Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/PDgj4Wl1YZudxOMnm6iJcOVDohw.roa
File: PDgj4Wl1YZudxOMnm6iJcOVDohw.roa (raw, json)
Hash identifier: a78RSsZm6nyQiDBrqehTSBxMPpTBDq/oFvqHEIehalg=
Subject key identifier: 3C:38:23:E1:69:75:61:9B:9D:C4:E3:27:9B:A8:89:70:E5:43:A2:1C
Certificate issuer: /CN=dbe47e559d2a82cf50b4151965e36937e3ff767a
Certificate serial: 01A0545BB99ACAAF1CD27BAAEBA4FF66C533
Authority key identifier: DB:E4:7E:55:9D:2A:82:CF:50:B4:15:19:65:E3:69:37:E3:FF:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/PDgj4Wl1YZudxOMnm6iJcOVDohw.roa
Signing time: Sun 30 Aug 2026 20:28:12 +0000
ROA not before: Sun 30 Aug 2026 20:28:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a05:6340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:54:5b:b9:9a:ca:af:1c:d2:7b:aa:eb:a4:ff:66:c5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe47e559d2a82cf50b4151965e36937e3ff767a
Validity
Not Before: Aug 30 20:28:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c3823e16975619b9dc4e3279ba88970e543a21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:e3:3f:fe:e8:f4:44:dd:8e:f6:88:42:3b:
cb:0d:cb:f8:91:2a:68:54:71:78:12:7d:01:39:9c:
ae:ac:c9:ad:3d:5e:af:b9:46:14:19:87:4a:1e:0d:
bc:87:75:bd:a9:47:ee:97:c2:b2:a9:27:ab:f6:bd:
1b:75:95:e6:db:83:65:0c:12:30:0b:5a:a5:29:e3:
41:8a:1f:cd:74:be:fc:21:fc:72:6d:d4:61:f3:42:
91:3d:01:7d:44:5f:56:42:ba:0b:9c:a2:71:31:9a:
ea:a4:11:0b:19:08:f6:e5:45:fd:db:c1:53:2d:62:
b4:6b:15:b3:87:a9:51:00:54:9b:f7:46:87:2d:84:
43:ff:41:66:eb:52:bf:24:0f:40:d6:4d:7a:24:c0:
8f:67:51:5c:d9:6b:86:0d:e5:db:be:49:0b:a9:72:
b9:a9:70:2e:2a:ae:4b:8c:e7:34:ee:7b:f5:4d:f0:
24:81:34:4d:33:5a:39:cd:ed:a8:f9:41:db:ca:83:
92:a4:8b:8b:d3:f1:c8:5d:18:b5:a5:c5:de:05:74:
eb:69:62:be:ac:5d:4e:fb:57:dc:a6:6e:7b:f9:8b:
8d:bc:d2:0f:2d:8b:da:80:e1:5f:b5:ff:81:1c:cf:
e8:78:03:32:d2:15:2d:84:57:ac:cf:8d:2b:81:46:
97:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:38:23:E1:69:75:61:9B:9D:C4:E3:27:9B:A8:89:70:E5:43:A2:1C
X509v3 Authority Key Identifier:
keyid:DB:E4:7E:55:9D:2A:82:CF:50:B4:15:19:65:E3:69:37:E3:FF:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/PDgj4Wl1YZudxOMnm6iJcOVDohw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:6340::/48
Signature Algorithm: sha256WithRSAEncryption
1f:dd:8d:46:ee:49:d0:e3:66:5e:fc:45:d3:cd:50:c7:7f:d7:
c1:8f:4a:b9:9d:15:66:97:c5:a5:6f:ec:41:30:85:09:5d:3b:
42:6c:30:a9:a6:01:1b:33:5a:bd:7d:c1:91:00:1e:2b:94:f5:
0e:c7:d8:cd:81:6d:70:d0:f6:d1:12:b4:d5:70:11:21:e0:cc:
c4:ab:ea:0b:39:f0:cc:d6:3a:e6:db:a5:90:1d:dd:da:47:fe:
86:35:1d:8c:09:1a:68:5c:66:78:04:0b:cb:4a:37:a0:c4:fa:
77:c9:2b:22:e2:8c:1f:3f:71:02:7c:de:bf:6d:68:4b:f1:c4:
0b:6a:cf:f8:e0:43:f4:de:fe:3d:e3:1c:b7:15:f3:6d:ac:52:
ac:08:39:29:a0:e2:91:e9:11:46:ac:7c:fc:7f:46:45:91:bd:
f6:03:9e:1d:81:71:f3:e8:fc:a1:bf:53:a7:24:68:17:0d:54:
61:49:6d:f2:d1:a6:3a:01:7f:30:55:38:6e:d4:33:bf:44:b6:
50:f3:3f:c9:31:cb:cc:18:84:7a:98:ee:55:12:4b:f7:7d:69:
21:1a:b0:56:9b:bc:07:27:4d:53:10:ad:ae:62:51:2c:69:69:
04:62:35:88:ae:41:66:1e:e1:ff:d2:75:27:90:fd:8d:a8:30:
f8:e3:11:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:08:40 2026 by rpki-client