Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/A5joThCp_ods84BUeatCS9R7x7M.roa
File: A5joThCp_ods84BUeatCS9R7x7M.roa (raw, json)
Hash identifier: d0PvJQ6McgWcnLnjBFFvDUhNjMI/+cW8CIB7AngUPR8=
Subject key identifier: 03:98:E8:4E:10:A9:FE:87:6C:F3:80:54:79:AB:42:4B:D4:7B:C7:B3
Certificate issuer: /CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Certificate serial: 01A0B5BF49DD2B5A7B33B21903EE3F538B95
Authority key identifier: 36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/A5joThCp_ods84BUeatCS9R7x7M.roa
Signing time: Fri 18 Sep 2026 18:20:07 +0000
ROA not before: Fri 18 Sep 2026 18:20:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a0c:2f00::/32 maxlen: 48
2a0c:2f07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:bf:49:dd:2b:5a:7b:33:b2:19:03:ee:3f:53:8b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Validity
Not Before: Sep 18 18:20:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0398e84e10a9fe876cf3805479ab424bd47bc7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:2b:23:ef:a3:45:c7:41:c3:44:87:3f:bd:
3e:40:f5:e6:9a:68:98:e6:84:25:6d:18:27:04:fb:
7e:14:1a:ef:97:42:74:54:ac:42:eb:2b:e4:3c:66:
bb:01:ec:36:89:72:61:8a:75:5d:90:02:a0:0f:86:
87:10:94:a9:be:9d:38:0e:ea:95:3a:ac:f7:91:fc:
ee:fd:6f:29:0b:18:b1:0c:18:47:60:8d:c0:5b:36:
2e:33:3b:a8:d7:b5:18:d3:19:de:d0:da:8a:e4:d4:
ca:36:54:ca:23:40:f2:5d:57:a6:3a:12:f6:b2:7a:
89:b0:fd:1f:8f:39:25:f0:4b:98:80:0e:f9:b5:73:
38:a5:e6:8e:9a:a9:98:98:37:cf:9d:f8:fe:50:35:
f1:30:5d:5b:38:d8:f7:c5:3a:a4:e1:ee:e9:8e:79:
fb:97:1b:c4:e5:db:e3:86:14:ac:84:43:63:ac:d4:
76:2d:3a:dc:86:33:2c:6f:e0:2d:93:fb:54:df:40:
f0:07:17:37:2f:33:c1:7d:90:c6:00:fa:67:5a:b2:
b0:de:83:ee:a0:7d:35:c1:11:4f:9e:78:2f:6d:b0:
b7:36:9d:03:f8:19:96:b3:9c:e6:c1:c8:0e:70:7b:
f6:4b:23:e3:2e:5a:46:fe:5f:d6:f8:93:6c:59:72:
54:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:98:E8:4E:10:A9:FE:87:6C:F3:80:54:79:AB:42:4B:D4:7B:C7:B3
X509v3 Authority Key Identifier:
keyid:36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/A5joThCp_ods84BUeatCS9R7x7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:2f00::/32
2a0c:2f07::/32
Signature Algorithm: sha256WithRSAEncryption
53:a8:84:8f:4b:40:91:05:87:61:f7:15:85:bc:62:62:4a:a3:
c3:6d:be:47:ec:30:8a:5a:45:00:16:53:3a:44:19:82:c8:58:
82:06:f2:60:70:61:ae:3a:cb:e5:73:43:3f:8c:05:ab:ec:82:
96:9e:3b:a6:d7:da:78:79:d1:29:07:52:f9:ab:ee:a7:3d:4d:
f7:66:aa:d4:ef:f4:82:b2:4e:1b:d5:d9:82:a1:f4:cc:1f:28:
84:80:87:c8:84:a2:78:98:6d:99:8d:de:88:7e:53:40:19:b1:
15:f0:70:90:42:f3:7b:44:70:cc:db:96:d5:ba:c4:21:30:48:
d6:2d:22:ca:09:4f:4c:a0:f2:ac:4d:08:16:3c:96:fc:7d:7e:
49:51:dd:aa:93:1d:f0:18:1c:b0:3e:2f:0c:a8:89:10:4d:e4:
95:94:7c:4d:c5:f3:96:8b:19:68:d3:42:70:ab:8b:ba:75:63:
e8:ca:c7:5b:9f:8e:80:d7:ee:82:33:ca:ee:06:f3:07:26:a0:
3e:b1:28:b0:68:c7:ee:57:19:d7:2c:01:0a:e9:ac:59:28:e0:
7d:75:d7:c5:a6:01:0c:98:58:55:31:1e:69:5b:66:28:5b:3a:
eb:9e:7e:ca:90:ce:f2:29:51:ea:ca:e7:d3:c3:fa:65:66:b5:
bb:b8:95:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:06:22 2026 by rpki-client