Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/cUQ_kjpl42v7Vjep28zOTtG-i7c.roa
File: cUQ_kjpl42v7Vjep28zOTtG-i7c.roa (raw, json)
Hash identifier: iSk+dJJPFLd9kmCJq+nbwXpP27s7GrpzvPiLcTI4JFM=
Subject key identifier: 71:44:3F:92:3A:65:E3:6B:FB:56:37:A9:DB:CC:CE:4E:D1:BE:8B:B7
Certificate issuer: /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Certificate serial: 01A05C70D1654E81ADC68B8484C9DB271B65
Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/cUQ_kjpl42v7Vjep28zOTtG-i7c.roa
Signing time: Tue 01 Sep 2026 10:08:12 +0000
ROA not before: Tue 01 Sep 2026 10:08:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60432
IP address blocks: 2a00:8c60:2::/48 maxlen: 48
2a00:8c60:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:70:d1:65:4e:81:ad:c6:8b:84:84:c9:db:27:1b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Validity
Not Before: Sep 1 10:08:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71443f923a65e36bfb5637a9dbccce4ed1be8bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:32:08:5e:e0:37:a4:8b:fe:1d:92:85:fd:
e2:ad:a9:04:b4:8a:81:5f:ca:ae:84:84:a8:05:c2:
08:1c:05:b9:c0:e7:2d:b9:6c:85:28:2b:26:01:2b:
6e:c7:28:7f:6a:34:4a:1e:53:5a:db:a2:fe:24:66:
47:b3:28:de:0d:e5:12:ec:69:00:96:a0:2e:09:8c:
51:2a:15:85:ae:c6:b7:58:57:9b:eb:75:54:91:dd:
f4:1c:b7:51:af:ed:5a:0c:fa:6e:f0:cb:ca:68:46:
a8:8a:98:55:af:08:be:e1:6c:50:50:9f:6a:4a:9d:
85:68:61:85:a0:cc:32:ce:5f:b1:0b:db:ed:e9:fd:
9c:b1:84:8a:60:7b:56:3d:43:65:ac:89:55:a5:aa:
05:05:2c:1f:64:99:cc:25:9e:88:c4:26:3f:2f:95:
60:c4:f9:9c:b6:ce:7d:b0:d2:a0:01:ac:0f:95:5f:
ad:dd:65:97:1f:77:78:9e:f5:1a:ee:6a:fd:69:c6:
e7:d2:1b:b1:d1:f1:8b:89:1f:62:85:2f:27:69:fa:
e1:24:f3:b7:06:b8:8f:73:36:ae:46:00:87:09:1e:
1b:5c:d8:da:fb:e0:10:e3:8a:3f:a8:71:6d:dc:3c:
8f:ee:78:c2:b3:4c:bc:9a:0f:4f:e1:43:bc:d8:ce:
70:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:44:3F:92:3A:65:E3:6B:FB:56:37:A9:DB:CC:CE:4E:D1:BE:8B:B7
X509v3 Authority Key Identifier:
keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/cUQ_kjpl42v7Vjep28zOTtG-i7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:8c60:2::/47
Signature Algorithm: sha256WithRSAEncryption
42:c8:6c:04:99:29:a0:3d:5f:7c:d8:33:39:79:be:b5:cb:64:
62:04:21:7f:1c:5e:c1:e7:13:7c:41:f6:7a:09:78:9c:57:5a:
20:e4:a7:9e:03:f9:9f:15:02:cd:1c:25:a7:e7:35:b6:4d:4c:
cf:ec:1d:cf:25:1e:1d:31:ea:6e:49:b4:60:1a:c7:34:26:e0:
76:c8:ad:f1:b3:6f:cd:16:af:55:39:40:47:2a:82:26:b8:cd:
f5:65:99:19:3e:2b:0b:e4:50:f4:c5:65:9d:7b:37:b5:e9:f6:
b5:13:db:95:05:e7:89:9c:83:18:48:ff:c3:86:ad:0e:51:8b:
5d:d4:9b:3e:38:ef:b3:5f:62:3e:44:28:e4:47:4e:fc:15:db:
82:3f:56:de:22:f4:e6:20:b3:91:08:45:d2:61:e8:e2:a6:57:
be:6e:22:c5:29:c9:14:d5:cf:f4:ed:bd:52:e7:e3:86:ab:ef:
40:89:2b:3a:f3:df:82:e2:df:dc:c4:a5:f0:09:3b:50:ea:32:
b2:77:e4:cc:f3:3a:c5:76:36:54:df:f8:8a:ed:38:7d:03:b9:
bb:97:6b:6b:60:08:1a:6d:42:64:bb:9a:e6:cb:f6:50:ea:67:
a7:c6:08:15:db:e8:d2:0f:01:76:d7:45:48:b1:81:18:ca:34:
ae:96:0b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:52:09 2026 by rpki-client