Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/RNLIW3hNnTGJuvbWTaAAnYp3K44.roa
File: RNLIW3hNnTGJuvbWTaAAnYp3K44.roa (raw, json)
Hash identifier: gERWyWJMfRfW8fWd/wbI4mjSjkjPsLUe1O/GVZnxuUM=
Subject key identifier: 44:D2:C8:5B:78:4D:9D:31:89:BA:F6:D6:4D:A0:00:9D:8A:77:2B:8E
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A1036D339A134FC092F3613175ABB8AFDA
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/RNLIW3hNnTGJuvbWTaAAnYp3K44.roa
Signing time: Sat 03 Oct 2026 20:20:50 +0000
ROA not before: Sat 03 Oct 2026 20:20:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213796
IP address blocks: 2a10:fa81:2400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 06:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:6d:33:9a:13:4f:c0:92:f3:61:31:75:ab:b8:af:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Oct 3 20:20:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44d2c85b784d9d3189baf6d64da0009d8a772b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:9f:4b:01:27:e0:e8:db:a7:3d:01:aa:3b:
8a:e3:5d:b8:ac:18:b0:de:ab:47:35:b3:4c:d3:3f:
53:60:f4:00:76:04:70:41:27:3d:d3:8b:ca:40:a6:
bb:f5:ba:e9:78:a0:42:52:f0:71:0a:42:72:82:85:
13:d7:4e:d9:44:94:26:96:e2:64:89:66:4a:ee:90:
21:8a:ea:ac:dc:c9:cb:c9:61:5e:ed:01:20:8b:92:
73:c1:bb:0d:47:41:e1:b6:4e:76:c7:57:64:c8:22:
93:fa:65:d6:34:58:1b:1f:7a:2f:32:47:ba:d5:fd:
da:1c:3a:ad:99:cc:0d:b9:30:51:2c:c9:91:05:95:
57:38:f9:e5:80:f8:fe:75:d4:14:12:b8:68:92:ad:
db:10:e9:ae:63:f6:51:cd:c4:ab:22:db:ca:3f:e7:
c8:38:c4:3e:2c:3f:43:83:b9:cb:d2:74:a6:85:73:
ac:af:bf:17:a6:7e:0f:59:9c:ef:43:a4:48:06:3d:
63:70:a1:d2:82:b8:dd:f5:a2:ed:1e:c7:52:42:09:
32:c3:c7:39:9f:e0:f5:f8:2a:95:86:f7:96:03:9a:
0b:1a:f1:d8:05:cd:2e:8b:4f:01:c7:cd:46:ec:2d:
8f:d0:44:e1:87:c9:df:f5:59:17:49:fe:2b:ec:c5:
86:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D2:C8:5B:78:4D:9D:31:89:BA:F6:D6:4D:A0:00:9D:8A:77:2B:8E
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/RNLIW3hNnTGJuvbWTaAAnYp3K44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:2400::/40
Signature Algorithm: sha256WithRSAEncryption
37:d8:3f:ff:be:9a:ad:d5:e4:5c:85:64:af:bc:d6:9f:b0:4c:
74:e6:b0:3e:ae:9d:cb:3d:33:2b:02:37:b5:19:b0:0c:40:e8:
96:48:c7:c9:6d:6d:47:a5:02:e5:92:23:63:01:7e:3d:83:3d:
23:18:2f:ca:3d:60:cf:8e:9e:a1:6f:11:d7:08:56:07:4a:e3:
96:8e:4c:c7:3c:1a:7f:f1:8c:18:fe:60:0a:0f:8b:7c:ec:e4:
83:ce:27:4e:28:87:fd:dc:21:66:c4:ff:d8:b1:4f:4f:72:64:
ef:b3:36:c6:61:75:6a:3a:54:da:40:6d:dc:d3:cf:53:7e:72:
6f:9a:e4:7c:0c:02:11:41:c4:9c:9a:f7:49:8f:98:42:fb:47:
16:5d:a3:0a:32:86:a6:3d:b9:3a:38:b4:fa:f5:64:09:c2:88:
29:e5:45:df:95:12:a2:d4:fa:8c:a4:73:ad:c2:38:77:b1:b3:
b0:89:f3:7e:e0:13:46:de:ff:57:01:10:8e:04:27:a2:0d:8e:
68:6b:1a:4b:ef:7e:95:92:56:c7:0f:ad:5f:f1:00:62:45:af:
da:76:63:7d:6b:6a:8e:51:e4:a8:2a:df:7d:79:8c:b3:b0:b8:
b4:2c:8c:0a:c2:97:6a:e5:93:2a:47:37:6a:3a:14:ec:82:b3:
97:fe:db:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:38:23 2026 by rpki-client