Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/0xZa5yWUtoc-24jdugiflkmmIc4.roa
File: 0xZa5yWUtoc-24jdugiflkmmIc4.roa (raw, json)
Hash identifier: qEcPxa3jNxSXYXEJgRMGQ6gYdmaxH+Dt3Hzpzwm1GXk=
Subject key identifier: D3:16:5A:E7:25:94:B6:87:3E:DB:88:DD:BA:08:9F:96:49:A6:21:CE
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F4B99E2505CDD75E9F3508B9888520711
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/0xZa5yWUtoc-24jdugiflkmmIc4.roa
Signing time: Fri 10 Jul 2026 10:36:43 +0000
ROA not before: Fri 10 Jul 2026 10:36:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211448
IP address blocks: 2a10:4646:190::/44 maxlen: 44
2a10:4646:800::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:99:e2:50:5c:dd:75:e9:f3:50:8b:98:88:52:07:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 10 10:36:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3165ae72594b6873edb88ddba089f9649a621ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:36:bd:38:3d:d4:08:a3:36:2c:12:5f:b8:b3:
6f:9f:bc:a1:df:3d:9e:71:a4:77:77:bd:ce:79:57:
33:88:27:e5:67:91:f9:52:24:26:0a:87:9b:08:e8:
b7:9d:36:3d:6e:25:9d:00:3c:7d:81:a0:c8:5d:e8:
4e:88:73:f9:c3:f6:95:41:66:25:31:ed:70:7d:14:
64:7f:22:a4:3e:84:df:b1:b7:e7:c5:02:3d:a0:49:
74:a4:c3:f4:31:64:d3:c7:18:7f:78:7f:57:0e:22:
6b:4c:b4:e7:b4:7f:bc:3a:53:00:d7:2c:98:a6:96:
f4:98:68:00:d0:72:2a:e4:26:28:92:d2:f8:5f:39:
56:50:ab:7e:51:58:56:8f:f5:69:dd:8e:8c:8b:ca:
25:ef:eb:f7:42:9c:3a:65:7b:fa:5a:36:bf:1f:5d:
1f:62:39:ae:bc:41:91:f8:50:f4:aa:f3:ff:28:6e:
cb:29:86:41:30:fb:49:ac:7a:b8:73:ba:3a:b9:26:
ee:87:78:a6:b9:08:91:3f:1b:0a:64:dc:6e:57:99:
3a:74:9e:6c:c7:44:19:fa:35:75:a4:0b:7e:62:49:
c2:3c:c2:7d:04:cb:72:c9:68:4e:a3:9a:e3:fb:88:
b3:ca:15:15:70:e7:33:50:c7:b3:08:87:24:26:fd:
06:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:16:5A:E7:25:94:B6:87:3E:DB:88:DD:BA:08:9F:96:49:A6:21:CE
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/0xZa5yWUtoc-24jdugiflkmmIc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:190::/44
2a10:4646:800::/44
Signature Algorithm: sha256WithRSAEncryption
6c:7f:e4:fe:d7:81:95:c1:1d:f1:a2:02:95:c4:77:15:8e:16:
fd:2b:f5:bd:ac:cd:fc:69:9d:ff:76:51:22:a1:c5:1c:21:a6:
bb:2f:60:96:de:6a:a2:4d:30:a6:a2:62:f3:10:ca:11:d4:c4:
58:7a:2a:31:50:d4:a6:fe:4c:32:f9:22:f5:15:09:30:c2:12:
0e:c5:6e:00:48:21:d8:05:92:42:8f:a5:17:06:4f:43:d9:04:
8a:3e:9b:64:84:a0:b4:a8:b6:2c:84:65:ef:36:6f:e4:90:ab:
d8:20:f7:61:ba:74:2b:2a:53:c2:b5:c8:3d:bd:87:eb:99:3e:
60:98:9a:24:db:01:59:23:40:4b:f7:1c:74:79:75:bd:5c:36:
98:f2:30:87:39:a9:22:80:c2:40:36:c3:21:b5:6d:2d:df:58:
f9:7a:75:41:1b:52:c4:79:f3:9e:b8:f8:8f:18:06:0b:1e:75:
c3:6a:96:d7:e8:49:62:58:7e:c4:1e:32:0a:b5:0d:41:c6:68:
cf:c1:bc:d1:b3:f8:2b:7a:86:cf:32:48:8d:c4:57:8e:e5:c6:
83:09:cd:23:54:ef:d5:c4:59:37:2b:b6:d8:d3:5e:ca:1b:9b:
20:b1:91:06:9e:89:bf:11:9c:c5:ba:6b:af:b0:aa:f3:fe:4b:
6f:7b:50:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 16:00:08 2026 by rpki-client