Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/Xyy6AHvHX9GWFOXo_Oy9VjDgePY.roa
File: Xyy6AHvHX9GWFOXo_Oy9VjDgePY.roa (raw, json)
Hash identifier: x6gttKcvk6cgj+0qilLdOAO3qlZUqMHAp+PtTLr5hkc=
Subject key identifier: 5F:2C:BA:00:7B:C7:5F:D1:96:14:E5:E8:FC:EC:BD:56:30:E0:78:F6
Certificate issuer: /CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6
Certificate serial: 019F228C2E7ADE9A3FC8F81C54FED9AEA675
Authority key identifier: 2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/Xyy6AHvHX9GWFOXo_Oy9VjDgePY.roa
Signing time: Thu 02 Jul 2026 11:17:19 +0000
ROA not before: Thu 02 Jul 2026 11:17:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3204
IP address blocks: 2a02:f440::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:8c:2e:7a:de:9a:3f:c8:f8:1c:54:fe:d9:ae:a6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6
Validity
Not Before: Jul 2 11:17:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f2cba007bc75fd19614e5e8fcecbd5630e078f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:72:f9:e6:cb:59:0f:ad:4d:49:3d:bf:d2:e6:
e1:39:9b:12:d1:21:a5:fb:a5:ec:08:27:52:13:de:
af:cc:51:d3:3d:11:87:a9:3e:18:af:b3:cd:34:23:
04:c3:31:2e:95:25:7c:65:4b:3f:d8:6c:29:58:21:
df:8a:74:99:4a:0f:fe:81:06:b7:56:a6:fd:03:26:
eb:4a:3a:bd:5d:4a:42:54:4e:88:d3:51:7a:6d:a0:
6c:65:5f:04:f3:88:ac:4a:88:6d:82:7e:91:f7:ab:
0c:ea:c4:03:8f:0b:40:05:2c:c3:22:d1:13:8e:17:
4f:a4:60:8e:04:e2:65:aa:18:5d:73:29:3a:da:65:
9b:76:97:c1:03:f0:ce:0f:a0:0a:9d:28:bb:a5:0d:
2c:64:36:a1:02:dc:13:03:3d:65:0a:0a:58:b3:b1:
fc:4c:7a:b1:d4:ac:be:6b:c9:d6:3f:d4:62:a2:74:
0b:8b:2d:b2:1b:30:0c:4d:93:4c:f9:c4:a3:6a:91:
09:44:97:cb:41:f6:12:f9:fb:5b:aa:41:4d:94:39:
3d:cc:36:80:10:1c:c3:bc:b1:46:09:db:b3:f1:eb:
a6:fc:9e:1d:0b:37:0a:ee:1f:e0:62:a2:91:1d:b1:
21:88:6e:3d:8a:23:f0:fd:09:f7:4e:3d:bb:fb:8e:
03:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2C:BA:00:7B:C7:5F:D1:96:14:E5:E8:FC:EC:BD:56:30:E0:78:F6
X509v3 Authority Key Identifier:
keyid:2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/Xyy6AHvHX9GWFOXo_Oy9VjDgePY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:f440::/29
Signature Algorithm: sha256WithRSAEncryption
37:a1:90:03:1a:e6:cc:cf:12:2c:e4:da:da:70:3e:37:3b:e6:
f4:ea:7b:b4:09:32:7e:b7:3d:d5:19:7d:0e:bd:8a:a7:76:db:
39:f9:12:29:f5:99:38:08:a8:0a:ed:82:7e:3c:74:11:b4:7b:
eb:e1:e7:8f:d4:c9:ab:e2:9c:44:66:09:74:af:88:27:02:4e:
3d:a2:f4:71:55:6a:dc:b2:ca:db:8a:00:99:43:d8:4f:e7:38:
0b:9f:84:e9:82:ff:5c:ac:f1:23:e1:10:8f:47:50:b5:70:76:
83:48:44:6a:04:9a:74:70:3c:4b:c8:2d:7f:ae:a3:14:eb:4b:
39:6c:59:50:79:6b:12:e8:6b:22:a9:48:1e:98:a6:40:e9:9e:
ab:db:b4:87:93:83:7a:a4:90:5b:98:fa:84:ef:05:59:1f:be:
3a:8e:10:29:9e:25:45:70:97:d2:c3:c1:03:c7:5b:75:60:e2:
b9:b9:fc:ec:91:99:09:88:6c:a0:d2:94:e0:ac:5c:54:cf:22:
fa:bf:dc:33:3a:ed:b5:fd:32:15:e1:55:96:1b:0e:1e:c8:a2:
15:3c:03:e0:30:0a:9c:8c:4b:1a:9d:36:be:6b:62:1f:53:46:
ef:ae:0b:76:70:33:98:62:ba:fb:02:ca:67:20:51:88:c3:b5:
64:91:ea:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:34:31 2026 by rpki-client