Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1F3-HTrCiFy67RHQTIRP_jVq1zE.roa
File: 1F3-HTrCiFy67RHQTIRP_jVq1zE.roa (raw, json)
Hash identifier: O40g2RCHAeVYBvIAeTm/pCi8ef6n48rYENGa55nCnSc=
Subject key identifier: D4:5D:FE:1D:3A:C2:88:5C:BA:ED:11:D0:4C:84:4F:FE:35:6A:D7:31
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019F6F229CF955097720F7926668C075EC84
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1F3-HTrCiFy67RHQTIRP_jVq1zE.roa
Signing time: Fri 17 Jul 2026 08:12:47 +0000
ROA not before: Fri 17 Jul 2026 08:12:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205866
IP address blocks: 2a11:9044::/32 maxlen: 32
2a11:b4c7::/32 maxlen: 32
2a12:640::/32 maxlen: 32
2a12:643::/32 maxlen: 32
2a12:645::/32 maxlen: 32
2a12:e85::/32 maxlen: 32
2a12:6485::/32 maxlen: 32
2a12:d805::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:22:9c:f9:55:09:77:20:f7:92:66:68:c0:75:ec:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 17 08:12:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d45dfe1d3ac2885cbaed11d04c844ffe356ad731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ad:db:30:0b:25:42:57:e0:84:6f:1a:57:4f:
b7:da:b1:54:49:b2:d6:a5:d8:e7:1e:02:4f:0b:7d:
88:de:07:62:e1:6f:12:06:25:01:c4:96:1f:5e:24:
46:11:4d:01:b0:43:70:29:6d:52:3a:11:55:59:91:
38:76:c0:f6:d9:0c:cc:27:a9:05:bf:a5:c2:e0:8e:
16:6a:29:98:4e:47:44:c7:60:6e:31:8e:a2:d2:b6:
71:4d:8b:f6:3f:1b:33:65:be:5e:d2:0b:a1:27:44:
06:11:f4:b3:38:28:a8:6b:79:08:48:d8:0d:82:a0:
06:ea:2a:e4:a6:5c:14:f8:ce:ed:55:16:60:c0:af:
66:d8:f9:50:5a:19:4e:88:66:55:2f:be:25:28:38:
a6:6c:f1:f2:ec:e9:61:52:b8:63:6b:b5:e5:8f:15:
95:b0:59:66:c1:3a:fc:e5:c5:91:40:91:38:98:8a:
49:a0:f0:ac:ca:eb:96:99:9c:43:b3:1d:0f:56:04:
84:02:af:11:ea:5d:0d:77:b4:48:c1:64:1f:40:0f:
e1:a4:f7:e7:ac:13:d3:ab:36:cf:dd:fe:93:5c:9b:
7b:29:af:02:86:ca:f7:82:29:d4:cb:e7:46:56:5b:
fd:9f:e2:27:36:7f:42:3c:f2:7a:56:a0:06:03:8e:
9b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5D:FE:1D:3A:C2:88:5C:BA:ED:11:D0:4C:84:4F:FE:35:6A:D7:31
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1F3-HTrCiFy67RHQTIRP_jVq1zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:9044::/32
2a11:b4c7::/32
2a12:640::/32
2a12:643::/32
2a12:645::/32
2a12:e85::/32
2a12:6485::/32
2a12:d805::/32
Signature Algorithm: sha256WithRSAEncryption
13:10:6f:5e:39:fa:ff:68:48:0d:59:07:6f:49:60:f4:bc:99:
02:e7:e5:98:6e:84:88:43:ea:d9:db:ac:1a:ae:e8:77:be:77:
b2:ce:a4:61:f2:c6:8e:96:c3:e1:b3:64:f3:31:ba:5a:84:57:
42:4e:92:d3:19:73:a7:af:6c:5e:1b:08:06:73:8a:57:e6:07:
4b:f4:4e:46:9b:b4:04:fe:ec:23:27:20:bd:23:ec:bd:67:1f:
4c:01:d0:b1:58:4a:57:5b:a7:ca:c4:8d:64:76:44:71:7d:3b:
94:33:18:95:5c:b8:90:e1:f1:23:61:2d:8f:23:3d:f8:d0:a4:
5a:fd:5a:13:d3:c9:32:f0:d5:5f:20:62:eb:d5:7a:47:69:b1:
fa:c7:b8:b7:1c:68:c1:43:2d:1f:58:69:dc:69:ab:16:7a:5e:
a9:a4:1e:69:ed:ef:dc:df:82:d8:99:34:64:f0:ef:ea:88:73:
9e:53:39:85:ab:d8:4e:bc:e6:ec:23:0e:01:5c:b7:27:41:f9:
27:ae:ef:02:0e:72:9b:e2:27:bf:b2:4c:b3:92:2a:4f:0b:5d:
60:7c:ce:48:df:ab:d7:2d:b4:ec:24:cc:3f:c2:c0:ab:d7:50:
4f:10:84:bd:27:91:77:1e:28:c2:82:81:8d:b2:84:46:0a:97:
e0:e3:70:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:26 2026 by rpki-client