9b:18:db:49:6f:62:b3:0e:72:a5:e0:
6b:8a:28:0a:28:7d:02:e2:4b:74:12:f4:96:bc:85:
70:33:0e:86:12:7b:fe:b6:9b:5c:96:7c:c7:81:96:
7a:68:32:10:21:34:61:ef:cf:17:8c:d7:fc:13:78:
dd:43:d1:3f:5b:68:07:1c:94:93:ba:e6:ab:b9:d1:
6e:90:51:83:c2:c8:b0:99:48:5c:0f:3b:4f:5d:94:
0d:d5:25:5e:ff:8d:d7:99:e2:c3:e5:65:fd:f6:8d:
4d:c1:a6:29:35:dd:b7:8f:c6:a0:e9:bf:94:60:20:
6b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0C:3A:8A:F5:25:C7:94:61:28:5D:35:59:C8:51:48:8C:A3:C3:A9
X509v3 Authority Key Identifier:
keyid:DB:E4:7E:55:9D:2A:82:CF:50:B4:15:19:65:E3:69:37:E3:FF:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/4gw6ivUlx5RhKF01WchRSIyjw6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:6340:200::/48
Signature Algorithm: sha256WithRSAEncryption
8f:35:2b:d5:2b:6e:43:64:ad:84:e3:c5:b7:a2:53:4b:32:a3:
84:28:34:1a:df:95:74:9b:0b:84:87:6e:09:c7:46:72:c9:3b:
7d:27:cb:55:34:86:ef:dc:92:07:ba:43:71:10:8b:9e:95:b9:
d5:17:da:40:e1:83:a5:21:64:b6:d1:4c:fc:06:f0:9d:58:d4:
91:0c:1a:db:63:0c:27:1e:70:ea:b0:a6:7f:96:2b:15:a0:47:
c6:02:b3:34:cc:13:df:97:fd:e1:87:68:62:57:12:e4:f5:e2:
f9:9e:bb:4e:b9:2b:4f:dd:7e:1d:1a:8a:cb:26:c2:f0:67:49:
5d:98:26:34:d8:b9:61:34:62:cf:ce:ca:d1:1a:3d:e9:40:9e:
7e:a5:4d:e5:36:0c:cc:81:31:c6:89:9a:84:37:05:53:a4:d2:
71:70:29:80:a3:77:c6:4c:8b:b2:d3:7a:88:95:03:4b:a8:b7:
44:4b:c5:fa:55:d9:a6:05:06:aa:3a:42:14:e0:5c:00:46:c1:
24:59:d8:d9:7d:41:79:8e:9e:b3:34:b2:cd:fd:4f:30:1b:0f:
81:bf:4c:f6:9f:2c:06:97:9d:b6:63:d2:4d:15:2a:83:1d:ab:
80:8e:b1:38:a9:ad:3d:e2:90:70:6b:1f:a1:b5:38:ea:f5:89:
01:b3:06:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:52:31 2026 by rpki-client