Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/38rcqlCxTmTCiexU65toKsKAomw.roa
File: 38rcqlCxTmTCiexU65toKsKAomw.roa (raw, json)
Hash identifier: JWe4RHCF7HOpr1mAiERgSyDQo+90xw3l1uTiRUiQ08c=
Subject key identifier: DF:CA:DC:AA:50:B1:4E:64:C2:89:EC:54:EB:9B:68:2A:C2:80:A2:6C
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0BEBE0DDCE58552899749A1E3E717F670
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/38rcqlCxTmTCiexU65toKsKAomw.roa
Signing time: Sun 20 Sep 2026 12:15:21 +0000
ROA not before: Sun 20 Sep 2026 12:15:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218991
IP address blocks: 2a10:fa81:1a03::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:be:0d:dc:e5:85:52:89:97:49:a1:e3:e7:17:f6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 20 12:15:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfcadcaa50b14e64c289ec54eb9b682ac280a26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:05:29:aa:e1:2c:40:59:1c:f0:fa:f6:ec:26:
8f:6f:09:9e:27:29:6d:6e:dc:53:76:57:74:8c:35:
cc:3a:f5:56:59:4f:6f:b6:3d:d0:15:ad:e3:ab:57:
32:a5:85:93:2f:59:12:7d:29:fc:f8:15:33:a5:2f:
82:aa:f3:48:64:48:69:00:3f:db:b1:a6:fa:a1:eb:
5e:58:4b:92:69:4d:15:98:3d:ac:fc:9d:58:33:2f:
37:ac:bc:dc:0a:55:e2:ea:71:b3:16:67:12:76:14:
f2:04:00:bd:80:2e:a9:91:80:5b:30:04:0c:f0:61:
0c:e0:cb:6d:30:41:ea:6c:05:a8:71:9b:89:b3:48:
44:88:95:bc:1f:fe:42:53:2e:0d:bc:e1:6d:e6:98:
42:b3:a6:09:c3:da:ab:72:23:75:03:3c:06:1c:6a:
24:ca:2f:23:50:1a:02:05:7c:da:93:f5:0a:2a:c4:
2f:99:37:63:09:c0:d5:22:f6:2c:7d:11:eb:a7:fb:
e6:7e:92:9a:e6:21:8c:1d:be:d5:7c:c3:93:22:26:
64:05:81:ed:4b:c1:a8:71:b9:59:db:ae:93:4a:9c:
0f:b6:dc:3e:a7:1e:cc:31:51:65:a0:3e:c4:00:94:
86:94:11:71:4c:6c:a6:7a:0c:bb:1f:59:01:3b:5c:
43:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CA:DC:AA:50:B1:4E:64:C2:89:EC:54:EB:9B:68:2A:C2:80:A2:6C
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/38rcqlCxTmTCiexU65toKsKAomw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:1a03::/48
Signature Algorithm: sha256WithRSAEncryption
71:00:84:a7:1c:c5:d9:84:ac:c9:e9:50:b9:b3:be:52:57:96:
94:8e:af:e6:03:ad:31:38:2d:ea:77:94:1c:f5:61:07:c1:95:
38:d9:6a:51:e9:61:22:27:e1:22:db:6a:7d:4b:fe:07:48:dd:
3e:0a:de:92:29:89:cf:41:21:b1:00:70:71:2c:88:81:39:59:
89:ed:c3:2a:fc:97:96:95:78:93:2c:a7:ca:71:6e:02:da:ea:
ab:46:cf:be:20:f5:1d:6c:48:f7:9d:95:2c:49:26:65:37:0f:
58:73:45:9a:8e:c8:70:61:09:aa:1e:11:76:6f:ec:56:97:19:
e3:b0:7e:3c:c4:a6:8b:7f:f5:b3:0f:f5:af:ba:eb:aa:64:da:
c4:3c:c3:58:18:65:35:bb:07:87:07:5f:0c:87:59:ca:66:31:
7f:73:1f:20:3e:bd:1c:d2:54:9c:eb:33:fe:4c:28:5c:a1:b8:
72:13:44:53:e5:28:82:9a:0c:48:b1:7b:7d:4b:66:e8:cc:18:
d1:95:f1:c4:8d:cd:b5:45:97:04:7c:f2:7c:06:85:e5:4a:88:
54:ac:05:e3:47:06:15:44:f1:9f:9e:e5:a3:cf:2d:ce:13:f4:
b9:a2:22:42:aa:9b:3e:3b:7e:3c:68:2e:63:04:b4:3a:0b:de:
de:6d:2f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:02:15 2026 by rpki-client