Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/0CJ9u17zIPcruLsVJEts_CUZ3fw.roa
File: 0CJ9u17zIPcruLsVJEts_CUZ3fw.roa (raw, json)
Hash identifier: Gg5SPXWp5505pInWA62OkVBNCjh/Ak+0D6VAOWzVDdM=
Subject key identifier: D0:22:7D:BB:5E:F3:20:F7:2B:B8:BB:15:24:4B:6C:FC:25:19:DD:FC
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F23683D8660F3F689FB1350B648E11932
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/0CJ9u17zIPcruLsVJEts_CUZ3fw.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199297
IP address blocks: 2a10:4646:430::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3d:86:60:f3:f6:89:fb:13:50:b6:48:e1:19:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0227dbb5ef320f72bb8bb15244b6cfc2519ddfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:86:91:2e:35:fd:23:11:ab:2c:3c:ce:d6:
c4:88:92:15:f7:7b:7f:50:fc:6c:67:77:45:02:ff:
63:eb:6c:88:61:1e:b9:46:6a:20:0b:5a:64:fb:d9:
c1:75:37:4d:d9:15:3c:29:fb:5d:1a:39:80:39:19:
1c:cd:3e:12:89:31:a3:16:b3:a0:d4:47:40:bc:9e:
6b:54:28:33:ec:60:56:ee:b3:a1:c6:de:60:46:42:
6d:4a:c7:f4:34:7d:a5:59:ac:e2:8a:5f:01:98:90:
a8:d7:0e:09:a0:34:3b:a4:29:70:99:81:cf:e4:2e:
1e:7c:15:25:42:fa:22:fc:7c:b7:e1:8d:8b:66:0e:
58:fa:de:84:4d:94:ff:cc:3e:fc:bf:ad:fc:cf:15:
3d:ae:9c:ac:37:89:fb:4b:48:0b:0e:fb:31:f7:bd:
1f:14:a9:67:1e:3f:d5:03:8d:5d:ec:35:93:13:3a:
7f:cb:78:fc:6e:10:03:8a:b7:01:c3:52:17:9f:09:
51:e7:2f:50:c8:57:7d:32:85:be:0a:b0:c7:a8:97:
11:2d:f9:87:a8:e3:f2:61:1a:e2:fe:b1:a5:48:1d:
d3:e5:08:b9:a1:33:69:87:6d:fc:59:2b:5f:aa:c5:
b4:28:d4:ad:13:56:4c:2d:bb:db:fb:6f:5d:ca:f4:
81:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:22:7D:BB:5E:F3:20:F7:2B:B8:BB:15:24:4B:6C:FC:25:19:DD:FC
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/0CJ9u17zIPcruLsVJEts_CUZ3fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:430::/44
Signature Algorithm: sha256WithRSAEncryption
17:d0:b0:62:26:b4:2f:ad:82:64:95:2f:68:bf:e9:71:a6:d0:
ed:c6:3a:45:22:b7:66:37:5c:b9:e6:8d:b6:e8:3c:71:b3:b1:
ff:70:2a:ba:36:d7:d7:58:0c:dd:33:83:ea:7d:53:68:91:f0:
6f:8f:26:49:86:a0:93:56:58:b3:8c:0a:8a:bf:30:df:bc:c4:
04:b0:a9:f1:c6:71:7c:47:b6:6e:ed:f7:d9:1c:bd:fc:22:22:
dc:80:66:ff:dd:c5:0f:96:36:9f:4f:4b:ab:2f:b0:f7:b4:10:
5a:fc:67:b7:7c:62:52:a5:28:a5:2b:a2:68:16:d5:b4:2e:50:
99:72:f2:1d:a6:a5:48:12:14:4e:8c:05:2d:5c:a7:5f:56:7d:
1b:d3:1c:30:a8:f5:e8:d5:11:8c:a9:4c:ca:94:b7:d0:e0:ba:
da:e3:f2:f8:6c:9f:8c:57:50:16:47:4a:fa:7b:64:29:e7:17:
3f:7c:74:93:96:19:cc:73:8d:c5:ae:75:f6:35:99:41:55:6d:
4b:30:b0:b9:d3:3f:55:a6:7e:70:f8:bd:0e:18:16:fb:8f:1b:
b6:4d:bc:b7:67:6b:53:06:a8:15:12:55:d6:00:a2:b2:09:47:
b2:69:9c:ea:f2:3e:6e:7a:7b:b4:2e:f2:42:49:16:22:d7:6e:
8d:2d:78:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:57:56 2026 by rpki-client