Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/q--OuP_rfB_qdy_7f_RIgPMsU7I.roa
File: q--OuP_rfB_qdy_7f_RIgPMsU7I.roa (raw, json)
Hash identifier: J5d2AOEi0HNsiyJ+nB39gHaVUpXKMLDnfhR+GSmUgHE=
Subject key identifier: AB:EF:8E:B8:FF:EB:7C:1F:EA:77:2F:FB:7F:F4:48:80:F3:2C:53:B2
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019F47F5E263B4BC7FEDCA19777413F47135
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/q--OuP_rfB_qdy_7f_RIgPMsU7I.roa
Signing time: Thu 09 Jul 2026 17:38:44 +0000
ROA not before: Thu 09 Jul 2026 17:38:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 2a11:1000::/29 maxlen: 29
2a11:bec0::/29 maxlen: 29
2a11:e240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e2:63:b4:bc:7f:ed:ca:19:77:74:13:f4:71:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jul 9 17:38:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abef8eb8ffeb7c1fea772ffb7ff44880f32c53b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e9:c5:84:7c:96:d7:56:1e:28:48:c6:d7:5d:
fa:18:13:3b:17:af:77:cc:94:3d:e7:d0:63:02:28:
4e:1e:78:89:d0:b3:db:fd:9a:3e:30:da:5b:82:05:
1e:c4:87:eb:24:b8:75:26:5a:71:64:ed:41:de:83:
d8:78:f7:fa:ea:b8:04:d9:9d:92:84:79:8a:8f:0f:
95:eb:da:1a:0e:57:6d:e8:09:6f:1a:0c:32:52:06:
56:16:b7:96:b9:c8:98:49:db:0d:dd:47:9d:8f:5f:
28:6a:d2:0a:d6:a8:ee:a8:44:e6:a7:ab:73:0f:dc:
83:d7:dd:a8:6b:98:1a:20:00:09:5d:8e:cb:62:e8:
c1:cc:e2:69:26:04:a7:16:be:0c:00:f6:23:b2:1a:
e7:7f:c9:50:f9:ea:d4:86:41:60:42:e9:00:24:a6:
d9:02:d7:be:53:9d:87:12:09:8a:f5:ac:35:70:de:
7a:9b:69:be:91:bf:dd:68:1b:7b:7a:2b:54:b6:d4:
be:07:99:a6:08:23:7e:ae:47:05:77:fe:e2:0b:aa:
b9:61:23:4b:c2:0b:f9:56:ab:cf:47:6c:79:25:5e:
75:64:8a:c3:0d:ed:8a:39:08:6d:78:ed:f6:e0:ae:
ce:cd:ed:3a:0b:c6:88:de:f0:9c:74:a2:04:71:4d:
3c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EF:8E:B8:FF:EB:7C:1F:EA:77:2F:FB:7F:F4:48:80:F3:2C:53:B2
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/q--OuP_rfB_qdy_7f_RIgPMsU7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1000::/29
2a11:bec0::/29
2a11:e240::/29
Signature Algorithm: sha256WithRSAEncryption
7c:4d:b7:44:79:7f:2c:5d:bc:d2:60:9a:b7:e1:a6:e0:f0:d0:
1c:7b:4f:29:81:1f:d9:69:73:9f:bf:d9:d6:61:0f:6d:2d:02:
6f:83:c1:5d:0d:c2:07:e1:23:85:81:53:46:b8:10:56:84:fc:
fd:98:b7:b5:d8:38:2b:c9:32:6a:67:49:a0:1e:c2:5d:05:e7:
31:18:74:eb:d0:d7:ed:b2:95:4b:1d:6a:57:45:8e:49:1f:b7:
40:d9:bc:e1:30:08:ae:6f:89:94:43:8c:1d:c3:68:c7:9a:98:
36:6c:5d:d5:df:c3:3a:47:ae:2e:31:ce:7e:eb:84:eb:9e:ee:
b1:de:2b:af:85:ab:56:a3:4a:43:10:bc:47:98:c4:ae:cf:13:
7e:40:04:ab:cf:cd:ab:78:5a:a8:eb:a5:0e:cb:14:69:bb:f3:
43:3f:6e:c7:9e:36:56:c6:9d:a0:9b:ce:c3:cb:ac:90:8d:1c:
f3:d9:87:53:89:ea:22:a9:68:13:30:c8:f9:a6:cc:69:b9:ea:
8c:42:6d:5b:8a:ae:fc:62:86:cf:5b:ef:4f:74:0d:7e:21:39:
de:c9:d1:bc:9b:90:0c:80:3b:d1:01:06:3f:10:13:c1:bd:d2:
fd:10:b7:58:40:5d:14:3b:78:44:8e:29:ae:67:1f:7b:50:f4:
05:62:f8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:21 2026 by rpki-client