Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p2vAzhl_HG8XHaB1qLbPDSGaz3E.roa
File: p2vAzhl_HG8XHaB1qLbPDSGaz3E.roa (raw, json)
Hash identifier: 6a3wiqhwjPWaZ+oEFIlrFkYKN2nF+2a1lTGQ2IRwxIE=
Subject key identifier: A7:6B:C0:CE:19:7F:1C:6F:17:1D:A0:75:A8:B6:CF:0D:21:9A:CF:71
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F66837954A2D17B339A8AA4402F7057AE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p2vAzhl_HG8XHaB1qLbPDSGaz3E.roa
Signing time: Wed 15 Jul 2026 16:02:00 +0000
ROA not before: Wed 15 Jul 2026 16:02:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219418
IP address blocks: 2a02:2fc0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:83:79:54:a2:d1:7b:33:9a:8a:a4:40:2f:70:57:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 15 16:02:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a76bc0ce197f1c6f171da075a8b6cf0d219acf71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:5c:aa:28:54:e4:0b:0c:29:95:96:ab:82:
65:2f:90:a6:0a:f5:a4:2f:2a:e3:a5:a6:67:53:ff:
b0:42:e4:ff:7f:fd:36:3a:86:9f:23:22:f0:a0:43:
e2:b8:76:51:8c:f6:79:8f:11:55:06:5e:e7:1c:df:
d4:c1:ec:e0:18:e8:23:ae:2d:51:5f:e7:92:b6:34:
a6:b1:27:f3:2d:7e:f5:f6:97:db:ea:db:67:c5:b2:
4c:7c:7a:85:a1:b5:58:cc:0c:2d:72:af:9e:72:81:
09:f9:3a:cf:70:93:11:41:5f:63:cb:9f:c2:df:4d:
b4:95:64:f8:01:cc:7e:5a:b3:47:ac:75:7b:6c:75:
f4:d9:48:18:ab:f0:6e:fd:0c:fe:0f:b8:70:fe:08:
78:51:26:a1:b7:3a:87:4c:7b:eb:5f:e3:b4:7e:6e:
43:aa:d4:49:18:58:cc:1f:bf:9e:92:82:b3:6c:30:
f9:9d:14:82:1c:0a:7c:86:78:9c:64:9b:76:c0:4b:
0e:ea:6d:5e:a5:af:7d:15:ce:e1:92:9f:61:87:31:
b2:7d:19:3b:08:71:a4:4f:71:83:6e:45:ce:60:7d:
5f:70:49:c0:b9:22:d9:df:8b:cc:d2:0c:2f:ce:0e:
17:35:2a:01:76:59:9f:e7:12:a7:a3:9d:c6:39:e8:
bd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6B:C0:CE:19:7F:1C:6F:17:1D:A0:75:A8:B6:CF:0D:21:9A:CF:71
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p2vAzhl_HG8XHaB1qLbPDSGaz3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2fc0:1::/48
Signature Algorithm: sha256WithRSAEncryption
e4:f9:a1:70:03:9a:ec:d5:3d:d6:7f:37:2f:11:16:29:dd:e9:
43:bc:cc:64:6b:b8:43:c3:fb:95:b4:05:2c:f3:95:97:bd:80:
1f:6e:cf:ab:a5:8b:82:34:82:fc:6b:bd:95:1d:51:f2:b9:2d:
6e:42:d1:f0:80:5e:40:cb:e9:88:57:87:60:31:e1:bf:3a:fc:
db:cf:40:aa:f9:98:75:69:67:5d:83:31:d2:ef:a7:1c:06:b8:
1f:05:89:70:7c:a8:f1:f5:76:78:b6:2b:6d:55:50:4b:42:e3:
88:3d:65:67:12:62:cd:64:b6:52:1c:d6:77:fe:bb:25:64:91:
35:62:da:2e:70:ab:0b:ea:b0:ff:50:c6:db:ce:40:f0:6e:66:
83:78:2e:76:d9:c6:ac:e4:93:26:3a:7b:81:83:00:3d:51:99:
67:94:e2:a3:a4:49:11:27:2f:22:ae:56:63:17:aa:5e:41:ea:
2e:f5:c6:f9:b6:fd:ae:cc:a7:ff:5d:cd:5d:8d:a8:af:7f:22:
f8:a7:16:97:19:69:38:d0:af:1a:62:89:6e:ed:59:6f:f4:29:
f5:35:01:a0:7a:29:c8:04:1c:e5:61:52:9c:35:57:b2:02:1a:
09:96:e6:e6:41:54:fe:48:fc:d3:bd:e2:89:54:32:6a:a5:71:
b1:e5:ae:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:52:43 2026 by rpki-client