Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/UaTjDu9o7HyLqmA4OUwBUeZdWMI.roa
File: UaTjDu9o7HyLqmA4OUwBUeZdWMI.roa (raw, json)
Hash identifier: 0IwSOGBNcU9nVxKfZCyR4sV4urrot1MMGxHaLMwwtSo=
Subject key identifier: 51:A4:E3:0E:EF:68:EC:7C:8B:AA:60:38:39:4C:01:51:E6:5D:58:C2
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0779C810E79DAAC1DA53378C906BB6568
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/UaTjDu9o7HyLqmA4OUwBUeZdWMI.roa
Signing time: Sun 06 Sep 2026 16:45:40 +0000
ROA not before: Sun 06 Sep 2026 16:45:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2a10:fa80:18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:77:9c:81:0e:79:da:ac:1d:a5:33:78:c9:06:bb:65:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 6 16:45:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51a4e30eef68ec7c8baa6038394c0151e65d58c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:30:6a:ee:f5:48:92:75:86:76:31:9b:c1:2e:
50:9a:a4:2a:d8:27:d7:fa:d7:67:17:55:f2:07:aa:
39:4b:b7:49:1f:16:27:c3:09:aa:e8:58:67:35:9c:
94:c4:03:9b:36:a8:1a:ff:76:5d:f2:cf:5c:98:ba:
c0:36:b3:31:23:92:f7:ac:50:41:94:f0:ec:ed:d0:
85:03:0e:99:9c:86:3d:a7:00:bd:89:33:c6:ef:0f:
ef:54:da:fa:e7:e9:2b:6e:39:1e:21:ce:9e:24:c4:
b7:39:57:01:91:46:95:f7:69:a0:b8:82:b6:1b:88:
fe:62:4b:a5:e5:6a:d0:d5:20:f8:83:6e:72:f3:21:
92:35:a4:8f:e2:4d:82:52:a9:d6:c0:d2:51:a3:9e:
30:5a:fe:39:ee:75:1a:93:e2:30:c2:b7:ab:96:1d:
4a:b3:c4:c9:c3:6a:84:fd:01:fd:66:79:03:93:a1:
10:c1:d1:2b:ad:9f:f6:e9:d0:03:a1:c6:5d:fe:11:
91:6d:bc:2f:6f:2d:5a:e7:75:ae:59:c8:2b:98:66:
5d:17:6f:e7:f8:c5:bf:73:fe:10:5d:fc:bb:1f:06:
e8:32:b3:21:c2:b7:4b:34:9f:82:38:0f:3d:69:b7:
cd:3a:27:87:e1:10:bd:08:7a:8e:4e:ef:af:5c:f8:
94:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A4:E3:0E:EF:68:EC:7C:8B:AA:60:38:39:4C:01:51:E6:5D:58:C2
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/UaTjDu9o7HyLqmA4OUwBUeZdWMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:18::/48
Signature Algorithm: sha256WithRSAEncryption
15:d2:e8:f8:0f:85:37:50:07:d9:b8:de:08:43:1a:3d:aa:82:
93:ed:a9:96:a6:86:7c:08:a4:77:8c:71:28:8b:1c:3a:cb:a2:
cf:40:85:d5:ee:7d:47:2c:d1:8b:8e:c2:b5:e3:35:c8:33:ef:
71:48:72:d7:92:c3:92:21:e1:db:10:ab:00:20:e1:16:22:aa:
05:f4:8e:d2:1f:14:9c:09:a0:3e:e0:6f:f9:92:83:c5:f3:76:
23:84:8f:b8:90:de:8c:65:e3:84:a2:19:91:d2:fc:a4:0f:55:
bd:2d:1e:5f:e6:b9:62:04:89:3f:98:e2:2b:8f:bf:bb:b8:01:
b7:50:cd:a6:7c:53:10:ab:b9:67:01:ba:fb:c7:39:59:a3:a2:
f2:f8:49:fa:81:2d:38:79:f8:af:9e:9e:e2:b4:eb:5c:8e:69:
75:80:73:03:7f:ae:9c:9e:11:fa:ea:ad:02:5c:eb:ff:12:54:
dc:62:d8:c2:24:5d:6b:05:72:e7:6a:6a:ad:55:69:1f:6d:fe:
2d:ee:ad:0e:f0:d3:5c:12:c7:c2:1c:47:19:c7:e8:b9:08:d9:
04:1c:71:1d:30:be:a9:5b:49:3c:90:60:d3:00:22:51:62:ba:
0f:be:bb:a4:e3:67:ab:97:9c:44:c5:a4:96:58:ec:b6:f9:94:
b4:8b:3c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:28:02 2026 by rpki-client