Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/0cU7tqfSh6S25NdMSsqVHrUFqfQ.roa
File: 0cU7tqfSh6S25NdMSsqVHrUFqfQ.roa (raw, json)
Hash identifier: j7SWpfDDTj+Ahmtmh+W9tya8FBkCI4rF1R/4eXya/fE=
Subject key identifier: D1:C5:3B:B6:A7:D2:87:A4:B6:E4:D7:4C:4A:CA:95:1E:B5:05:A9:F4
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A111EF6D4991DE83BA35A3B05B1E85A6E0
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/0cU7tqfSh6S25NdMSsqVHrUFqfQ.roa
Signing time: Tue 06 Oct 2026 15:57:45 +0000
ROA not before: Tue 06 Oct 2026 15:57:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218876
IP address blocks: 2a10:fa81:1600::/40 maxlen: 40
2a10:fa81:1700::/40 maxlen: 40
2a10:fa81:2700::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 06:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:ef:6d:49:91:de:83:ba:35:a3:b0:5b:1e:85:a6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Oct 6 15:57:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1c53bb6a7d287a4b6e4d74c4aca951eb505a9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:96:61:a9:6a:93:5d:bb:67:3e:b5:7c:b1:
c4:95:1e:11:ad:eb:5f:83:ce:6a:8f:aa:0d:5d:f6:
88:b6:00:03:53:bc:1a:e9:22:a2:50:e0:45:b1:3d:
c4:bc:4d:e8:0e:6f:a7:8b:ed:c7:64:64:68:47:44:
b0:93:c2:46:99:85:27:5e:7d:21:fe:79:3b:a4:10:
7a:b6:3a:78:57:64:c2:5d:cb:36:bf:e4:b7:3b:c0:
5f:48:41:41:f3:a9:72:86:08:00:6b:35:43:05:59:
72:c0:92:88:04:6a:ae:c7:53:07:48:8b:b4:2e:8a:
0e:b5:53:5e:4a:89:3b:9a:21:aa:62:7d:b7:50:02:
cf:92:ca:b8:70:74:6a:c9:41:6f:65:bb:03:14:b9:
04:ff:5f:4a:5b:eb:a8:51:6a:83:a7:66:a7:71:4b:
44:56:87:a6:04:6d:8f:98:61:67:01:8e:3a:82:73:
91:85:e5:7d:be:73:56:13:fa:7b:4f:08:77:7a:fd:
dc:f8:90:dd:73:5a:c9:bf:f5:ac:38:a1:67:91:05:
ac:9e:b3:b2:58:f3:2c:87:d6:e6:65:d1:78:06:79:
a7:4a:a1:f5:b4:e8:c9:8b:d5:57:c6:72:79:45:da:
ff:a6:73:2e:fa:3c:4f:59:3d:4f:5d:7a:be:a6:f0:
6e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C5:3B:B6:A7:D2:87:A4:B6:E4:D7:4C:4A:CA:95:1E:B5:05:A9:F4
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/0cU7tqfSh6S25NdMSsqVHrUFqfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:1600::/39
2a10:fa81:2700::/40
Signature Algorithm: sha256WithRSAEncryption
4b:c3:14:9c:21:74:17:ac:49:4e:47:66:48:c3:6a:45:2b:27:
50:12:a9:71:95:16:9a:73:67:d1:c0:4b:f5:e9:92:24:e1:d7:
71:57:1a:ab:88:85:e2:01:d1:e1:71:93:1e:4b:53:ce:04:18:
29:c9:0d:49:2e:f0:17:99:10:72:7f:fb:14:e9:ff:3f:84:5e:
0a:d2:e3:21:08:e3:bc:e5:3f:3d:53:3a:61:b7:89:35:fd:5c:
b2:0f:d6:71:0a:a6:4c:73:d1:01:4e:16:9e:b2:f2:1f:61:2d:
c5:9c:5e:07:45:44:ee:1b:b5:3a:37:84:65:3b:4f:5e:bf:1f:
cd:72:e6:11:19:d1:c7:24:4a:f9:9d:3b:08:57:04:0a:ab:04:
5e:19:b5:9f:48:e3:d9:d9:a1:32:3d:17:a7:96:c9:e5:d0:79:
53:6d:8e:72:aa:e7:28:91:1a:0c:a4:7a:63:ca:ac:a2:db:8d:
69:2c:81:29:94:4c:a7:ca:a0:cd:0d:6b:58:2b:11:d2:fb:d5:
4b:b2:8f:94:02:c3:62:0b:04:16:87:bf:40:32:c9:12:8c:18:
42:cb:3d:df:05:b9:a7:da:e4:01:8c:3f:e8:3b:6a:9d:92:1d:
53:3f:eb:ee:58:ec:d9:63:43:e5:93:53:8e:cf:55:64:01:5d:
a0:41:25:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:36:34 2026 by rpki-client