Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/quPrgSo6PCgYizymXRzN7wrvh_4.roa
File: quPrgSo6PCgYizymXRzN7wrvh_4.roa (raw, json)
Hash identifier: qhM6FDxBsWzuAGAv1YG+SO5MIfL4PFGr+cM3R7/JKCM=
Subject key identifier: AA:E3:EB:81:2A:3A:3C:28:18:8B:3C:A6:5D:1C:CD:EF:0A:EF:87:FE
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A07D1543E5AFD96B08BF55593AB6106EFF
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/quPrgSo6PCgYizymXRzN7wrvh_4.roa
Signing time: Mon 07 Sep 2026 18:15:40 +0000
ROA not before: Mon 07 Sep 2026 18:15:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5065
IP address blocks: 2a12:6180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7d:15:43:e5:af:d9:6b:08:bf:55:59:3a:b6:10:6e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 7 18:15:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aae3eb812a3a3c28188b3ca65d1ccdef0aef87fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2f:06:ff:49:6f:a4:20:4a:91:5f:23:9f:df:
35:e3:2f:f9:dc:0b:c3:fd:ca:f3:b5:77:7c:91:e5:
21:c0:10:75:e3:d3:87:b6:63:9d:26:98:57:19:28:
b9:f0:91:c4:95:6f:6f:e0:dd:41:31:56:e8:de:8c:
43:1c:b3:dd:2b:3d:0d:51:92:c8:c7:a5:bf:f0:11:
99:c2:9f:69:ab:5b:42:ff:ae:88:9f:e3:89:63:d1:
f6:91:58:f8:a5:0c:07:cc:99:d6:5b:5f:43:1b:7a:
25:6e:db:87:26:d2:93:df:87:22:06:d7:4b:31:fe:
bf:0b:a5:c8:b7:11:26:09:66:96:f7:3b:e8:27:fe:
90:e7:03:71:45:d3:e3:10:0b:d9:d1:66:0c:e4:be:
03:fd:69:89:16:ac:41:4e:68:84:86:21:d3:2c:4e:
93:87:a7:6d:5d:e1:77:1a:fa:2a:7a:98:ad:70:da:
08:dc:c9:c9:7d:38:78:d7:3b:e8:34:86:78:39:a8:
2e:0f:10:aa:29:ab:29:22:bf:59:cc:43:a8:d6:db:
1b:fe:2b:6c:46:4d:7c:32:5b:9f:62:c9:6d:d7:11:
3c:a1:88:8d:43:eb:27:46:77:33:a3:88:ab:dc:9d:
2d:a0:4b:21:84:fe:26:3a:bb:8a:5f:35:49:dd:37:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E3:EB:81:2A:3A:3C:28:18:8B:3C:A6:5D:1C:CD:EF:0A:EF:87:FE
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/quPrgSo6PCgYizymXRzN7wrvh_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6180::/29
Signature Algorithm: sha256WithRSAEncryption
2b:fc:70:ff:e9:1a:f2:ad:97:c0:19:51:28:98:30:b7:46:2a:
f2:c5:4b:67:c6:81:86:b6:47:00:de:bb:f9:f5:4e:48:7d:8f:
52:9b:36:04:39:e7:08:e4:b5:d9:d8:b0:e0:5d:25:85:bb:fb:
76:9c:d1:8c:76:7d:c3:53:76:01:b8:dc:11:75:2e:73:61:55:
bd:7a:50:91:c7:59:f3:31:4a:6e:ef:32:8c:59:dc:9c:e7:06:
59:68:51:1a:d2:40:5f:03:cf:2c:f7:92:b1:8d:1e:4e:b0:1e:
57:6b:f2:3f:7f:c7:79:28:47:da:8d:d7:8c:fe:3d:d3:9d:0c:
5e:8e:a0:ca:11:c9:c8:1d:ef:de:17:31:c7:8c:50:f4:8a:5b:
1b:b8:78:22:8d:9d:c1:57:54:3d:d0:72:3d:98:77:1b:c7:a7:
ab:7f:85:61:6b:d3:d2:85:62:ae:b7:f1:9a:a4:40:7c:eb:0d:
5b:38:e5:62:19:59:49:1d:d1:ce:d4:25:54:b4:a4:ff:70:03:
5d:c8:23:d1:e2:99:ec:da:ae:7f:5a:6c:a1:38:84:3d:b8:48:
b5:ea:c5:c2:79:c5:0e:60:65:c6:1b:68:22:d4:9c:18:b8:81:
7c:ca:24:00:f6:4d:65:20:ea:6e:bb:ca:de:53:7a:6d:9b:92:
29:dd:f7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:17:03 2026 by rpki-client