Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/cUio0hpjsJnRx8AmIaqnQMfptkc.roa
File: cUio0hpjsJnRx8AmIaqnQMfptkc.roa (raw, json)
Hash identifier: TloXswXFjgPJXy/hhj6UJV/95L074RAak3LmtcO6r04=
Subject key identifier: 71:48:A8:D2:1A:63:B0:99:D1:C7:C0:26:21:AA:A7:40:C7:E9:B6:47
Certificate issuer: /CN=4cd3f4e567fd541e5af0c9e88d11a90d3e21d467
Certificate serial: 019D772A166CBC42B69CAF47D94926980E5A
Authority key identifier: 4C:D3:F4:E5:67:FD:54:1E:5A:F0:C9:E8:8D:11:A9:0D:3E:21:D4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/cUio0hpjsJnRx8AmIaqnQMfptkc.roa
Signing time: Fri 10 Apr 2026 11:32:20 +0000
ROA not before: Fri 10 Apr 2026 11:32:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 2a07:db01:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:77:2a:16:6c:bc:42:b6:9c:af:47:d9:49:26:98:0e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd3f4e567fd541e5af0c9e88d11a90d3e21d467
Validity
Not Before: Apr 10 11:32:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7148a8d21a63b099d1c7c02621aaa740c7e9b647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:76:4a:82:e5:d7:56:29:d0:60:63:d5:7d:
52:17:3d:7b:57:84:c0:86:ff:2b:d2:d7:3a:92:c0:
ec:5a:dd:26:94:f3:81:14:9d:9e:8e:7e:8d:87:bb:
05:04:a2:09:c6:b5:ff:fd:1b:8e:12:2f:e2:01:de:
da:f9:0f:04:e2:8c:ee:15:ac:a0:86:d9:6e:5f:c1:
f6:67:f6:2e:3f:61:b5:46:2b:1a:b8:29:4e:ad:73:
ba:46:bd:7a:9f:b8:a6:2e:a7:5c:91:f0:5c:26:d1:
5b:68:b0:36:98:82:45:83:12:7a:0d:b5:3c:71:a3:
af:5f:4b:57:07:d4:67:0e:98:cc:31:be:d4:5f:31:
37:20:1b:ed:a2:ea:92:5f:38:60:e5:01:d1:a5:c8:
e2:e0:e2:02:86:1e:d1:c1:bd:c9:de:ae:de:67:27:
cf:03:e6:f0:eb:07:76:b4:b3:06:c4:57:c3:c2:5d:
7e:ea:9d:ac:fa:93:80:6c:89:54:3e:01:e7:b3:38:
95:9a:54:0d:18:29:52:ea:a2:c9:f2:bb:c6:4e:6b:
9a:8a:60:7c:3b:04:c0:c4:31:41:c6:3e:8f:0c:ba:
ce:00:9d:67:f9:f8:71:69:fc:44:e0:58:b4:c8:e6:
3c:ea:f5:38:6e:e9:3a:58:a5:38:fd:cf:9c:e3:d3:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:48:A8:D2:1A:63:B0:99:D1:C7:C0:26:21:AA:A7:40:C7:E9:B6:47
X509v3 Authority Key Identifier:
keyid:4C:D3:F4:E5:67:FD:54:1E:5A:F0:C9:E8:8D:11:A9:0D:3E:21:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/cUio0hpjsJnRx8AmIaqnQMfptkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:db01:5::/48
Signature Algorithm: sha256WithRSAEncryption
2f:34:64:3a:b5:39:72:97:d0:91:d4:a5:05:bc:ce:67:e3:96:
61:96:6f:a1:0e:3f:a8:f1:60:f8:27:2f:c5:26:d9:16:5e:74:
bf:e1:d4:a6:6e:c1:a5:ec:0d:ce:93:8b:15:3b:ab:a9:3f:0b:
30:4e:94:b5:ec:03:bf:86:10:12:be:cb:ae:ec:7e:25:95:69:
60:0a:5d:86:0d:18:06:26:93:b7:c1:3c:eb:99:38:3e:b4:06:
37:96:e8:78:69:0a:38:ec:60:88:99:d7:3c:bb:b0:26:96:0c:
04:f7:3e:ac:0f:52:85:fd:ee:4b:02:e3:eb:a2:83:80:fe:ce:
27:aa:5d:d6:61:9c:68:42:a7:f2:f7:af:4c:33:14:82:47:bc:
31:7c:ed:da:06:6a:da:05:94:60:a2:0e:b4:3f:37:e2:68:2a:
5e:ad:1c:34:79:84:16:82:59:2b:34:9a:c9:40:e6:91:81:58:
16:09:32:23:7f:4e:9d:61:b8:bc:d5:c9:65:39:36:44:dd:be:
8e:51:bf:30:3a:79:e0:aa:4d:c2:2a:fe:ed:8e:e9:15:b2:09:
d4:ad:16:14:6f:2b:a3:50:4a:a2:b6:1f:a2:4f:fe:0f:93:5f:
9f:2f:7f:a1:a0:ea:ef:2f:f5:4d:ef:0b:a9:64:56:05:83:6f:
75:28:99:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:36:42 2026 by rpki-client