Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/OrZ7ppMuRHyLWCI_spgQj944bzo.roa
File: OrZ7ppMuRHyLWCI_spgQj944bzo.roa (raw, json)
Hash identifier: a8oi4HZOhW7hEFZXmIj8gH7hmJuCWudm5erIy6llApw=
Subject key identifier: 3A:B6:7B:A6:93:2E:44:7C:8B:58:22:3F:B2:98:10:8F:DE:38:6F:3A
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 01A0AE837C66B6EC28AED1489640237A4755
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/OrZ7ppMuRHyLWCI_spgQj944bzo.roa
Signing time: Thu 17 Sep 2026 08:37:27 +0000
ROA not before: Thu 17 Sep 2026 08:37:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48550
IP address blocks: 2a06:e880::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:83:7c:66:b6:ec:28:ae:d1:48:96:40:23:7a:47:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Sep 17 08:37:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ab67ba6932e447c8b58223fb298108fde386f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:27:f7:35:d3:47:18:2f:cc:6d:70:db:80:60:
71:b8:87:6a:e2:92:a3:22:15:0f:a1:18:b2:ee:dc:
0c:22:47:b1:a5:32:7d:e0:92:4c:f5:b2:68:96:7d:
8c:2e:99:ec:f1:2f:00:52:7f:b2:14:54:b7:29:b7:
fe:2b:2e:6a:f2:6a:d5:4f:d8:ae:e6:8a:66:10:68:
5e:81:0d:f3:2e:96:7e:1e:e6:f0:25:3c:38:04:b3:
ce:f3:96:04:ff:8a:b1:d8:a1:98:9a:0b:57:90:64:
ad:fa:83:3a:b2:e5:64:b7:00:f1:6b:35:4a:34:74:
df:79:0a:4f:5a:1d:69:e3:00:69:98:14:07:b8:d1:
42:76:9a:7b:53:f1:16:dc:69:f5:d3:ee:59:1c:a6:
8e:ee:4f:bf:9d:59:10:7b:2a:8d:84:6c:58:12:f6:
ea:77:0f:df:43:22:57:d0:f2:69:25:d9:d6:7c:9b:
3a:f4:f0:0b:21:fb:83:0d:02:70:94:95:1c:95:9f:
5d:46:ec:a1:f5:71:b2:a9:f0:bc:02:c3:0e:b2:1a:
97:05:06:17:af:e1:1a:69:b9:9e:82:af:99:f9:c3:
03:e8:bb:be:f6:d9:15:f8:6a:3e:a7:46:54:10:ab:
08:d3:54:3f:df:b6:53:89:54:a9:ff:ad:d0:25:b1:
32:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B6:7B:A6:93:2E:44:7C:8B:58:22:3F:B2:98:10:8F:DE:38:6F:3A
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/OrZ7ppMuRHyLWCI_spgQj944bzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e880::/32
Signature Algorithm: sha256WithRSAEncryption
4f:9f:8e:24:e9:a7:60:7a:65:43:5b:e6:22:31:66:94:f3:ac:
98:40:ee:d1:95:32:25:ad:9a:88:d6:3d:bc:2c:bf:80:43:e9:
07:4a:f7:45:cf:b7:72:f6:b9:01:e5:57:ee:ad:17:4b:5b:e5:
cd:8d:15:4a:fb:83:d6:75:17:24:20:60:1b:0b:4a:04:5a:af:
3a:2d:71:4d:2d:9b:da:ef:4e:1c:1a:61:4d:ad:af:dd:c2:b4:
1d:e0:b0:3f:2f:40:f4:67:52:99:dc:7d:10:03:76:ce:34:79:
3f:d3:b1:88:9e:8e:a6:62:fa:47:c0:78:8f:70:fa:53:24:31:
de:4e:2b:7a:b6:ca:91:45:9c:8c:93:a2:29:36:60:a7:4b:75:
17:25:50:d1:d9:cb:37:45:2f:20:d3:3d:f6:ee:c8:ae:c4:68:
ea:ff:04:cf:7c:0f:ce:5a:48:b2:03:36:82:5f:a4:3e:64:db:
91:3f:3d:34:c3:c6:a9:d8:81:fa:bb:67:d1:c5:82:14:6c:eb:
d3:08:06:3b:c8:70:f8:43:87:92:c9:53:2c:98:66:3e:fe:bf:
48:a6:2f:62:25:b6:97:d2:36:cf:8d:cc:a8:c3:72:55:cd:7e:
31:a2:7c:31:5f:45:a2:9c:51:b1:7c:54:89:da:f6:b5:16:c9:
6d:8f:f3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:46:11 2026 by rpki-client