Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/_JIme0QPIMt9vEAapbO3X4DxZ6o.roa
File: _JIme0QPIMt9vEAapbO3X4DxZ6o.roa (raw, json)
Hash identifier: 2TlFaoRWvQThXcHP6fVI19fGDUkBsF3BMCmvRQGDI4o=
Subject key identifier: FC:92:26:7B:44:0F:20:CB:7D:BC:40:1A:A5:B3:B7:5F:80:F1:67:AA
Certificate issuer: /CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6
Certificate serial: 019F228C2DA22EEB31BBF0AB58D32FF2939D
Authority key identifier: 2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/_JIme0QPIMt9vEAapbO3X4DxZ6o.roa
Signing time: Thu 02 Jul 2026 11:17:19 +0000
ROA not before: Thu 02 Jul 2026 11:17:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 949
IP address blocks: 2a02:f440::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:8c:2d:a2:2e:eb:31:bb:f0:ab:58:d3:2f:f2:93:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6
Validity
Not Before: Jul 2 11:17:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc92267b440f20cb7dbc401aa5b3b75f80f167aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:22:d0:3d:90:ed:ea:bb:0d:43:f7:64:34:
72:88:f4:76:9f:38:d5:32:e8:09:41:ab:e2:4d:1f:
17:d2:31:87:9f:5c:38:34:cf:4f:dd:ee:ee:8c:18:
94:bf:f3:1a:63:59:ba:fb:7a:43:c7:4a:09:94:20:
7f:af:8e:ae:27:31:70:47:6e:aa:c3:61:fa:e0:34:
74:4c:63:2e:83:a4:4a:81:03:e0:7b:e7:c0:8e:76:
aa:39:8b:b1:79:53:0d:71:a0:38:c8:3e:de:9d:78:
41:a0:7c:04:cd:0c:73:c8:9e:a6:94:18:f7:17:ee:
bc:f2:15:dd:37:dd:26:64:42:34:05:aa:ad:b4:d3:
24:14:d4:67:23:cd:cb:ad:33:75:ad:7a:6f:ce:05:
39:58:2f:f5:f6:f8:2b:41:fa:b2:1a:fe:ac:d8:12:
7a:21:a2:a3:ca:eb:18:b0:89:66:6b:b6:38:ae:de:
85:7f:48:83:cc:dd:e7:c0:ef:94:f8:99:c4:3f:5d:
3d:d4:fc:dc:68:dc:de:e9:13:b7:0e:a6:78:71:74:
01:35:64:be:c2:39:26:57:91:23:c1:c0:ef:05:7b:
6d:3f:b8:d6:b3:e3:75:1f:ba:c2:c0:e1:d7:b7:d8:
72:2d:77:50:50:19:28:3f:24:6c:01:7c:a7:13:5a:
05:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:92:26:7B:44:0F:20:CB:7D:BC:40:1A:A5:B3:B7:5F:80:F1:67:AA
X509v3 Authority Key Identifier:
keyid:2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/_JIme0QPIMt9vEAapbO3X4DxZ6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:f440::/29
Signature Algorithm: sha256WithRSAEncryption
64:6e:9e:30:39:14:9b:6c:0d:a9:1f:3d:fb:02:5d:e1:83:1d:
ef:05:53:9d:1b:92:f0:52:7b:79:6b:3e:e4:ec:b5:5e:f9:b0:
0c:a2:59:f2:7e:ee:fa:0c:81:a0:92:13:b2:13:6f:e4:b3:07:
92:87:bf:50:25:ac:b7:13:7a:6f:4f:3d:e3:ad:94:53:12:30:
65:d9:52:5d:29:a9:39:b7:54:5c:40:fd:58:08:3c:ba:7a:25:
8c:90:f6:c8:ac:01:4c:88:aa:92:39:19:74:64:8f:4c:12:d2:
c2:8b:a3:fe:fe:59:40:cf:66:ab:69:3a:7e:e6:20:4d:d3:7e:
31:4f:41:fb:74:c8:eb:06:d0:50:26:e5:41:ae:05:b8:e0:b8:
56:bd:40:9d:45:b9:54:52:39:c3:95:23:aa:e1:c8:a1:26:9d:
d3:3a:f3:d1:d8:90:51:6f:40:12:e6:b3:64:ef:a1:53:e8:3e:
2d:8a:48:72:b5:5b:22:d0:85:f5:42:f0:d5:b2:9d:d6:0d:35:
5b:5d:58:bb:5a:cc:33:98:1a:6b:3f:2a:42:d7:53:01:6f:4d:
de:1b:6d:26:7b:46:ad:6a:f0:af:77:c9:78:7d:a3:f2:55:82:
c4:ea:48:98:aa:9e:3f:88:ca:80:2a:45:98:da:3a:7c:85:12:
7d:fa:6a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 06:23:32 2026 by rpki-client