Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/r2wp15RalYZ-BpL4xsNnngK0594.roa
File: r2wp15RalYZ-BpL4xsNnngK0594.roa (raw, json)
Hash identifier: NNjjTsbzbTB3BJf0ScAIqlbHnQQtN/B+x9X2kssrtLQ=
Subject key identifier: AF:6C:29:D7:94:5A:95:86:7E:06:92:F8:C6:C3:67:9E:02:B4:E7:DE
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019ECA9A399040BEE4CFDDD8B1FC9BE2500E
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/r2wp15RalYZ-BpL4xsNnngK0594.roa
Signing time: Mon 15 Jun 2026 09:26:05 +0000
ROA not before: Mon 15 Jun 2026 09:26:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132337
IP address blocks: 2a11:1100::/29 maxlen: 32
2a11:ea40::/29 maxlen: 32
2a12:7b00::/29 maxlen: 32
2a12:c780::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:9a:39:90:40:be:e4:cf:dd:d8:b1:fc:9b:e2:50:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jun 15 09:26:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af6c29d7945a95867e0692f8c6c3679e02b4e7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:f3:c0:87:fe:eb:3d:e8:2c:e9:fa:b3:ea:
b9:0e:87:86:93:e0:d0:55:43:50:ee:23:3d:c0:b6:
13:ff:21:ad:d6:6e:f1:cb:64:7f:49:79:c5:c8:6b:
e7:ea:04:b9:2b:68:6b:18:21:40:7f:5f:ee:34:ac:
50:12:bd:cf:a4:0d:8e:df:30:b5:77:2f:ee:7c:36:
ce:b5:bb:f8:9c:d7:37:51:89:c8:9b:13:f9:bf:8e:
c3:6f:a7:42:fe:65:43:f5:9d:94:13:b6:76:d5:2e:
70:91:d4:50:fd:f1:bd:4e:cc:22:25:d2:59:06:14:
c5:60:5f:ee:b2:7b:49:a3:ae:56:75:37:b4:6d:3b:
9f:0e:57:b0:1e:dd:32:c5:c4:90:6a:92:45:fe:49:
7e:ba:40:ec:02:71:db:53:7a:2f:33:12:7b:c4:a4:
93:4a:2d:f4:8b:e2:ae:14:47:90:04:d9:e6:1f:de:
17:5a:03:9f:38:b8:fb:e6:34:9c:a2:53:ae:de:8d:
f7:63:29:d3:54:42:6f:7d:93:5e:41:b2:c5:d8:ce:
27:42:95:ce:4f:ee:dc:9e:2a:42:ff:93:da:e6:4f:
85:71:48:45:00:2f:bb:d7:d2:08:ba:3e:48:4e:6d:
4e:76:08:c2:bf:94:c4:65:4b:1a:63:bc:76:2f:dd:
8a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6C:29:D7:94:5A:95:86:7E:06:92:F8:C6:C3:67:9E:02:B4:E7:DE
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/r2wp15RalYZ-BpL4xsNnngK0594.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1100::/29
2a11:ea40::/29
2a12:7b00::/29
2a12:c780::/29
Signature Algorithm: sha256WithRSAEncryption
3d:40:5a:a4:fd:88:80:b9:cc:27:a4:c0:1d:c4:0a:03:99:41:
a4:74:f6:e1:46:ba:fa:42:05:40:60:3d:72:32:db:24:26:fb:
8d:95:85:e1:58:53:a7:bc:8e:8a:f0:7d:27:2e:24:94:27:8a:
9f:30:4b:99:20:46:ec:bb:39:fe:42:64:d6:ed:49:5d:cc:eb:
be:96:62:d3:44:b7:7a:48:2b:1d:00:fe:82:aa:18:cd:a1:9e:
5b:96:3c:c0:10:e1:70:39:26:15:4a:2b:e5:87:8b:cc:72:c4:
b0:ba:57:7b:e4:21:8e:2b:54:77:4e:34:fa:70:1d:7f:f1:19:
ab:a0:1e:d8:94:82:24:b0:51:15:89:ee:98:84:b5:92:e7:47:
93:c8:ae:97:b5:0b:cf:94:20:54:cf:b9:59:d3:b7:be:9f:7d:
e1:01:cc:20:ae:e1:0a:85:93:d7:f5:a8:82:b3:79:a6:f0:59:
86:88:4f:41:0a:5b:53:54:84:3f:dc:25:d4:f4:40:87:60:59:
00:dc:a3:c9:ad:c9:50:8e:87:fe:66:87:06:87:01:a2:0d:03:
4b:0e:f4:89:36:6a:f4:c6:c0:1f:d1:4b:e4:c9:7a:94:a2:53:
66:7c:32:73:80:05:98:56:c9:2f:dc:dd:33:f8:76:dd:4a:20:
de:0b:f5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:11:41 2026 by rpki-client