Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/dA5GHyWkiinW-X3ggJL5uaWKg90.roa
File: dA5GHyWkiinW-X3ggJL5uaWKg90.roa (raw, json)
Hash identifier: AobSuh+m+/JdWn6/war1pe24bAV9jiWfGNJFdO8s0gA=
Subject key identifier: 74:0E:46:1F:25:A4:8A:29:D6:F9:7D:E0:80:92:F9:B9:A5:8A:83:DD
Certificate issuer: /CN=260d76042292896f9653aa689e41607942b34f87
Certificate serial: 019F380CB1012AF375175B30389E174D5F43
Authority key identifier: 26:0D:76:04:22:92:89:6F:96:53:AA:68:9E:41:60:79:42:B3:4F:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jg12BCKSiW-WU6ponkFgeUKzT4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/dA5GHyWkiinW-X3ggJL5uaWKg90.roa
Signing time: Mon 06 Jul 2026 15:29:43 +0000
ROA not before: Mon 06 Jul 2026 15:29:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219504
IP address blocks: 2a07::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jg12BCKSiW-WU6ponkFgeUKzT4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:0c:b1:01:2a:f3:75:17:5b:30:38:9e:17:4d:5f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260d76042292896f9653aa689e41607942b34f87
Validity
Not Before: Jul 6 15:29:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=740e461f25a48a29d6f97de08092f9b9a58a83dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:27:74:15:62:0f:c0:7b:d6:82:f8:e3:03:
85:56:fb:5b:65:da:71:19:b7:32:a3:ce:e5:be:e1:
b7:9b:95:75:bb:99:2f:6e:f6:e6:ef:90:44:bc:ad:
d0:80:dd:28:50:f6:5f:47:19:01:4b:8a:e2:56:08:
75:93:ee:d5:44:bd:a9:17:5e:90:bd:71:e4:9a:e2:
24:f2:c4:81:c7:0d:6b:8c:f7:38:35:15:da:15:5b:
53:e1:c7:0a:ab:cf:0d:83:e0:80:6d:8e:74:9b:fc:
6a:e6:c5:39:64:c8:fd:42:1a:54:30:ab:65:0b:8d:
17:1f:7d:3b:63:db:86:34:76:06:c7:38:ab:b1:66:
87:e6:95:30:c1:53:b0:99:f0:46:2b:2b:01:ad:6d:
e0:d7:a7:dc:47:ac:1a:b5:3e:58:0a:81:84:be:c0:
58:72:22:77:74:0d:fc:eb:11:be:5e:69:54:9e:97:
94:18:13:38:3c:03:35:6b:a5:52:e1:d0:18:32:af:
61:80:aa:30:47:48:55:15:68:93:78:6f:cb:51:3c:
59:b9:3e:64:00:92:23:ab:a4:3f:ab:0a:cc:0c:8e:
df:20:17:40:7c:8d:12:a8:e6:6f:b0:ff:c7:98:e7:
da:61:af:85:cc:3a:e6:a2:c7:44:b4:31:94:dc:cb:
60:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0E:46:1F:25:A4:8A:29:D6:F9:7D:E0:80:92:F9:B9:A5:8A:83:DD
X509v3 Authority Key Identifier:
keyid:26:0D:76:04:22:92:89:6F:96:53:AA:68:9E:41:60:79:42:B3:4F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg12BCKSiW-WU6ponkFgeUKzT4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/dA5GHyWkiinW-X3ggJL5uaWKg90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07::/29
Signature Algorithm: sha256WithRSAEncryption
22:a8:a4:9c:56:15:46:96:f9:62:2b:6e:69:67:4d:24:9f:26:
53:61:18:5b:e0:7a:e4:32:89:3c:9a:51:35:f5:b4:87:16:a8:
ce:b4:4b:41:0d:12:20:03:f8:36:40:ee:0a:d4:2d:12:40:42:
a7:72:30:39:15:38:63:b7:6a:f9:13:dc:e9:ab:c9:50:ef:20:
26:5b:0c:95:d8:02:cd:c8:eb:3d:0e:89:5e:94:6a:e3:27:a6:
15:c5:10:a9:57:6a:3b:5d:d9:15:37:ab:0c:a4:68:08:39:07:
1b:7a:1d:6d:e4:e8:66:29:e3:58:75:1e:f4:06:fd:e3:87:2d:
a9:4c:2f:c3:82:de:ca:27:62:b2:09:3f:6d:9a:52:14:70:1c:
f3:67:66:e4:5c:58:b9:81:4d:9f:52:ec:4d:4a:09:99:32:6b:
e9:41:71:74:75:37:ac:38:cd:1b:32:c0:6a:13:5f:8f:19:cc:
0a:93:24:a3:fd:4b:20:54:72:23:46:31:b7:6d:23:4d:c3:f3:
42:3c:ab:8f:c8:3f:f2:7f:58:13:f0:b4:29:b4:68:a7:df:57:
6d:d5:de:6b:5a:72:ec:0e:5d:cd:50:26:7e:ef:e2:74:b5:7e:
a2:66:0f:cc:6d:e3:f3:06:a5:e4:90:4b:2c:e8:db:42:78:e6:
93:b3:46:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:34 2026 by rpki-client