Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ta3YrRrdv1SdTdEifs-O8MMw-Qc.roa
File: ta3YrRrdv1SdTdEifs-O8MMw-Qc.roa (raw, json)
Hash identifier: 1+wnuaJfeEL2tMUfArBENrplxbQncr627FwtaLtNR54=
Subject key identifier: B5:AD:D8:AD:1A:DD:BF:54:9D:4D:D1:22:7E:CF:8E:F0:C3:30:F9:07
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 01A0F27B925D55A2B21283468D2B340D02F8
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ta3YrRrdv1SdTdEifs-O8MMw-Qc.roa
Signing time: Wed 30 Sep 2026 13:22:59 +0000
ROA not before: Wed 30 Sep 2026 13:22:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208437
IP address blocks: 176.56.128.0/21 maxlen: 24
2a00:9f80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:7b:92:5d:55:a2:b2:12:83:46:8d:2b:34:0d:02:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Sep 30 13:22:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5add8ad1addbf549d4dd1227ecf8ef0c330f907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:66:2e:2a:45:b7:9a:db:ed:4d:a2:62:90:b7:
2d:26:35:06:d1:7d:ca:f8:64:f0:ff:fc:08:f6:14:
11:7b:cf:1e:47:ca:da:72:88:1b:b9:c0:60:79:bd:
25:95:d5:f0:cf:08:f2:46:02:72:1c:01:e9:1d:03:
2b:31:d8:8f:18:b7:98:51:86:dd:b9:c4:44:23:9f:
95:d1:a1:9e:8d:3c:e6:87:24:b7:f5:d0:e7:f4:f6:
6c:bc:ab:13:fd:b5:f8:97:af:88:fc:5c:ee:1f:4f:
ac:5d:42:5d:b1:ef:7e:fe:a2:e3:63:3a:e1:51:71:
88:4e:37:66:11:b2:1a:6b:1e:0c:eb:73:ef:3c:67:
d3:d1:2f:d1:10:e1:d2:68:29:da:cc:86:f7:bc:9b:
59:ad:dd:c7:58:0b:6c:b2:c3:dc:67:ab:bc:bb:22:
dc:1d:e5:57:78:31:2c:da:0d:f6:3d:e7:1f:b8:f5:
cd:8d:f2:4d:96:a4:0b:aa:2f:7f:38:65:eb:70:5a:
56:09:68:36:e4:e5:25:8f:ab:07:e9:a3:6c:4f:8c:
f9:26:13:08:3c:1b:bd:ef:86:13:b8:eb:38:61:04:
27:4c:8a:b0:01:78:05:12:9c:2b:f6:d8:da:fc:41:
f5:ff:f8:c1:18:31:72:52:7a:6b:6b:bc:e9:19:63:
fb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AD:D8:AD:1A:DD:BF:54:9D:4D:D1:22:7E:CF:8E:F0:C3:30:F9:07
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ta3YrRrdv1SdTdEifs-O8MMw-Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.128.0/21
IPv6:
2a00:9f80::/32
Signature Algorithm: sha256WithRSAEncryption
95:16:90:31:92:4c:fe:e2:65:f3:d6:91:d8:61:cc:79:39:00:
2b:08:c8:e2:0c:ae:e7:7d:8d:ef:f0:23:a4:37:0a:36:95:87:
30:64:ea:87:8a:01:0c:32:06:bb:06:14:40:d8:8c:0f:ed:4b:
ec:c7:fe:9e:b5:08:c8:71:5a:b4:80:94:3b:1a:a5:5f:65:86:
89:ee:17:b0:36:9e:a3:09:04:b7:97:4e:82:95:dc:ea:2f:36:
0e:21:fa:a5:12:c2:5d:a2:43:a3:2f:18:ea:99:9f:3d:16:00:
f4:a0:75:3f:0f:a7:cc:47:d5:bb:9a:bc:64:d9:4d:eb:f7:e4:
10:6b:a7:79:b8:b3:5c:04:ed:6c:aa:64:5c:9d:96:a1:67:72:
9c:9c:42:46:00:fd:80:9a:a1:be:8d:48:b5:d8:db:e4:e1:c9:
8e:f4:2d:8a:29:2b:68:8c:61:79:d5:52:0c:73:40:6c:9f:36:
d6:59:ca:ec:ad:8a:74:2c:30:1d:ff:3f:4a:4c:57:2e:53:5a:
0f:83:c2:51:27:66:91:cf:de:78:82:11:40:21:ab:f2:ea:66:
69:42:c6:39:1b:a0:7d:a5:b4:9a:04:6c:1e:6a:0a:aa:6a:d9:
20:0f:59:2c:7d:96:f0:d0:f1:15:f4:7a:42:2d:89:f6:29:11:
9c:05:cf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:41:30 2026 by rpki-client