Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/CyS5T2zW6nQi797qSE-dHZYNtEk.roa
File: CyS5T2zW6nQi797qSE-dHZYNtEk.roa (raw, json)
Hash identifier: vWUPnP09Dg+n2UzJoqoyV1Gr3WvM4iFkkNTv2veFgJU=
Subject key identifier: 0B:24:B9:4F:6C:D6:EA:74:22:EF:DE:EA:48:4F:9D:1D:96:0D:B4:49
Certificate issuer: /CN=bafed139df0fad6fde0d82869144104d204b92b5
Certificate serial: 01A0B03523EA96FFEF5E6A237E6B83C02CE4
Authority key identifier: BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/CyS5T2zW6nQi797qSE-dHZYNtEk.roa
Signing time: Thu 17 Sep 2026 16:31:07 +0000
ROA not before: Thu 17 Sep 2026 16:31:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219329
IP address blocks: 2a0a:68c0:205::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:35:23:ea:96:ff:ef:5e:6a:23:7e:6b:83:c0:2c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bafed139df0fad6fde0d82869144104d204b92b5
Validity
Not Before: Sep 17 16:31:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b24b94f6cd6ea7422efdeea484f9d1d960db449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:bc:0e:81:d5:65:b6:a6:d2:b5:24:28:28:
62:49:a7:94:ae:f5:51:9c:2a:71:67:4c:2a:7c:3c:
c4:ad:42:ca:e1:38:74:ca:5d:76:1d:ab:eb:fa:e6:
d1:83:f1:c8:3f:65:a6:47:6f:af:74:6e:37:34:f3:
93:9d:ca:59:db:cb:1e:09:ff:f0:f5:b1:70:52:3d:
04:0e:bc:e8:20:7f:8d:40:73:87:4a:ad:fc:85:b2:
8c:61:ca:b0:d4:f2:0b:a6:95:51:19:66:0e:9e:40:
e6:7c:a4:d5:62:ac:75:5a:d5:3c:e8:d1:be:d5:f1:
83:5a:36:38:4e:cf:34:88:c4:65:86:fc:27:44:a5:
70:70:61:e2:b7:5c:68:16:80:ec:77:25:b7:01:4c:
9b:31:62:54:fc:6b:c6:49:10:f7:b6:49:9b:68:29:
d7:a8:46:73:1b:4b:a4:3a:c1:3b:4f:69:19:95:f8:
c7:f0:01:6c:d4:60:41:71:9c:6d:49:a7:06:e8:05:
86:d7:d8:56:7a:3c:69:a0:89:cb:53:e2:64:18:f3:
9f:3a:a7:1c:b7:df:83:60:1f:18:3e:8e:93:6e:5b:
4f:ff:15:f9:d6:e1:e5:f2:3b:5e:6c:69:37:cf:e4:
68:85:e2:f9:64:95:cc:08:8c:84:99:c5:26:44:10:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:24:B9:4F:6C:D6:EA:74:22:EF:DE:EA:48:4F:9D:1D:96:0D:B4:49
X509v3 Authority Key Identifier:
keyid:BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/CyS5T2zW6nQi797qSE-dHZYNtEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:68c0:205::/48
Signature Algorithm: sha256WithRSAEncryption
57:a2:65:1f:4f:62:74:bd:0e:a7:f8:80:44:fe:bb:5a:73:a1:
3a:36:a5:2f:17:a1:9d:f4:1e:38:f0:6d:66:b2:8e:f5:ff:25:
ed:32:a6:f9:e3:02:84:e3:84:5e:ea:6c:95:ef:88:8a:46:4d:
51:50:bc:c4:23:50:e4:24:a1:0c:18:fa:4c:3f:a8:4a:d1:be:
19:36:fb:09:8e:15:31:33:d1:f6:40:e4:17:ec:56:06:aa:36:
f1:96:d9:a9:ac:1c:06:08:ae:10:40:37:c8:51:c3:e7:6f:e1:
cb:9d:91:e8:b8:74:13:d8:04:84:c8:e5:a0:86:37:6f:53:35:
2b:24:d1:1d:70:b7:a4:38:b7:54:af:c3:27:6c:cb:f4:84:80:
23:5b:84:25:d6:02:43:50:f2:5a:1d:09:02:19:3d:f2:58:7f:
fa:32:4e:94:01:81:95:cd:52:7c:81:1b:3f:14:2f:1c:96:52:
3c:22:c4:6c:c5:40:21:1e:f9:32:d8:76:63:df:ed:94:db:d0:
2c:61:09:3e:f4:e6:ae:7e:29:83:89:63:1e:7e:b3:65:97:4d:
31:51:84:fd:cb:91:05:b6:a3:93:bc:f7:9d:e7:3e:4b:9a:2d:
e9:77:5c:1a:65:2f:b6:65:2b:fa:56:b3:87:53:a2:e4:2c:66:
e1:73:c2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:29:16 2026 by rpki-client