Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/RTZmGDdPCU2SBV4lhMEH2Sp_2-o.roa
File: RTZmGDdPCU2SBV4lhMEH2Sp_2-o.roa (raw, json)
Hash identifier: vYRw7atU1j7YPp403PSxl0yUcReYPk7klM3aD3yLz8o=
Subject key identifier: 45:36:66:18:37:4F:09:4D:92:05:5E:25:84:C1:07:D9:2A:7F:DB:EA
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 019F228F4CE90404C73607D5EE8B19770477
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/RTZmGDdPCU2SBV4lhMEH2Sp_2-o.roa
Signing time: Thu 02 Jul 2026 11:20:44 +0000
ROA not before: Thu 02 Jul 2026 11:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8888
IP address blocks: 2a12:a300::/29 maxlen: 48
2a14:1f80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:8f:4c:e9:04:04:c7:36:07:d5:ee:8b:19:77:04:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Jul 2 11:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45366618374f094d92055e2584c107d92a7fdbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:77:59:ef:72:dc:55:51:c6:fa:65:4f:11:
6d:1c:e0:56:7f:e8:c3:c9:6a:94:53:be:a3:a7:88:
c4:76:4d:88:25:a3:4e:12:45:23:ec:64:f8:2f:94:
99:9f:00:32:50:7b:04:44:bb:22:5d:52:d5:31:52:
58:d8:6b:6b:e6:99:bf:b3:2e:58:8b:bd:8c:d1:06:
ec:e4:b1:93:22:cd:ae:38:23:09:8c:36:a5:08:d3:
d3:ab:30:3f:12:45:1f:84:6d:44:bd:b5:9e:59:b3:
58:25:49:97:b1:3a:b6:4c:7e:f7:dd:35:d1:e1:26:
e6:51:3a:ab:49:24:bd:f8:4c:d0:7d:51:3a:81:16:
5f:10:f5:2f:e6:a0:d9:24:df:b1:b1:93:73:67:92:
c5:78:0a:31:42:28:05:cc:2e:ab:f0:9b:da:57:74:
42:83:9b:6c:63:ba:47:06:f5:88:03:47:7a:91:5f:
cb:28:3c:5e:6d:9f:af:03:53:f0:bd:dc:e2:24:ee:
ef:66:34:2d:be:7e:6c:5b:2d:17:8b:40:a2:04:fc:
29:c4:5c:0a:ec:a5:63:b7:ad:fa:9c:31:83:16:ef:
1b:f2:ef:59:7e:e3:79:d1:d4:2b:44:1f:e6:07:5e:
59:6d:00:ad:2c:94:90:6b:d4:6a:72:bd:7c:23:54:
ad:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:36:66:18:37:4F:09:4D:92:05:5E:25:84:C1:07:D9:2A:7F:DB:EA
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/RTZmGDdPCU2SBV4lhMEH2Sp_2-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a300::/29
2a14:1f80::/29
Signature Algorithm: sha256WithRSAEncryption
0f:e0:5b:15:8f:80:4b:96:94:ba:7b:ce:94:11:4d:94:9b:38:
dc:fb:93:fa:4e:b3:3a:eb:77:23:d4:5d:a3:0f:d8:ce:e0:c5:
fc:db:9a:38:77:91:4b:fc:ab:df:2d:cf:70:27:94:6b:31:b3:
8d:00:ce:06:40:59:32:d6:e4:3d:33:84:b7:ea:d4:81:b0:38:
22:ba:e6:83:c9:df:94:28:c3:cd:ec:fa:27:d1:12:b6:9a:ce:
94:34:2a:1a:e5:03:1d:a4:cf:c6:07:7c:7f:8e:71:dc:a3:83:
69:43:3a:1e:c9:59:72:fa:ee:f2:dd:5d:a4:18:bd:6a:ea:a2:
1f:d5:67:93:d8:dc:12:e7:b8:96:58:48:03:56:a5:6a:15:ed:
95:40:da:21:f1:b9:c1:01:1c:da:d3:8d:56:e5:42:97:a9:6c:
e3:9f:f9:6f:f7:81:2b:f8:cc:a0:8e:c9:73:81:b3:12:44:74:
0a:47:6b:26:69:74:b2:bb:66:10:61:05:42:7a:db:fb:45:b3:
ae:bb:0a:bb:b2:92:ca:f1:71:95:fb:94:81:31:46:eb:a5:04:
3c:2d:55:80:71:23:b9:44:0b:0e:37:9e:cf:9e:65:d1:7e:86:
b5:6f:3e:2a:0a:e2:d9:82:97:89:9c:7e:07:f0:df:8b:02:f6:
a2:54:82:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:23:42 2026 by rpki-client