Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CXtfghrALGNdI-YfnGqgG5aQ2lA.roa
File: CXtfghrALGNdI-YfnGqgG5aQ2lA.roa (raw, json)
Hash identifier: LSv7ZLbvHtDf3ObDNihWIzRmiFMUseX2bvr4Z6OMlDI=
Subject key identifier: 09:7B:5F:82:1A:C0:2C:63:5D:23:E6:1F:9C:6A:A0:1B:96:90:DA:50
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F4AFB81218F8CD90AD856A6ED1F31BCE1
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CXtfghrALGNdI-YfnGqgG5aQ2lA.roa
Signing time: Fri 10 Jul 2026 07:43:44 +0000
ROA not before: Fri 10 Jul 2026 07:43:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14956
IP address blocks: 2a0f:3046:fd46::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4a:fb:81:21:8f:8c:d9:0a:d8:56:a6:ed:1f:31:bc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 10 07:43:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=097b5f821ac02c635d23e61f9c6aa01b9690da50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a2:66:7d:5e:aa:6f:e2:b4:bc:7c:ed:7b:89:
ad:fa:ae:19:b1:49:d4:61:df:3d:45:4e:ab:98:fc:
cd:71:3b:76:18:4d:95:07:91:46:71:7e:be:cc:d3:
35:e0:58:a3:78:57:c6:10:c7:b4:c4:9f:e1:74:a1:
3b:2c:2d:6e:74:5f:e4:82:22:26:67:af:0f:10:e1:
b6:58:e8:44:00:4d:1e:bd:ff:2c:7d:bf:31:fa:1c:
1d:11:36:03:1f:0a:51:72:62:1a:7b:f0:eb:f0:ee:
f2:81:ed:7a:78:80:9f:8c:50:8e:62:e6:bf:f2:a2:
7c:15:d9:a9:c6:37:b9:c9:56:85:a1:eb:4a:29:15:
a7:ca:60:75:c6:6e:cb:13:61:51:da:95:af:f8:25:
fe:97:c1:2a:15:cd:40:b0:13:3e:73:60:54:50:9e:
2c:6b:e1:ca:c2:b9:3f:5f:17:a0:ef:f0:13:2f:33:
ea:1e:a0:fd:95:14:41:db:73:40:9e:ce:36:96:5c:
1d:fe:2b:4e:32:fc:c2:b4:30:11:f4:11:15:63:bd:
f3:69:ec:e7:73:ac:6b:a3:59:09:d7:38:52:1d:88:
5f:0f:b6:5e:3b:27:9c:0d:89:a0:cb:36:99:44:6f:
fd:f7:44:81:ce:29:5b:7a:0d:96:2e:c1:05:83:96:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7B:5F:82:1A:C0:2C:63:5D:23:E6:1F:9C:6A:A0:1B:96:90:DA:50
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CXtfghrALGNdI-YfnGqgG5aQ2lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3046:fd46::/48
Signature Algorithm: sha256WithRSAEncryption
06:95:56:96:a3:13:b4:99:4e:42:4f:f3:21:c2:a4:bb:df:96:
bd:e4:84:85:1f:5f:6b:5f:2e:72:c7:a4:e1:41:d2:63:61:f2:
5e:f8:7e:25:1b:b7:1c:97:3d:0c:29:47:e7:bd:d3:1e:df:e1:
e0:50:06:7f:6c:e6:07:a5:8d:c8:e4:f4:06:53:20:0d:1c:b0:
f9:41:99:52:39:a8:84:7b:7c:1f:47:88:84:79:69:75:3e:8d:
55:57:c5:8f:2f:ad:19:35:87:09:a0:bc:cc:63:0b:5a:89:3e:
4f:7c:6f:10:e8:15:ab:ec:f8:29:25:26:5c:15:79:f4:4f:d0:
0f:9c:13:e3:09:d5:03:8e:b1:fe:be:39:25:59:95:65:b4:4b:
f3:eb:68:d1:30:f2:1d:4a:a2:8b:e4:2e:ce:2b:43:3a:1d:3f:
7b:96:7c:18:24:ac:7b:04:3b:a1:bd:81:49:48:eb:4d:80:2e:
8b:c1:98:1d:7c:80:3e:c6:e1:68:95:94:86:80:1c:cd:2b:47:
68:20:cb:ad:d0:8f:ba:16:79:f0:c3:c5:77:6d:f0:97:ff:71:
2f:11:b5:12:c9:76:8a:27:9c:fb:6e:1e:7d:b7:5e:99:5d:33:
ce:2a:8a:c7:96:17:b7:d2:6c:e0:af:75:e7:9e:c5:42:d6:cc:
8f:31:d9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:42 2026 by rpki-client