Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/k3qrxa7rySb4ACiAOH_CNrCSWrg.roa
File: k3qrxa7rySb4ACiAOH_CNrCSWrg.roa (raw, json)
Hash identifier: 181QOMDSxx84nRujpoiJmgyfAkSK00/Y0uJFtkSRF+4=
Subject key identifier: 93:7A:AB:C5:AE:EB:C9:26:F8:00:28:80:38:7F:C2:36:B0:92:5A:B8
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0AB6E4D427347031F652A999C1B5EC05A
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/k3qrxa7rySb4ACiAOH_CNrCSWrg.roa
Signing time: Wed 16 Sep 2026 18:15:27 +0000
ROA not before: Wed 16 Sep 2026 18:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219133
IP address blocks: 2a10:fa81:1100::/40 maxlen: 40
2a10:fa81:1100::/48 maxlen: 48
2a10:fa81:11f0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:39:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:6e:4d:42:73:47:03:1f:65:2a:99:9c:1b:5e:c0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 16 18:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=937aabc5aeebc926f8002880387fc236b0925ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:ce:38:08:5e:5c:4a:2a:5e:be:f2:86:9d:
4f:7c:f1:f7:83:8f:72:d7:15:13:16:4a:c5:8d:91:
59:37:fb:ce:55:c0:6a:51:34:f2:c8:cb:83:ef:26:
b8:ac:a7:9d:d2:46:be:31:3a:2e:80:cf:9f:35:c4:
be:ae:76:0a:9b:b4:c8:ed:89:a2:3e:b2:c0:a9:93:
8d:94:b4:f0:94:1a:8b:3a:b7:1c:7a:ff:c4:9b:10:
f8:ec:25:7f:15:22:39:08:19:61:5f:98:1a:b4:c6:
d0:9f:a6:56:7f:25:5d:73:f3:cf:21:b7:11:74:a7:
73:32:0d:da:82:bb:32:09:ae:34:ef:f2:1d:6e:cf:
cc:be:ee:75:bc:05:bf:61:09:19:3d:ac:f2:75:85:
ea:80:41:ef:ea:6b:a0:66:76:63:2c:63:7e:f4:88:
bb:38:f3:3c:10:d1:41:af:b6:d1:a5:bc:2a:44:5d:
ce:4c:07:b2:7c:b4:dd:f8:62:81:05:40:15:ca:e6:
29:d4:05:2e:14:c5:00:1c:6e:e3:77:6c:f0:67:2b:
1d:5e:9c:30:d1:d7:3e:07:c4:8b:ee:17:fd:9e:0a:
09:3d:58:b0:61:04:f1:c3:50:56:61:03:41:80:31:
67:28:6a:a7:99:81:5b:ad:71:ee:29:57:0a:10:62:
f4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7A:AB:C5:AE:EB:C9:26:F8:00:28:80:38:7F:C2:36:B0:92:5A:B8
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/k3qrxa7rySb4ACiAOH_CNrCSWrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:1100::/40
Signature Algorithm: sha256WithRSAEncryption
21:c6:14:3e:90:29:6c:8a:b3:bf:2b:d5:dc:74:b4:8d:a2:d0:
5b:57:d6:f1:b2:2e:e7:39:17:f6:15:3c:17:88:c4:4d:10:84:
1c:d7:86:f1:04:26:24:b6:d3:ef:ad:16:5a:c4:1c:64:de:00:
7f:19:1b:1b:7d:ad:42:c2:d3:18:bf:7c:37:b6:e3:8e:3a:49:
85:a2:79:71:24:14:fa:a4:dd:14:c5:41:1d:d9:59:77:1b:94:
8e:14:6a:3e:a7:7a:b2:bd:16:d4:08:37:cd:5b:a8:51:67:a5:
a4:15:7f:89:25:ff:44:5d:ef:c7:ba:55:7f:b5:ba:02:10:d8:
da:75:7f:e3:16:1a:c2:3f:3b:9e:b5:3c:3e:f5:c0:e7:4e:e9:
66:e5:06:94:7a:1c:4a:85:a5:39:c3:95:ee:44:71:53:f5:36:
71:74:c5:96:67:cb:43:9b:09:35:88:65:b9:7f:61:a5:2e:5e:
9d:cf:28:7c:cd:e2:c5:cb:30:0f:2f:3e:1d:47:fc:f0:bb:0b:
39:dd:6c:2d:3c:5a:3b:54:97:f8:31:4c:81:ed:8b:0b:ac:36:
7b:e1:ec:c3:b3:fc:2e:b9:0b:67:30:02:61:ff:e3:2c:d0:a9:
ad:90:a8:b3:c4:06:4f:a3:f5:06:64:2e:7e:1d:ab:a5:54:c4:
de:11:35:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:19:41 2026 by rpki-client