Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/jlFc5NpGt74_oDqgxwbh_oUqWRw.roa
File: jlFc5NpGt74_oDqgxwbh_oUqWRw.roa (raw, json)
Hash identifier: DciZoXOI6etcmmM8obtBaoffqMMBlF7e1baiFAPLUpA=
Subject key identifier: 8E:51:5C:E4:DA:46:B7:BE:3F:A0:3A:A0:C7:06:E1:FE:85:2A:59:1C
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F62B34593588EBFB187A01D6CD5778ADE
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/jlFc5NpGt74_oDqgxwbh_oUqWRw.roa
Signing time: Tue 14 Jul 2026 22:15:43 +0000
ROA not before: Tue 14 Jul 2026 22:15:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52053
IP address blocks: 2a10:4646:900::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:62:b3:45:93:58:8e:bf:b1:87:a0:1d:6c:d5:77:8a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 14 22:15:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e515ce4da46b7be3fa03aa0c706e1fe852a591c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:47:5b:20:90:63:a9:23:01:11:2e:6e:d5:
0a:fd:da:11:1b:b0:4a:c6:c5:4d:ad:ef:b6:d7:08:
80:c0:5d:97:ae:8e:8b:7e:46:b7:ec:67:ae:fc:7b:
8e:eb:5b:14:e1:bf:24:a2:18:b9:71:83:9e:2e:cf:
68:f2:18:7d:a8:ca:b0:eb:e1:07:8f:f4:c2:10:3f:
1e:7e:9d:8c:1d:e9:5e:8d:2c:36:0a:3b:b9:c2:a6:
22:4a:2e:71:1f:d4:e0:83:4f:1b:91:4a:e9:9d:16:
d5:7f:c0:6f:bc:4c:d5:df:ae:4b:23:41:e9:5f:3b:
13:fa:d1:09:8f:75:31:25:a1:16:b5:cc:cd:d9:d4:
90:b8:0e:88:15:b8:23:4e:15:d9:8f:ff:84:57:14:
81:05:ea:15:ee:eb:73:95:ef:06:cc:cf:3a:fd:7e:
9a:b9:39:8f:07:e0:dc:35:87:6c:ff:bf:e9:6a:e7:
7c:47:32:d5:e9:af:8f:0d:f1:b3:ba:a1:c2:1c:07:
ba:ef:0b:f6:a1:11:cb:36:0b:ef:62:05:e4:79:e5:
b1:5d:bd:7a:17:71:91:39:a8:8a:61:55:bc:4f:16:
34:a4:d1:87:a3:f3:e5:e2:a9:c8:6c:29:69:84:cc:
ab:18:f3:fc:d8:11:66:bc:e6:89:cd:d9:dc:25:6a:
2b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:51:5C:E4:DA:46:B7:BE:3F:A0:3A:A0:C7:06:E1:FE:85:2A:59:1C
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/jlFc5NpGt74_oDqgxwbh_oUqWRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:900::/44
Signature Algorithm: sha256WithRSAEncryption
bd:a0:8a:c3:11:4b:14:28:d8:38:21:02:bf:4f:45:c9:af:82:
e9:a6:92:34:75:2f:f6:ab:9c:78:45:cd:e4:9e:46:8d:46:bf:
4d:19:ce:50:52:fc:d4:44:c0:87:ff:fb:ba:5c:e6:0f:16:d5:
e1:fa:89:9c:7e:c8:6d:de:1b:30:72:f0:ff:df:27:03:66:2f:
73:a3:24:c0:4c:21:a7:55:94:e7:6a:ed:40:ca:19:40:52:96:
ed:c5:0b:ad:5d:76:07:4e:53:83:99:81:84:15:cb:af:e3:46:
04:c1:1b:73:2d:5d:be:83:19:69:ee:2b:21:61:af:de:3d:03:
87:ba:51:b1:19:8f:34:14:ea:8e:2b:4f:6d:b4:62:a6:51:ee:
f1:37:a1:98:2a:87:e7:fd:ba:1c:8c:1f:43:28:df:e3:91:88:
03:d0:d3:77:92:a6:8d:18:d7:42:6f:10:8c:43:ef:aa:bf:06:
95:3e:38:53:f8:17:12:7f:ab:34:87:50:30:18:d0:00:e1:22:
9b:9a:0a:1a:9e:dd:ae:04:6f:92:68:be:1e:53:66:f7:78:fb:
a7:68:b6:af:7d:fe:33:42:b1:b5:2d:70:98:3e:e2:ae:ae:ae:
12:e5:63:64:5c:6f:4c:82:2f:a9:2b:77:a3:ce:9b:0b:a8:5f:
70:bf:d5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:56 2026 by rpki-client