Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/a0aDU4a4xZXzCaPJpS-t6rp3SZE.roa
File: a0aDU4a4xZXzCaPJpS-t6rp3SZE.roa (raw, json)
Hash identifier: nev3ZlkZIDciJtDsi+7x13JPGR4yMU3qauTuUIZEkIk=
Subject key identifier: 6B:46:83:53:86:B8:C5:95:F3:09:A3:C9:A5:2F:AD:EA:BA:77:49:91
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019D79B506EEF8EC4028A165DF8C5D49B29C
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/a0aDU4a4xZXzCaPJpS-t6rp3SZE.roa
Signing time: Fri 10 Apr 2026 23:23:20 +0000
ROA not before: Fri 10 Apr 2026 23:23:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205941
IP address blocks: 2a10:fa82::/48 maxlen: 48
2a10:fa82:1::/48 maxlen: 48
2a10:fa82:2::/48 maxlen: 48
2a10:fa82:f600::/40 maxlen: 40
2a10:fa82:f700::/40 maxlen: 40
2a10:fa82:f800::/40 maxlen: 40
2a10:fa82:f900::/40 maxlen: 40
2a10:fa82:fa00::/40 maxlen: 40
2a10:fa82:fb00::/40 maxlen: 40
2a10:fa82:fc00::/40 maxlen: 40
2a10:fa82:fd00::/40 maxlen: 40
2a10:fa82:fe00::/40 maxlen: 40
2a10:fa82:fea0::/48 maxlen: 48
2a10:fa82:fef0::/44 maxlen: 44
2a10:fa82:ff00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:79:b5:06:ee:f8:ec:40:28:a1:65:df:8c:5d:49:b2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Apr 10 23:23:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b46835386b8c595f309a3c9a52fadeaba774991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:aa:99:d8:8f:5e:fe:33:b7:73:04:65:48:
04:5f:75:3e:e8:38:3d:c9:07:33:e8:4c:df:58:ed:
e1:c6:9f:41:01:80:e3:01:4b:f3:6b:af:3a:26:74:
9c:f6:b5:10:4d:12:17:83:73:d3:0d:b7:97:b3:e8:
5c:3f:64:aa:f7:59:db:c5:15:4c:b6:6e:d7:ac:78:
eb:71:fa:99:60:4b:f6:c0:6d:cc:be:ba:1c:e5:e2:
e4:40:8d:59:c0:8c:61:26:c2:fb:c1:c7:e9:40:af:
de:d5:fc:d6:2e:21:ac:e0:9d:ab:18:61:55:75:3a:
11:0c:23:28:c6:42:03:83:91:34:4c:cc:cf:1a:2b:
7c:48:1f:44:c4:35:6c:5e:6b:eb:e1:c7:41:34:a8:
4a:b9:53:cb:2c:25:32:6f:70:71:d5:69:97:86:a5:
a7:3d:4b:15:d0:a2:8a:59:ae:ec:a3:ce:c7:65:1d:
bb:f9:bc:a6:dd:bb:1f:e9:98:0e:c6:99:6d:62:3a:
cd:50:6b:47:4d:8f:45:9a:08:c5:d5:25:45:55:30:
06:62:3a:65:ae:52:2e:0b:d4:18:4e:30:57:9c:5f:
3a:1c:b1:eb:26:59:bb:76:bb:e3:ac:90:49:0f:64:
48:90:30:a3:f6:35:38:c6:9d:d4:d2:af:de:70:87:
59:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:46:83:53:86:B8:C5:95:F3:09:A3:C9:A5:2F:AD:EA:BA:77:49:91
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/a0aDU4a4xZXzCaPJpS-t6rp3SZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa82::-2a10:fa82:2:ffff:ffff:ffff:ffff:ffff
2a10:fa82:f600::-2a10:fa82:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
61:54:12:be:d5:a9:01:4b:86:1e:5f:d5:9d:c1:3b:d1:dd:9b:
6d:16:a4:0a:49:12:c3:64:ee:fe:c1:45:29:11:ab:d5:6a:54:
3b:83:a8:2f:51:96:76:17:0b:03:b2:88:1f:98:2c:e2:9c:d6:
d4:3e:83:cd:43:1d:61:2b:f7:30:b1:ca:5c:0c:99:63:b0:b9:
75:07:1f:1a:b8:08:32:69:37:eb:a5:85:e8:5e:96:48:00:50:
29:ab:76:56:bd:2a:10:fa:18:98:61:06:99:63:1f:96:b5:23:
6f:f3:bb:e3:ff:80:ea:b9:3e:05:d3:0d:ef:bf:bc:fd:8e:9e:
a7:da:a4:92:19:81:52:3a:ea:b4:7b:7d:ca:82:5c:65:80:d3:
8d:6b:aa:ce:82:27:96:2a:17:96:80:14:de:a1:19:e8:c4:19:
b5:9e:b5:a7:bb:c7:98:4b:97:19:d0:a4:63:f1:ac:4e:93:e6:
f9:21:ea:72:ed:ba:27:07:b3:50:96:95:0c:79:30:9f:1a:41:
82:02:90:6f:a8:33:1e:b3:e9:86:68:c7:b4:28:1b:53:b9:95:
14:0c:3e:f4:d0:c7:8e:4f:3c:73:c6:be:34:dd:fc:e9:c8:81:
55:5e:f0:11:2d:7a:6b:dc:29:73:9f:26:9f:22:f9:e3:a4:5b:
da:b4:f3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:18:11 2026 by rpki-client