Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/x8U9bNnplkZStAKgDSaF-jv8KoE.roa
File: x8U9bNnplkZStAKgDSaF-jv8KoE.roa (raw, json)
Hash identifier: peXdhHNn53Fv+Fg1SoHcZd0JMIY4By29NT9yTuSdorU=
Subject key identifier: C7:C5:3D:6C:D9:E9:96:46:52:B4:02:A0:0D:26:85:FA:3B:FC:2A:81
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0C99A4AE16FF26C7FC50ACD75B2F62345
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/x8U9bNnplkZStAKgDSaF-jv8KoE.roa
Signing time: Tue 22 Sep 2026 14:52:07 +0000
ROA not before: Tue 22 Sep 2026 14:52:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212056
IP address blocks: 2a10:fa80:1a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:9a:4a:e1:6f:f2:6c:7f:c5:0a:cd:75:b2:f6:23:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 22 14:52:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7c53d6cd9e9964652b402a00d2685fa3bfc2a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:3c:8c:da:97:b9:54:8f:0b:44:2b:7e:65:
0d:5c:b5:0c:1c:d2:67:df:25:4f:ea:27:79:cf:34:
59:06:ae:a6:d2:1b:6d:cc:a2:bf:92:c1:ca:d2:9f:
b5:32:ab:23:fc:3d:5c:57:8b:47:1e:7a:bc:29:ae:
09:05:6c:10:ff:14:12:cc:27:64:2b:fd:50:72:49:
15:0c:0f:eb:b2:d2:90:54:6d:d5:61:6c:6f:42:4e:
ff:61:0b:94:29:61:b7:c6:cd:05:2b:ba:6f:e1:cf:
a4:23:0c:21:e8:8b:10:0f:ea:b8:8b:39:32:47:d3:
0c:64:96:83:2e:6c:51:e3:11:a0:b7:30:c2:36:00:
09:c5:ca:4d:b3:e8:ae:cb:36:54:5b:cf:ad:16:e4:
d8:ee:e2:d1:32:81:41:66:83:f9:a6:88:d4:56:c0:
c2:63:93:fa:e0:73:97:db:22:6e:03:0e:5f:fa:42:
7c:f9:cd:f6:33:a8:65:67:5a:59:99:0c:f8:45:8d:
25:f5:8b:bf:0a:38:5b:3f:57:c4:39:98:14:83:bd:
59:8e:6c:cd:10:e5:6a:17:bf:73:ed:45:1d:08:ac:
b1:9d:66:43:d4:d3:ea:4f:ff:55:af:b5:77:b2:16:
c3:1e:d4:dd:dc:7d:94:1d:3e:77:53:44:d3:74:e6:
fb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C5:3D:6C:D9:E9:96:46:52:B4:02:A0:0D:26:85:FA:3B:FC:2A:81
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/x8U9bNnplkZStAKgDSaF-jv8KoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:1a::/48
Signature Algorithm: sha256WithRSAEncryption
55:e9:b6:15:2f:50:bd:d9:2a:c4:8a:f9:e4:99:63:b2:16:8f:
8c:ba:f4:d6:79:3c:21:3c:11:25:07:17:26:45:ab:88:1d:d8:
4c:06:95:47:4e:9d:29:7c:14:a2:4f:8d:0a:ff:19:c2:5f:18:
d6:85:58:8d:12:36:dc:12:d2:43:aa:25:64:d3:21:db:18:f5:
3c:7d:6b:2a:cb:e0:d9:a5:a1:65:0e:3a:a9:2a:b3:75:70:c3:
75:3a:32:26:aa:db:52:a2:0b:11:35:92:2b:61:2a:5b:e0:47:
4a:47:33:0f:f5:15:f5:3e:aa:83:cd:05:80:a1:22:f1:6a:71:
6e:1a:c4:b7:93:65:b0:ac:bc:d7:2d:0a:be:0d:41:ea:4d:a8:
7a:30:60:44:13:db:12:b9:f4:c4:fa:10:1b:04:f8:bc:8f:4d:
2b:01:41:20:f4:19:75:62:9a:ef:19:1e:e3:a9:eb:b5:1d:ec:
0e:2b:a5:f5:e3:ea:ca:5b:6c:27:fb:15:20:3d:42:28:06:cf:
38:a6:56:c7:f5:27:38:59:d7:31:b4:90:36:d7:98:eb:cd:fc:
14:d5:9a:1a:43:74:13:c7:1e:54:43:ad:d5:67:3d:03:92:81:
f7:6f:d5:62:81:2e:5e:89:72:a0:f4:15:1e:6a:63:45:cd:6d:
e7:f3:ca:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:45:07 2026 by rpki-client