Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/oQ465u5ABjy_bI2bid_xFwTRdk0.roa
File: oQ465u5ABjy_bI2bid_xFwTRdk0.roa (raw, json)
Hash identifier: kIHQwUf72AZCR5eKFc8oJX7KFeRJopOB0HQDj68kcTE=
Subject key identifier: A1:0E:3A:E6:EE:40:06:3C:BF:6C:8D:9B:89:DF:F1:17:04:D1:76:4D
Certificate issuer: /CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Certificate serial: 01A082B52F00BA657F381E5ED9AF736AC1CA
Authority key identifier: 34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/oQ465u5ABjy_bI2bid_xFwTRdk0.roa
Signing time: Tue 08 Sep 2026 20:28:27 +0000
ROA not before: Tue 08 Sep 2026 20:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39122
IP address blocks: 2a01:4d8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:b5:2f:00:ba:65:7f:38:1e:5e:d9:af:73:6a:c1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34958a58d17cab8ff9a79156f66bed5a78799f7e
Validity
Not Before: Sep 8 20:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a10e3ae6ee40063cbf6c8d9b89dff11704d1764d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:89:85:3e:b2:cc:ca:9f:9c:7b:05:17:0b:a2:
22:4e:d5:f1:d3:85:a2:84:8c:44:b2:b7:75:78:f3:
2a:9a:ec:22:89:94:cf:70:b3:32:8d:f5:aa:0a:a0:
14:f3:bf:e1:d2:66:12:60:c5:14:65:3c:b3:dc:de:
b0:ef:8f:d3:71:0d:94:bd:03:1f:f3:7d:ab:81:74:
24:e2:d6:f8:03:30:6d:47:be:ab:98:eb:04:4b:3e:
03:39:15:7d:58:0c:ff:36:63:75:d6:ce:12:74:1b:
dd:5c:60:15:3b:2c:13:27:77:17:d5:d9:73:73:56:
fd:37:45:42:f7:d8:b8:3b:65:9f:c2:1b:5b:f9:91:
28:33:24:36:6a:64:ba:ed:94:a7:64:9b:6e:a8:97:
34:11:1d:8f:c1:c6:a6:d2:b8:80:98:28:50:90:8e:
62:45:ed:97:4b:dd:c2:b8:89:73:66:d6:b0:23:15:
02:a9:50:a2:0e:65:31:d1:61:13:b8:00:b3:24:84:
47:8e:6d:d6:33:39:14:0e:06:6d:9b:01:75:f1:a3:
32:14:bb:1f:f0:a8:7b:34:07:fd:a4:34:24:29:a2:
5f:b3:03:5b:6a:5c:7d:5f:59:b0:2e:9e:73:d1:36:
71:fb:9c:52:31:34:b1:27:24:1b:1c:6c:15:05:3c:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0E:3A:E6:EE:40:06:3C:BF:6C:8D:9B:89:DF:F1:17:04:D1:76:4D
X509v3 Authority Key Identifier:
keyid:34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/oQ465u5ABjy_bI2bid_xFwTRdk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:4d8::/32
Signature Algorithm: sha256WithRSAEncryption
88:8e:a4:1b:6e:6a:d9:af:e6:00:4c:31:66:62:f0:1d:ec:08:
db:af:90:3a:81:87:a6:d7:3f:d9:44:49:b9:6a:33:59:f6:27:
42:54:a1:74:40:a6:bf:d5:56:c0:f4:cd:25:72:7a:94:21:13:
ed:e5:53:3e:75:a6:4b:c6:d2:3a:b6:2d:1b:4a:08:d3:19:5c:
bb:fa:01:7d:83:28:59:fe:c9:26:03:97:32:9d:00:d9:c5:b1:
2c:c2:ed:3c:e8:82:91:fa:65:2a:00:a2:e2:3e:46:3e:16:fa:
02:c8:f1:0a:4b:81:24:2c:ae:5c:be:1a:9b:76:3f:62:a8:c6:
dc:02:a6:cb:73:e3:ba:ed:2c:2d:9d:ff:aa:06:a5:28:45:d6:
41:c6:5f:07:c3:0f:90:f0:58:29:c7:27:07:a4:ed:bd:95:f8:
cb:fe:14:b9:e9:c6:be:8e:a4:62:99:66:20:da:fd:96:a5:21:
91:fe:cc:e1:79:70:47:a4:a0:48:56:9e:82:54:aa:20:c7:73:
da:8c:87:59:e7:cf:44:98:80:06:ad:94:a6:a6:f5:c4:96:78:
9a:fd:f9:ee:46:08:e1:0f:a1:50:43:6e:58:36:83:e1:39:01:
e8:e4:62:a0:eb:00:18:e2:bb:e0:53:40:29:24:83:13:e1:8f:
e5:f0:cd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:57:27 2026 by rpki-client