Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dtYlA_iCSRM-KYj5OQkdRFOXv-A.roa
File: dtYlA_iCSRM-KYj5OQkdRFOXv-A.roa (raw, json)
Hash identifier: eXF5hoNBPM5hziOK8nPHLvIGB4HajkmUtiIvL7x02Vg=
Subject key identifier: 76:D6:25:03:F8:82:49:13:3E:29:88:F9:39:09:1D:44:53:97:BF:E0
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01A08F029AA8AB4ABE63839942753C31751E
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dtYlA_iCSRM-KYj5OQkdRFOXv-A.roa
Signing time: Fri 11 Sep 2026 05:48:27 +0000
ROA not before: Fri 11 Sep 2026 05:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213861
IP address blocks: 2a12:a340::/32 maxlen: 32
2a12:a342::/32 maxlen: 32
2a13:93c6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:02:9a:a8:ab:4a:be:63:83:99:42:75:3c:31:75:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Sep 11 05:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76d62503f88249133e2988f939091d445397bfe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:5f:f4:2e:3d:e8:5b:0d:ad:5d:5a:35:48:
d4:66:c0:da:8a:11:31:14:8f:5d:ef:89:fa:99:f9:
20:b5:87:b8:9b:f0:6c:22:90:73:17:3f:70:dc:e1:
c1:50:d6:91:04:8e:7e:2e:69:f4:33:54:d3:5d:d2:
44:27:22:e0:32:8b:76:05:42:d6:5d:d8:df:f8:c0:
fc:b6:ce:e4:ea:1d:7e:76:26:44:a3:15:46:1b:d6:
32:f9:38:3d:c9:0e:e6:57:52:7d:f0:d4:d5:7e:98:
f7:0c:bd:d5:12:6c:51:ca:26:85:32:7e:4f:60:40:
ec:51:97:1a:ef:ce:96:1d:e1:f2:59:69:1d:97:82:
7f:29:11:32:eb:42:71:ea:08:23:99:f7:43:fb:b6:
b6:3c:cf:f9:08:8c:d6:07:2c:d2:02:68:7f:e1:43:
34:cd:27:61:a8:00:36:9b:37:2b:52:aa:ac:4c:9e:
0c:9e:da:03:89:e2:68:21:d3:cd:51:d1:48:ff:35:
1a:fb:61:19:96:e8:83:48:8c:2c:90:e4:e7:6e:c3:
52:f2:72:74:60:75:d9:d8:72:ef:ab:0d:a8:9c:21:
83:9f:48:7b:b3:03:8f:1c:c4:f3:ce:18:56:db:b5:
2f:8f:54:51:68:26:2e:9f:33:b3:6f:a7:66:3b:e7:
10:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D6:25:03:F8:82:49:13:3E:29:88:F9:39:09:1D:44:53:97:BF:E0
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dtYlA_iCSRM-KYj5OQkdRFOXv-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a340::/32
2a12:a342::/32
2a13:93c6::/32
Signature Algorithm: sha256WithRSAEncryption
07:a4:9a:4b:b4:98:23:f2:8c:9b:b0:e9:5c:3f:5d:c6:be:20:
ad:7d:6e:a7:75:c0:0d:40:bf:e3:50:06:b5:de:fa:d2:3a:fb:
85:02:84:b9:2f:7d:a8:93:d9:d4:b4:9f:66:4b:81:e9:1b:a9:
29:6f:4a:31:1c:2d:76:60:a6:50:a5:f8:52:51:f9:de:7e:40:
89:c9:58:82:43:4a:3c:c3:c0:2b:ac:fd:4c:ee:13:41:eb:5e:
56:3d:9c:a0:47:32:a5:d2:c5:d0:d1:96:fe:36:17:f0:86:58:
ca:a5:3c:31:28:e5:ad:ad:3d:fd:32:b5:c7:ea:93:a5:49:79:
66:0d:7f:8e:80:f8:1f:6d:4e:08:38:48:10:10:18:0e:41:12:
75:6a:bb:cc:22:2d:30:e0:85:46:ae:96:2f:ac:40:86:df:b4:
cb:b8:48:59:16:7d:38:cc:19:02:ee:4a:85:c6:d1:4c:c8:0e:
06:b0:18:cf:07:b9:cf:00:21:eb:a6:8d:e9:fd:c0:b5:4f:91:
e7:c9:0a:f5:a1:2e:0f:68:fc:e1:b9:c4:3f:e9:49:20:30:39:
a8:9b:82:d3:a0:34:c8:bb:b5:50:10:c9:82:c6:e4:c8:e0:75:
ab:4e:52:07:de:2b:f8:2e:99:66:2f:bb:50:af:69:95:55:4f:
bc:c1:92:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:50:33 2026 by rpki-client