Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/oo_2AoqSGFoowtvQ-2w3ZmClHUE.roa
File: oo_2AoqSGFoowtvQ-2w3ZmClHUE.roa (raw, json)
Hash identifier: YcCX6ynjDCTkKSghayX99zla725lWjUkNxxwOx+1gKI=
Subject key identifier: A2:8F:F6:02:8A:92:18:5A:28:C2:DB:D0:FB:6C:37:66:60:A5:1D:41
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0B12D3D98FBC42C3476440B8CA6574D51
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/oo_2AoqSGFoowtvQ-2w3ZmClHUE.roa
Signing time: Thu 17 Sep 2026 21:02:07 +0000
ROA not before: Thu 17 Sep 2026 21:02:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2a10:fa80:3::/48 maxlen: 48
2a10:fa80:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:2d:3d:98:fb:c4:2c:34:76:44:0b:8c:a6:57:4d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 17 21:02:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a28ff6028a92185a28c2dbd0fb6c376660a51d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:76:66:71:96:b9:c7:35:6a:1d:cb:38:2a:
f4:53:5c:91:4f:b0:5d:b2:83:4b:60:06:5e:1e:a1:
17:57:42:36:ac:25:8a:f6:0c:81:bd:14:50:64:fe:
d2:72:7a:7f:e5:d3:04:95:b8:44:d8:92:91:8c:fe:
3b:fe:30:92:5d:92:f0:43:3b:ec:b5:4e:ec:b6:d9:
c4:a2:f2:d9:e4:62:9e:aa:f5:a9:d2:92:e9:eb:b7:
d3:ef:a0:95:b4:cd:ec:46:c1:1e:9e:f8:43:04:da:
05:24:35:8a:e8:92:39:07:b0:52:52:a9:6f:66:8d:
c9:fe:2b:c6:9a:a9:df:a1:fb:e6:77:62:60:ec:2a:
6d:13:01:18:d6:ec:2f:38:ff:d8:be:06:e8:01:e8:
13:9b:f6:36:5b:f3:90:0c:67:9e:dc:70:6c:a4:87:
c7:bb:c3:b9:90:67:2b:cc:0b:79:71:19:35:a1:08:
2e:fb:ec:c8:fe:99:93:8d:75:ff:02:a7:c3:f1:6d:
47:21:02:ad:87:74:21:36:0e:f3:ae:9e:72:4e:2c:
10:81:03:13:79:f0:31:e2:e9:ec:b9:65:7d:eb:71:
61:53:ea:8d:1f:34:01:c1:48:77:94:d2:f7:99:0f:
24:69:fe:78:00:3f:e3:71:0a:1b:ba:6a:c2:bd:5c:
ac:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8F:F6:02:8A:92:18:5A:28:C2:DB:D0:FB:6C:37:66:60:A5:1D:41
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/oo_2AoqSGFoowtvQ-2w3ZmClHUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:3::/48
2a10:fa80:19::/48
Signature Algorithm: sha256WithRSAEncryption
39:2a:91:f7:0c:99:57:8c:e2:65:e4:9b:ad:bf:10:88:d0:d7:
c0:c6:c8:ce:e2:18:31:6f:24:0d:e4:58:31:0d:c3:2d:d0:e6:
c1:ce:3e:18:83:3d:6e:ee:0d:90:8f:b6:ff:6c:6f:bc:51:ca:
e5:eb:05:a5:58:76:11:1b:36:68:9e:c1:e5:9d:45:3a:9f:c8:
63:59:73:95:dc:05:4c:b8:d0:fa:90:bc:e6:80:91:2a:35:3f:
99:59:33:37:b3:a1:58:7c:ef:55:6b:c9:19:d4:cd:e1:1b:2f:
45:3b:f1:a9:8a:25:5b:74:fb:36:b9:9c:dd:34:b4:52:a0:e5:
7c:ff:ba:99:5f:16:f6:0a:77:f4:31:b9:82:6a:de:9b:d2:82:
de:b0:24:d5:02:78:06:15:06:05:8d:22:3a:ff:b8:ed:25:01:
9c:48:dc:d1:f9:3b:e0:e6:59:cc:5d:fc:0f:a8:54:77:7f:f7:
13:a9:aa:bd:69:54:e1:6a:47:6e:f8:64:87:f3:eb:b7:18:48:
b1:48:91:45:ab:f0:79:9d:e7:4d:3c:bb:41:db:96:d2:21:54:
d9:d5:fc:77:2a:aa:5e:ba:5c:de:08:41:a5:35:43:8c:7d:2a:
89:46:3f:c6:7a:24:f4:46:27:51:84:76:4b:99:12:61:94:6c:
77:d0:5e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:37:32 2026 by rpki-client