Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/2mcmBph44T6F-kS8XWJD7lOyKpw.roa
File: 2mcmBph44T6F-kS8XWJD7lOyKpw.roa (raw, json)
Hash identifier: YgZT5uRBbUSFNWW/4uRQ1rHtYNnG1WTldBKIGXD9WOM=
Subject key identifier: DA:67:26:06:98:78:E1:3E:85:FA:44:BC:5D:62:43:EE:53:B2:2A:9C
Certificate issuer: /CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Certificate serial: 019F236866AD3C6CFB3AE72C871C98E37AB9
Authority key identifier: 6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/2mcmBph44T6F-kS8XWJD7lOyKpw.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200508
IP address blocks: 2a0a:cd80:1001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:66:ad:3c:6c:fb:3a:e7:2c:87:1c:98:e3:7a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da6726069878e13e85fa44bc5d6243ee53b22a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:6f:c3:6e:96:ec:11:0b:ac:40:20:11:1b:
80:b4:27:cc:8c:e9:cb:4d:43:d7:2e:47:4b:29:03:
c2:36:01:db:06:9f:7d:f1:56:05:6b:e5:f5:bc:ea:
f5:aa:fa:8e:46:a9:8e:ba:67:70:cc:22:58:36:6c:
95:d1:83:80:4e:f3:f8:00:a0:9a:d1:33:ed:8e:64:
7e:52:7e:85:f7:d3:3c:fc:f0:83:cd:18:ec:f5:b3:
32:56:f5:f4:4f:ff:14:e3:8d:80:21:cb:5b:46:da:
d7:47:27:ad:e3:dd:a7:ed:3d:90:a7:c6:c6:20:f1:
a3:2f:04:7b:f6:7d:79:75:e3:88:5b:ec:07:5d:10:
6b:36:2a:f8:43:bb:73:2e:f1:58:86:81:cc:de:8c:
5f:be:9f:61:63:7d:5a:df:d6:52:6d:33:2d:ce:02:
e4:b0:52:3c:f8:98:ec:9a:07:6e:d8:56:76:db:64:
76:c1:26:99:c4:73:c4:42:77:f4:1f:14:7d:a6:64:
ea:00:11:45:04:6e:a8:85:40:95:a2:21:83:61:64:
80:8c:42:a1:b9:b6:ac:f1:47:52:ec:3f:44:69:53:
ff:55:11:1c:98:bf:33:6e:41:5b:d4:2a:27:36:d4:
d2:97:ce:a7:21:e0:64:95:9c:92:36:e2:32:e1:47:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:67:26:06:98:78:E1:3E:85:FA:44:BC:5D:62:43:EE:53:B2:2A:9C
X509v3 Authority Key Identifier:
keyid:6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/2mcmBph44T6F-kS8XWJD7lOyKpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:cd80:1001::/48
Signature Algorithm: sha256WithRSAEncryption
51:d8:2c:e1:e9:05:55:af:7b:9d:fd:f5:2c:0d:6f:2a:db:e1:
bf:4c:5d:03:d2:20:01:e4:40:12:f3:ef:51:ce:7e:6b:07:68:
0b:3e:a4:f0:83:29:ab:d4:49:db:c3:bf:9d:4e:9b:28:5c:8f:
45:da:6d:cb:8e:c5:f0:41:b4:d7:b5:bc:6d:27:48:de:8b:59:
e0:be:e5:43:91:95:11:fb:de:16:7f:21:5d:bc:27:02:0c:b6:
f9:e0:72:e5:58:ab:8c:5a:82:6d:a8:f5:ac:18:50:f3:c8:02:
70:81:d4:be:9a:84:d9:c0:50:c4:63:29:9a:7a:da:03:be:83:
bf:fe:92:8a:e3:75:88:2c:d0:14:14:7f:01:d6:a4:00:17:f0:
72:10:00:85:69:92:fe:55:b9:28:81:d5:fc:07:4f:bb:65:68:
6d:50:0c:d2:3b:e4:de:f6:4a:03:74:dc:ae:4d:af:6b:1b:02:
77:ef:32:9f:c9:0b:a4:36:6e:76:e1:5a:60:f8:1a:2a:a5:f6:
b8:02:aa:ae:5e:43:3c:b2:c8:8e:0d:cf:3d:67:dd:f6:c5:b8:
f8:6c:ae:c1:c3:a3:42:b1:00:1b:e7:49:69:91:62:ca:29:54:
66:e8:ab:a7:cd:47:91:86:84:ff:85:b4:1b:f0:80:51:95:81:
65:db:16:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:47:59 2026 by rpki-client