Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/v22kTg0bTYFeeEWrApNqBfg_jxY.roa
File: v22kTg0bTYFeeEWrApNqBfg_jxY.roa (raw, json)
Hash identifier: x8keV3yS66xLjOAZX4BOX56TvQOMZSSX31M99Vku2wg=
Subject key identifier: BF:6D:A4:4E:0D:1B:4D:81:5E:78:45:AB:02:93:6A:05:F8:3F:8F:16
Certificate issuer: /CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6
Certificate serial: 019F228C2FF281D63FD7DA8E2525108EB38F
Authority key identifier: 2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/v22kTg0bTYFeeEWrApNqBfg_jxY.roa
Signing time: Thu 02 Jul 2026 11:17:20 +0000
ROA not before: Thu 02 Jul 2026 11:17:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8888
IP address blocks: 2a02:f440::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:8c:2f:f2:81:d6:3f:d7:da:8e:25:25:10:8e:b3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6
Validity
Not Before: Jul 2 11:17:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf6da44e0d1b4d815e7845ab02936a05f83f8f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:17:1d:74:72:1a:7f:5f:bd:ca:dd:7f:40:34:
65:f0:ec:3d:29:e8:54:e8:58:bc:06:d9:b6:13:b8:
87:72:0d:14:11:7b:e1:af:60:b7:ca:d6:89:27:ff:
25:81:d1:ec:2c:55:ad:f4:76:27:a1:1e:64:6f:68:
84:40:be:8e:fd:d9:c8:48:36:03:57:9c:44:0b:80:
87:95:aa:72:41:67:3e:ac:9d:04:37:b8:5d:ba:eb:
32:a4:0f:0a:ba:04:a9:46:0b:34:d1:16:63:57:a6:
35:1b:c0:06:45:f4:c2:1f:f7:ba:56:3f:43:f2:fd:
91:32:ac:b1:6d:1f:09:8e:0f:5c:dd:36:0c:9e:b4:
17:4a:19:f6:61:ad:43:91:dd:a6:77:b3:2f:37:5d:
26:65:8c:8c:e9:2d:91:c4:82:ff:59:56:44:83:57:
e3:ca:10:11:a6:dc:85:71:05:91:34:b4:9b:63:bc:
4c:9d:85:dc:e1:28:cf:1a:31:05:18:82:f3:63:6d:
88:ff:eb:6a:20:41:72:c9:23:fc:6b:ef:c1:28:a5:
bc:9f:e3:30:2f:bf:9f:0b:4a:7a:93:b6:a8:7e:26:
91:5d:b5:1a:58:c3:14:c6:20:50:f5:87:44:79:5a:
d3:4c:f0:43:b3:d5:b9:bc:f9:44:51:b8:6d:60:40:
58:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6D:A4:4E:0D:1B:4D:81:5E:78:45:AB:02:93:6A:05:F8:3F:8F:16
X509v3 Authority Key Identifier:
keyid:2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/v22kTg0bTYFeeEWrApNqBfg_jxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:f440::/29
Signature Algorithm: sha256WithRSAEncryption
98:37:d4:63:83:a2:b7:a5:d2:7f:8a:9f:2b:55:48:80:38:3e:
b8:09:14:e0:cf:00:75:fd:5e:e0:38:bb:34:5b:07:c8:52:d7:
5b:ff:f4:a7:96:9a:25:a7:b8:ec:e6:f0:74:de:02:73:5f:0a:
d1:11:70:d3:bc:00:49:a3:d3:f1:40:82:1d:2b:26:63:74:55:
cf:47:d7:26:7d:56:7f:d5:c2:c8:9f:a5:f2:84:d0:95:f5:1e:
15:4e:9d:e1:b1:64:e4:51:8d:b2:57:aa:04:d6:fb:1d:79:71:
5a:e7:68:6e:16:88:99:1e:a5:cb:df:8f:16:64:49:7a:70:ab:
ce:54:8c:72:fd:52:15:ca:cf:0d:e0:38:55:be:05:92:7b:40:
9f:67:b3:e8:d6:64:c7:51:42:33:3a:36:46:2c:45:4b:f1:a2:
fa:ec:70:56:7a:d9:88:01:47:91:16:19:72:73:98:0a:d3:66:
5c:93:6a:5b:71:13:41:64:25:d4:f7:29:60:3a:92:fa:2d:8b:
6f:73:8b:bb:ed:61:93:6d:57:9d:5f:0a:94:de:ec:f6:90:3a:
44:02:3c:de:5f:53:52:1f:e1:7d:6b:95:bb:96:37:64:3e:27:
f3:cb:d9:eb:3d:d8:88:c3:83:0a:46:45:58:b3:32:ab:bc:9f:
fc:74:8b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:32:39 2026 by rpki-client