Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/0ilD8kn0R7q1FBSpS_1ImAaBVIw.roa
File: 0ilD8kn0R7q1FBSpS_1ImAaBVIw.roa (raw, json)
Hash identifier: r9gpGa/Fs+XSMlMSIjeCe4Ey3b9cLg0idanhrHIE4vU=
Subject key identifier: D2:29:43:F2:49:F4:47:BA:B5:14:14:A9:4B:FD:48:98:06:81:54:8C
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A013EDD14D47586368799587C3F4FD8F16
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/0ilD8kn0R7q1FBSpS_1ImAaBVIw.roa
Signing time: Tue 18 Aug 2026 08:12:27 +0000
ROA not before: Tue 18 Aug 2026 08:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41819
IP address blocks: 2a00:801:4b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:ed:d1:4d:47:58:63:68:79:95:87:c3:f4:fd:8f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Aug 18 08:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d22943f249f447bab51414a94bfd48980681548c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:6d:94:4e:93:ea:1e:f2:6c:b5:f5:5c:52:
bf:89:d9:8b:1c:c0:b0:7e:ad:23:89:52:78:4f:14:
42:95:9b:eb:99:4d:de:56:dc:d6:58:67:de:7a:ff:
25:f9:4f:35:07:16:89:68:4e:5d:b7:60:d2:e2:bb:
59:da:cc:44:35:87:00:b3:7b:36:b3:53:07:53:64:
96:d6:a9:e2:8f:11:90:e7:24:4a:e2:f6:e7:10:3a:
2e:81:9c:e6:68:29:93:74:71:b4:fa:1c:02:23:3d:
e2:ae:81:5b:ec:7d:d3:2e:49:ea:16:07:b3:f0:d1:
b0:e7:f6:a4:44:cd:62:92:46:35:c0:01:6b:e1:c0:
05:fb:19:02:ba:f7:18:b8:d5:73:a0:7b:9b:8c:f0:
6f:d6:f3:93:fb:75:8a:a2:ae:24:27:d5:d3:4c:a1:
57:a6:73:81:18:d2:16:2f:31:5d:78:a6:3c:8f:e1:
45:ec:02:ec:3c:ad:a1:71:d4:d2:af:76:c3:d4:1f:
1f:31:37:53:a9:31:eb:b7:e5:7f:5b:e0:c7:1d:b4:
13:4e:22:72:b2:13:4e:f6:0b:25:5a:de:29:74:d2:
e3:8c:be:04:3f:14:c6:d7:46:22:b4:b7:04:5f:41:
e7:79:86:de:5d:ee:42:dc:1f:80:20:e2:c2:53:d7:
c9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:29:43:F2:49:F4:47:BA:B5:14:14:A9:4B:FD:48:98:06:81:54:8C
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/0ilD8kn0R7q1FBSpS_1ImAaBVIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:801:4b::/48
Signature Algorithm: sha256WithRSAEncryption
38:9d:8c:89:0e:d6:cb:2b:17:ae:2e:b5:4e:59:6b:e5:46:b0:
b5:2d:1d:c4:a4:47:5e:81:d8:84:ea:9c:4e:f9:df:40:cb:59:
4f:d2:6e:b6:cb:1c:fc:c4:08:cc:da:45:ec:2e:04:71:5c:2a:
b6:c2:fe:55:88:4a:91:4a:40:0c:0f:3c:fe:ee:0d:6b:c7:68:
e0:23:8c:d0:6f:02:51:26:68:13:80:35:cc:0a:2b:f9:54:86:
e8:50:ae:0c:39:35:7b:e5:36:23:c9:d4:86:56:f6:df:8f:dd:
23:00:bc:80:37:a0:85:b5:0c:2b:e6:81:67:c9:49:7f:e3:ed:
b7:b4:7b:21:42:f5:a6:52:97:aa:3f:3a:59:32:48:95:4f:f2:
92:53:0f:b6:88:92:8a:08:01:c7:1f:db:5a:1e:0a:91:03:24:
65:4c:a9:43:a5:85:77:8b:db:6c:7e:3d:9b:b8:ef:f9:86:ab:
6c:67:01:de:c8:ed:de:b9:5b:34:02:28:b8:03:61:50:bd:00:
5a:15:c2:ba:53:7e:ff:66:8c:6e:88:65:c7:e1:ce:a4:03:bd:
f1:0a:d1:d2:cd:be:9e:cf:54:d4:e2:07:4f:52:f0:f8:1a:cf:
ad:f9:1c:96:11:ab:fd:4f:d3:bd:77:9f:49:0b:f8:51:c2:4f:
51:f3:77:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:31:41 2026 by rpki-client