Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/qolh76SaiEk_7t3F-1SVdgePlvs.roa
File: qolh76SaiEk_7t3F-1SVdgePlvs.roa (raw, json)
Hash identifier: +/VLzsgJwBOI1EQFmHYHeZ5F8TKO/RAO7cptqm2VQ/0=
Subject key identifier: AA:89:61:EF:A4:9A:88:49:3F:EE:DD:C5:FB:54:95:76:07:8F:96:FB
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0BEB858459C0DE771E58D6C24B4EA6735
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/qolh76SaiEk_7t3F-1SVdgePlvs.roa
Signing time: Sun 20 Sep 2026 12:09:07 +0000
ROA not before: Sun 20 Sep 2026 12:09:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202260
IP address blocks: 2a10:fa81:1a06::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b8:58:45:9c:0d:e7:71:e5:8d:6c:24:b4:ea:67:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 20 12:09:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa8961efa49a88493feeddc5fb549576078f96fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:0c:c6:59:66:13:cb:5a:c3:f0:03:b2:12:
17:f1:3b:38:90:b0:86:fd:14:11:71:8f:d1:86:aa:
53:68:ae:99:c2:6e:2b:ee:43:08:b6:23:f4:e6:7d:
ef:2b:b8:aa:8a:78:de:f2:74:2c:a0:a0:af:f9:8a:
1f:a3:56:88:c3:3d:49:29:ae:f4:1a:8e:59:3c:9d:
94:f0:78:79:66:9d:46:14:e6:9f:cc:f8:7c:5e:eb:
e8:b0:a4:5d:a2:33:70:da:b3:64:24:e4:54:fd:48:
eb:10:29:af:db:d4:79:aa:d6:0c:e7:06:59:2a:6a:
5f:1b:eb:54:c9:73:f9:df:d8:d6:65:d2:f1:f8:e3:
79:9c:8b:1c:12:d0:50:c4:7e:3c:99:45:2c:5c:c1:
8e:85:21:2f:40:62:9e:8e:89:43:47:a1:97:09:89:
a9:50:60:97:63:97:7f:b6:8c:6c:d2:07:53:86:8d:
d8:fa:eb:a8:2a:13:f9:25:8e:4b:c9:61:8e:c7:68:
bf:f4:44:e6:96:01:c5:e7:6f:56:53:c6:94:e8:6a:
df:21:a1:43:45:d3:ad:dc:4a:41:ed:a6:19:a5:bf:
a4:a3:22:56:fa:83:ce:b0:2f:5e:ff:d1:2a:7f:a7:
97:8f:cd:ae:c9:ba:66:00:d9:06:3d:49:c0:83:83:
34:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:89:61:EF:A4:9A:88:49:3F:EE:DD:C5:FB:54:95:76:07:8F:96:FB
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/qolh76SaiEk_7t3F-1SVdgePlvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:1a06::/48
Signature Algorithm: sha256WithRSAEncryption
1c:30:74:1d:17:a0:40:32:b8:8c:5d:89:6f:70:22:1a:46:8c:
8c:d5:1a:2d:40:83:dc:15:5e:9e:ef:15:2b:6e:ab:1a:f5:a5:
d2:ad:07:5e:91:de:62:22:13:03:6a:d1:6c:b2:31:fc:30:48:
58:8d:fa:a9:8c:de:73:b2:3e:72:c7:6d:2a:4a:59:a1:70:1d:
e3:ff:d9:a9:fd:a1:13:80:95:e0:95:9a:94:7f:d9:06:f3:a1:
a4:17:bd:ba:a4:4a:52:5c:d0:36:c3:57:57:32:58:87:c8:45:
ca:0b:fc:0f:b2:16:0d:f1:64:18:f2:db:d3:9e:a4:52:37:18:
f0:0a:49:4a:66:f7:92:04:7f:5f:27:e1:48:62:81:18:5b:57:
68:02:89:20:4c:ac:d5:f7:d4:6d:5c:48:d0:c5:e8:b1:49:2d:
d9:85:59:94:30:9d:7d:51:4f:e0:b7:2b:6d:2b:7a:66:0a:b3:
8a:ce:b1:d1:fa:19:91:77:7f:8e:8e:aa:5b:7b:94:1d:e3:e5:
a7:b0:24:73:98:29:23:f5:69:6c:fe:2a:18:b8:3c:a8:1d:bc:
7d:5a:9d:70:cb:b4:5a:0e:bd:80:a2:84:02:88:3d:55:3c:4b:
36:49:30:16:9f:08:3c:57:2f:7f:cf:86:71:d8:6d:30:79:83:
e2:64:a1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:21:31 2026 by rpki-client