Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/CQnRFbws69KUV1eDOh7tfsMPWcY.roa
File: CQnRFbws69KUV1eDOh7tfsMPWcY.roa (raw, json)
Hash identifier: XQrjplYUGhogLSVTsLi+InaBCSnPLhVF2WDLQrbLme4=
Subject key identifier: 09:09:D1:15:BC:2C:EB:D2:94:57:57:83:3A:1E:ED:7E:C3:0F:59:C6
Certificate issuer: /CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6
Certificate serial: 019F228C2FBBEEBDFAAAE93ABBDB29004156
Authority key identifier: 2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/CQnRFbws69KUV1eDOh7tfsMPWcY.roa
Signing time: Thu 02 Jul 2026 11:17:20 +0000
ROA not before: Thu 02 Jul 2026 11:17:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6233
IP address blocks: 2a02:f440::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:8c:2f:bb:ee:bd:fa:aa:e9:3a:bb:db:29:00:41:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6
Validity
Not Before: Jul 2 11:17:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0909d115bc2cebd2945757833a1eed7ec30f59c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:91:64:d2:e8:bc:df:84:a4:57:15:e9:71:5b:
4e:4b:8b:d7:c7:a0:44:39:46:9e:86:bd:40:24:88:
cb:fb:20:6f:cd:3d:3e:6d:36:2d:25:1c:37:4c:4f:
df:86:58:5d:90:9c:a8:08:ea:78:39:7c:ea:9c:59:
6b:2d:6f:df:8d:a5:90:5e:71:39:28:0d:0b:88:77:
b2:58:75:4e:d2:85:93:a5:bd:af:d2:dd:6b:04:91:
76:e7:4c:5f:51:ed:8d:5c:64:c1:f3:d6:43:79:6d:
b9:48:6e:14:9d:e3:6c:52:d5:c5:5b:fb:32:0a:59:
60:eb:ce:df:7b:5b:8e:3f:a6:de:51:66:43:e4:7c:
b7:23:68:1f:b8:2c:7c:9a:12:0f:1b:44:e9:1a:0e:
ff:06:51:d5:99:73:f8:6c:ff:4c:cc:85:8a:6a:cc:
ca:60:90:4f:6e:dd:30:db:88:05:7e:04:76:b8:a4:
92:6e:28:23:1b:44:04:cf:e4:66:25:85:44:29:7e:
75:bd:89:06:e5:3a:f7:ea:c3:1d:fb:32:bd:e3:e4:
31:4f:c1:88:ed:06:94:c8:b3:97:98:0c:c2:f7:1a:
ef:20:fe:04:3e:62:a6:82:7a:fe:5f:58:16:52:a4:
60:3c:da:ff:96:0d:73:54:f5:ee:9c:61:64:cb:59:
f8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:09:D1:15:BC:2C:EB:D2:94:57:57:83:3A:1E:ED:7E:C3:0F:59:C6
X509v3 Authority Key Identifier:
keyid:2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/CQnRFbws69KUV1eDOh7tfsMPWcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:f440::/29
Signature Algorithm: sha256WithRSAEncryption
64:51:2e:28:51:87:03:1c:7b:b2:a3:fd:d7:1c:38:64:cd:d9:
bf:7d:a3:a2:33:0d:07:2e:88:a6:47:68:de:37:99:e7:3f:a7:
58:0e:f1:46:1e:68:72:ea:65:25:d8:bf:cd:48:4c:6a:43:9f:
54:5b:81:2e:54:f2:a0:46:62:95:d1:88:71:b9:0f:5e:dd:34:
ee:f4:a8:c0:41:c5:78:c3:91:c1:a8:dd:7a:f0:f5:4e:28:e4:
5b:4e:e1:d9:14:b6:a7:cd:22:02:4f:8f:09:2b:71:bf:06:45:
58:26:20:24:17:8f:fa:e4:c7:06:b8:63:c9:d1:ad:50:8c:92:
9a:3b:af:c3:da:9a:0b:a6:8c:62:1d:d2:d8:fb:d1:0e:4a:f8:
ce:fe:37:a2:72:0f:b6:3f:f7:dd:b2:ce:23:7a:d4:50:e3:f4:
c2:38:e8:2e:82:19:8e:01:50:a0:cb:5f:c7:06:6e:b1:ad:fe:
ef:fb:f0:90:bd:94:fb:83:3a:ae:fd:3e:80:e6:d9:21:dc:b8:
5b:56:57:fc:3f:0e:06:e4:2c:ed:83:8a:55:34:9f:c3:71:8c:
5d:e0:2a:4e:c9:8d:2a:51:0b:41:cd:62:ce:52:92:0b:a9:75:
ae:55:e4:12:26:90:62:04:34:cb:11:40:92:7b:e6:2d:57:bb:
44:69:f0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 06:23:30 2026 by rpki-client