Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/s90JTpptPRRwTofAYbXpEvOcXoM.roa
File: s90JTpptPRRwTofAYbXpEvOcXoM.roa (raw, json)
Hash identifier: zFF9N2ImdcEsimEq5wwlHKPHlI0jvd02SQBr8GaVmDo=
Subject key identifier: B3:DD:09:4E:9A:6D:3D:14:70:4E:87:C0:61:B5:E9:12:F3:9C:5E:83
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019FAACCC5472A3572F52AA29AF45F5AF457
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/s90JTpptPRRwTofAYbXpEvOcXoM.roa
Signing time: Tue 28 Jul 2026 22:16:14 +0000
ROA not before: Tue 28 Jul 2026 22:16:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53667
IP address blocks: 2a10:fa81:1200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:cc:c5:47:2a:35:72:f5:2a:a2:9a:f4:5f:5a:f4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jul 28 22:16:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3dd094e9a6d3d14704e87c061b5e912f39c5e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:99:b6:ef:83:e9:30:cb:a1:78:da:7f:eb:
f2:bb:24:6e:c0:2e:a2:0f:00:97:36:7b:a9:0d:6c:
3b:b0:a3:05:50:e2:83:7c:3d:34:7d:b7:d1:48:8d:
3e:55:8e:cd:5a:1c:45:44:b5:ce:7c:76:71:71:c8:
6d:31:6b:e7:fa:8d:fb:cf:e9:34:d4:6e:51:25:86:
b7:f4:a0:4b:16:7e:da:a7:60:83:3e:4b:93:0b:e8:
9c:6f:df:3d:64:d6:03:5f:06:57:02:1c:67:56:85:
c8:1d:6a:eb:96:3b:f0:4c:d9:75:1c:c5:18:9b:21:
ad:3f:81:43:0d:c0:7d:4b:90:38:11:30:d6:38:21:
05:19:37:c1:66:2f:1d:4d:be:ce:b2:48:b3:81:cc:
a2:98:3b:65:da:1a:bf:a1:9e:42:1c:b1:18:0f:e0:
0f:c0:ca:c4:20:a9:de:90:24:c6:96:1e:b4:46:2b:
c6:eb:4f:f9:10:0e:09:5f:af:60:bf:1e:cc:26:3c:
5b:9f:a9:66:83:bd:4f:e3:9a:59:84:a5:17:c8:fc:
94:d8:97:88:9c:18:2e:77:15:ba:cc:81:ff:7f:3c:
d5:a2:57:4e:52:0f:8d:88:0d:ee:a0:46:5c:e6:48:
21:1b:4c:63:2c:1a:54:52:3e:f4:7e:2b:29:86:63:
2d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DD:09:4E:9A:6D:3D:14:70:4E:87:C0:61:B5:E9:12:F3:9C:5E:83
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/s90JTpptPRRwTofAYbXpEvOcXoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:1200::/40
Signature Algorithm: sha256WithRSAEncryption
2e:f2:f6:93:53:7e:39:8d:c7:8a:a3:d2:30:1a:23:85:92:d8:
6b:47:ec:11:4a:25:22:f1:87:cd:f2:37:25:b0:6b:52:50:ee:
e9:7a:8e:4b:ec:c9:84:e4:d2:ac:6c:80:c0:74:fe:b0:f2:2b:
54:bb:8a:6a:87:99:93:1e:e2:ba:92:97:f0:39:a0:44:b3:51:
e8:74:1e:93:45:67:9a:46:33:c0:b4:13:38:0d:58:5d:e5:08:
bc:94:21:7b:6d:d7:32:c8:43:12:8a:99:77:92:c1:a1:b7:6a:
f1:6b:21:ab:c3:c3:60:2a:7c:f9:a5:f8:cd:32:3f:8a:fd:02:
07:87:36:62:bb:25:71:ab:53:1e:9f:40:03:01:8c:73:c6:54:
0a:71:3d:fd:38:d1:0f:2b:f2:da:2b:b3:01:a8:13:98:e5:57:
35:b1:1d:7d:97:1f:26:b0:be:be:e1:f9:db:d0:ed:3d:07:f1:
6a:e1:72:d7:1d:c5:f1:9e:29:c2:1e:e6:f6:44:91:12:a3:4b:
39:fa:94:1c:33:5b:72:94:de:3d:52:8d:88:73:ef:56:2c:99:
21:c9:bb:8a:08:c2:ec:52:c0:d4:83:ee:7b:93:03:df:c2:de:
fc:4c:87:2a:85:99:45:55:e3:9d:3c:07:4e:ef:5b:8e:52:4c:
ca:de:a2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:05:51 2026 by rpki-client