Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/TQVndCb0s6YbFLg-Ck3Joxzpvnk.roa
File: TQVndCb0s6YbFLg-Ck3Joxzpvnk.roa (raw, json)
Hash identifier: ALeZt1J1EgV6UsgwxbSFKJyWQMJa1LqFVoBIsMSrHbY=
Subject key identifier: 4D:05:67:74:26:F4:B3:A6:1B:14:B8:3E:0A:4D:C9:A3:1C:E9:BE:79
Certificate issuer: /CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Certificate serial: 01A0816F75C24A32E8C03342416521C69107
Authority key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/TQVndCb0s6YbFLg-Ck3Joxzpvnk.roa
Signing time: Tue 08 Sep 2026 14:32:40 +0000
ROA not before: Tue 08 Sep 2026 14:32:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218737
IP address blocks: 2a13:edc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:6f:75:c2:4a:32:e8:c0:33:42:41:65:21:c6:91:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Validity
Not Before: Sep 8 14:32:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d05677426f4b3a61b14b83e0a4dc9a31ce9be79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:c7:13:87:25:04:e8:94:85:e0:ec:b9:f3:
1a:00:bf:9c:da:37:7a:1a:d9:2a:68:ce:47:e4:cd:
2d:34:63:96:22:67:d1:d7:e4:52:de:d7:c2:9f:c6:
91:4f:6e:16:6b:ec:07:87:37:96:16:06:92:42:5b:
0f:5c:76:97:dd:19:13:ca:85:b2:0b:6e:a3:e8:2c:
00:f0:04:c4:4d:c5:7f:0c:77:0e:3b:b1:f0:d9:aa:
cd:0e:11:52:f5:7a:88:5e:71:81:92:ce:86:2d:71:
8e:f9:ad:6f:4a:fb:64:8d:ea:b4:dd:66:2e:ba:79:
ad:a2:d3:c9:f1:7c:24:1b:b0:a9:92:86:d7:7f:99:
d2:16:94:e2:19:31:58:ae:8f:0c:bf:be:87:d8:34:
73:cb:a5:c6:70:d3:0a:34:fb:a5:e4:cb:4e:f8:20:
5c:59:8a:af:92:04:47:bc:98:85:47:31:f8:8a:81:
2b:ee:19:fa:ec:0f:a3:50:71:34:bd:c0:83:bf:fa:
88:0c:bc:10:db:17:9a:ca:94:98:fc:5e:64:2f:dd:
8d:39:08:01:ba:c3:e6:78:c2:4e:7c:f7:fd:67:96:
f7:d6:46:57:6a:96:61:6c:2b:45:f2:d2:62:4e:01:
f6:fa:7a:b7:de:b0:2e:55:ae:dd:cd:ac:6f:77:24:
57:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:05:67:74:26:F4:B3:A6:1B:14:B8:3E:0A:4D:C9:A3:1C:E9:BE:79
X509v3 Authority Key Identifier:
keyid:F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/TQVndCb0s6YbFLg-Ck3Joxzpvnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:edc0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:cf:ed:29:c6:90:6a:5d:af:c6:b6:fd:03:da:57:5e:0d:9d:
f7:f5:be:c3:b2:92:f8:d5:bf:c4:de:21:df:57:14:7b:e6:75:
ef:ef:50:2e:29:18:49:64:21:de:f6:49:9c:71:c3:c6:99:46:
81:ca:29:a2:15:cd:18:0c:ef:37:cf:c5:22:ca:d7:66:43:69:
04:e6:95:5d:62:fd:a5:7b:1f:ba:f6:b4:fc:e0:db:35:7f:5e:
84:5b:6b:f8:c3:d4:63:b2:04:5a:91:58:84:a1:bc:93:ea:dc:
5e:52:34:e7:72:0e:da:05:51:be:05:1c:ca:f1:1e:79:ca:ae:
27:51:a4:d6:ba:47:0b:a2:68:e8:85:6d:bd:98:7a:62:4c:cb:
88:1d:c6:39:68:81:9e:de:63:62:c9:98:32:de:f0:e2:9a:83:
e3:f3:27:2f:b5:dd:94:a9:fb:db:5e:5a:dc:0c:75:35:58:13:
63:b7:81:b8:70:9a:eb:69:48:49:50:10:2f:55:f6:6b:5f:75:
d6:f5:5e:70:26:a5:36:ff:48:52:83:bb:1f:2b:85:53:f8:8d:
bf:a8:a2:a0:16:4b:2f:3b:d6:93:92:d6:71:69:1e:70:c5:50:
31:52:87:17:db:df:8c:fc:d1:76:f9:cb:8f:13:7d:f2:2e:a4:
35:35:25:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:03:26 2026 by rpki-client