Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/iyICMtY4E7r5_JpPc1z3Z3Gp0A0.roa
File: iyICMtY4E7r5_JpPc1z3Z3Gp0A0.roa (raw, json)
Hash identifier: 2uL82X7gZuG+9O2FtOLG48vTmqKjm5STr/Huo4jqEB0=
Subject key identifier: 8B:22:02:32:D6:38:13:BA:F9:FC:9A:4F:73:5C:F7:67:71:A9:D0:0D
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019EBABB361453A3694A86D645140F4C4BA2
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/iyICMtY4E7r5_JpPc1z3Z3Gp0A0.roa
Signing time: Fri 12 Jun 2026 07:28:11 +0000
ROA not before: Fri 12 Jun 2026 07:28:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 2a10:fa81:580::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:bb:36:14:53:a3:69:4a:86:d6:45:14:0f:4c:4b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jun 12 07:28:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b220232d63813baf9fc9a4f735cf76771a9d00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:a9:89:77:4a:60:76:63:dc:87:07:4a:7c:
9c:c0:bc:f5:da:46:65:3b:e5:74:ae:4e:d1:c8:7d:
f3:20:df:78:ae:43:f3:de:32:15:a5:8a:1d:7f:c1:
a1:f6:ab:9d:25:7d:92:94:0e:4a:9a:c2:eb:ba:4d:
46:42:51:db:df:6c:16:69:7b:96:50:e5:95:3a:5c:
a8:28:ae:60:1f:6b:82:de:7d:09:ac:37:68:f0:af:
00:39:c0:47:23:f0:7e:e5:21:d6:f3:44:9b:be:22:
8e:90:51:81:45:95:4e:6d:bc:d4:89:83:01:15:65:
03:ee:20:41:c1:56:c1:53:7b:0e:8f:74:0c:0a:33:
96:da:c9:6a:e0:67:61:e1:12:c4:4e:50:a3:f8:4c:
ca:88:cd:f4:22:d3:a6:c0:75:10:2e:ea:42:16:37:
bb:f8:01:c3:43:eb:8e:0c:f2:48:a0:e0:7c:87:63:
f7:4a:24:f5:a2:55:59:f3:ad:f3:b7:0c:cf:c2:cc:
7b:d2:55:ce:6b:d8:ee:61:51:a8:48:98:6c:89:95:
fc:81:69:76:1c:76:a9:34:a5:7c:b9:fe:04:fc:f8:
83:d2:6b:a3:d4:34:c1:96:a2:72:45:ce:23:0e:01:
2f:03:f8:9b:85:82:6d:98:36:05:9d:e0:19:6f:c0:
16:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:22:02:32:D6:38:13:BA:F9:FC:9A:4F:73:5C:F7:67:71:A9:D0:0D
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/iyICMtY4E7r5_JpPc1z3Z3Gp0A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:580::/48
Signature Algorithm: sha256WithRSAEncryption
02:13:70:b0:45:77:02:ae:79:49:5b:ad:f0:45:ce:0d:ea:8c:
0e:a0:2f:96:e5:fc:10:07:12:9d:73:77:55:98:ad:cb:52:cc:
46:21:51:f5:ac:e9:f4:db:05:68:28:63:17:9a:ee:85:d9:f0:
fa:43:c1:9c:2a:35:b8:f5:6f:ae:1c:08:19:2e:e0:48:5f:61:
d7:b0:96:62:ea:f1:0e:76:72:8f:58:9c:36:54:15:3d:f6:fd:
4b:35:29:a1:2e:64:6f:ff:2f:dc:3d:e1:3c:40:22:5b:6d:7f:
ff:1f:f2:d7:f7:5a:5a:5d:f4:41:88:8d:04:f6:4e:93:1a:30:
0d:7a:c6:60:49:1a:77:e1:8a:f2:e0:70:42:26:7a:a4:c9:46:
8f:3a:63:d3:9b:51:b4:3c:32:29:38:52:15:1b:a8:8a:95:e9:
43:11:ee:23:b4:55:5b:9b:d0:ae:1a:37:9f:67:a4:5e:2f:df:
0c:54:e7:dd:99:d7:54:35:8c:c0:5c:ea:2a:d7:6c:6d:93:97:
6e:12:d1:91:4f:34:18:6f:db:ce:7a:28:54:03:03:4e:49:9d:
e9:84:3d:f4:e6:11:bd:e1:54:49:c5:5b:a3:de:e2:e9:b9:0e:
3a:de:5f:f2:a4:f6:31:a4:d0:dd:4d:a2:75:e4:a9:32:79:df:
bc:6a:a4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:07:18 2026 by rpki-client