Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/wRv9fBJmvre20xMdwIU9laC5e10.roa
File: wRv9fBJmvre20xMdwIU9laC5e10.roa (raw, json)
Hash identifier: PtCj3wS6CUonUfFeQe3p1omlsL2UMohFubS3Dus/vvU=
Subject key identifier: C1:1B:FD:7C:12:66:BE:B7:B6:D3:13:1D:C0:85:3D:95:A0:B9:7B:5D
Certificate issuer: /CN=88275f5f12c756ea094b2fa2ced21773d69ae896
Certificate serial: 019F2368D390E667EBBB4FE47471ED5F3E53
Authority key identifier: 88:27:5F:5F:12:C7:56:EA:09:4B:2F:A2:CE:D2:17:73:D6:9A:E8:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/wRv9fBJmvre20xMdwIU9laC5e10.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207748
IP address blocks: 2a14:a901::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d3:90:e6:67:eb:bb:4f:e4:74:71:ed:5f:3e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88275f5f12c756ea094b2fa2ced21773d69ae896
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c11bfd7c1266beb7b6d3131dc0853d95a0b97b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:23:e6:e0:b8:4d:40:91:81:53:6e:f0:f8:25:
fc:bc:37:f9:1d:50:9c:21:54:eb:1d:a6:8f:2d:73:
0d:d6:ba:ff:35:19:41:98:a6:21:89:7f:c6:26:16:
4e:b5:c7:f0:cd:30:f5:cb:d1:f3:7c:7f:ac:98:60:
57:2e:20:7d:fc:a8:f7:ba:bb:41:e7:b7:f0:b8:bb:
b9:6b:95:23:c3:c9:d1:42:bb:49:0a:f8:98:69:1b:
55:e7:e9:5f:3c:15:41:a3:39:88:98:4e:39:13:2f:
3c:d8:35:e3:50:b1:04:ab:70:5a:72:7f:d2:29:5d:
48:be:13:3a:00:db:40:b7:a8:43:fd:45:68:3f:47:
e4:7d:10:ee:4d:17:6d:00:60:c9:19:9b:e0:15:36:
50:db:66:a4:6e:88:b6:ea:43:f3:06:34:25:90:f9:
f7:d1:d3:fd:7c:d2:65:8d:d0:4f:ed:d5:fd:12:d8:
74:90:c3:ca:10:fd:df:94:75:4d:aa:d0:fb:4e:bd:
75:7a:fc:a9:7b:42:57:fb:23:19:ed:c1:61:bf:d2:
4e:ef:8b:9b:90:b6:bb:fa:a4:f7:59:1b:d7:7d:03:
45:23:00:22:29:d2:06:23:07:6f:be:57:86:35:dc:
8a:a7:8f:59:68:a6:1f:83:91:f6:6e:6c:d0:c4:1e:
12:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1B:FD:7C:12:66:BE:B7:B6:D3:13:1D:C0:85:3D:95:A0:B9:7B:5D
X509v3 Authority Key Identifier:
keyid:88:27:5F:5F:12:C7:56:EA:09:4B:2F:A2:CE:D2:17:73:D6:9A:E8:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCdfXxLHVuoJSy-iztIXc9aa6JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/wRv9fBJmvre20xMdwIU9laC5e10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/iCdfXxLHVuoJSy-iztIXc9aa6JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:a901::/40
Signature Algorithm: sha256WithRSAEncryption
62:78:48:da:53:46:e0:ff:80:3a:f5:96:4e:64:23:c9:d8:30:
de:39:35:45:0b:c1:b9:95:e7:a5:a0:91:0f:91:62:07:03:ee:
be:09:89:62:93:fb:46:e7:cb:56:78:b0:33:e2:22:97:33:6a:
0f:45:47:df:4e:ce:6b:6a:1b:16:55:fc:15:bd:1b:59:f2:c3:
21:08:40:04:ed:d5:22:90:fc:19:f8:57:d6:3d:a1:ef:a1:f4:
d3:59:f4:a6:76:67:13:08:29:40:1d:0b:8c:16:1d:c8:88:b6:
53:67:29:5f:42:19:dc:c9:d3:2c:62:1c:63:5b:e9:91:3b:3c:
4b:1b:20:03:32:a1:76:44:7f:96:ec:5c:91:a4:59:35:a7:fd:
22:58:5f:96:a1:7d:e5:41:a5:8e:a3:b2:e2:22:e8:c8:57:9b:
63:f1:cc:d7:6f:d6:b3:8f:2a:d6:9e:1f:c9:04:83:c0:48:d9:
33:56:6a:9b:ba:41:71:15:8e:7d:15:4e:a8:69:cf:14:28:a9:
58:05:35:c2:4d:01:9e:91:96:db:2e:5e:0d:88:6f:9e:b3:4c:
db:e1:67:60:86:26:51:79:03:84:17:c8:77:e5:54:7b:75:25:
03:d4:a8:a2:6a:0b:a0:a7:34:d1:ff:3c:a3:2b:e4:1d:2a:d5:
0d:92:97:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:09:14 2026 by rpki-client