Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/w2E2CNM0QfUHEyNWkKSRP_z3LoA.roa
File: w2E2CNM0QfUHEyNWkKSRP_z3LoA.roa (raw, json)
Hash identifier: YuLmGdguFnu91ItUEdc7+mnM3tvXQxE4h58dZ/gyabA=
Subject key identifier: C3:61:36:08:D3:34:41:F5:07:13:23:56:90:A4:91:3F:FC:F7:2E:80
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019E73ABEB82E3A88740A6BD7E8692C2D0C7
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/w2E2CNM0QfUHEyNWkKSRP_z3LoA.roa
Signing time: Fri 29 May 2026 12:18:27 +0000
ROA not before: Fri 29 May 2026 12:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a10:fa80:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:ab:eb:82:e3:a8:87:40:a6:bd:7e:86:92:c2:d0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: May 29 12:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3613608d33441f50713235690a4913ffcf72e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8c:4f:13:88:ee:2a:31:ac:6d:06:e0:b2:d7:
17:bf:3a:1e:34:73:9f:70:59:f8:34:05:3f:02:9a:
c3:c3:93:eb:4e:dc:6b:71:78:d1:bc:46:c1:39:df:
31:13:ac:d0:65:18:01:8a:3a:e3:19:44:99:c1:d6:
5d:81:0d:af:c8:dc:39:42:1a:73:b0:49:e6:fd:04:
ac:cd:7d:46:c4:b6:1a:a3:ed:61:58:03:05:4b:70:
69:f6:28:d8:0b:03:30:7a:c1:2c:dc:60:7c:34:33:
9a:11:fa:6e:11:bd:37:2c:70:6e:8b:3c:f5:99:66:
14:a3:b6:ca:b4:2a:0e:64:f8:26:d0:42:74:09:bf:
47:c9:3c:2b:23:d8:ea:f6:2b:d7:c9:3e:1f:1c:50:
23:d1:c3:28:01:7d:60:75:e1:c7:78:cb:6e:4e:5d:
9a:28:2c:30:69:86:ac:10:86:a5:99:8f:da:8f:9b:
2f:96:d1:38:21:a3:b0:2c:55:71:81:bc:e3:65:5b:
fa:48:ba:d7:fe:01:75:a6:73:b0:e6:0e:4b:5b:42:
f4:b0:78:c7:3d:3e:77:51:43:03:ad:0d:28:5d:2e:
d3:bf:e1:c9:4b:c2:f7:3a:9b:47:cc:20:6b:0c:83:
9e:71:fe:48:a4:c0:71:93:e2:ec:7c:7b:24:82:da:
0f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:61:36:08:D3:34:41:F5:07:13:23:56:90:A4:91:3F:FC:F7:2E:80
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/w2E2CNM0QfUHEyNWkKSRP_z3LoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:3::/48
Signature Algorithm: sha256WithRSAEncryption
70:47:86:41:aa:4a:c1:ce:06:24:a8:34:ed:b2:56:89:3b:a1:
2b:0f:58:46:b2:ad:69:dc:5b:8e:d4:9d:d3:bc:7e:d6:6a:88:
45:0b:e7:8f:96:51:e2:db:b0:9b:a2:91:98:4f:82:97:c4:de:
37:be:66:95:14:bd:af:7b:63:0b:a2:74:a5:9b:3b:01:f2:d1:
40:87:a5:7b:78:87:a8:4b:8a:99:8d:de:80:65:2c:08:1b:26:
f8:e1:74:4b:05:ec:49:04:4d:17:1d:6a:5c:8d:d0:0a:bb:0a:
cc:04:95:d1:a2:42:94:1a:13:16:e4:bf:75:b4:91:ea:90:a8:
1e:2f:3b:40:ad:69:de:0e:05:7c:82:c7:c6:fb:13:b2:ae:8d:
98:aa:ca:cd:4f:bd:50:51:c2:94:7b:84:56:b1:9b:3d:e0:29:
ad:82:5d:ee:38:03:71:f6:ef:10:70:bf:03:fd:50:c6:c7:f3:
70:17:c6:f3:16:b4:67:70:4b:2d:98:5b:1a:50:61:85:0a:1e:
53:cf:23:dc:da:85:ed:07:4e:d6:59:76:54:60:7b:e0:e5:39:
e0:da:a9:cc:4a:3c:b9:dc:74:72:82:5d:17:64:ce:8f:f9:1e:
df:99:73:b2:7d:39:7b:31:cc:37:8e:c1:43:1b:4c:36:06:3e:
85:e0:a2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:58:32 2026 by rpki-client