Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/1-P0nqDPDJrFkl0N5JHGyKM5XfQw.roa
File: 1-P0nqDPDJrFkl0N5JHGyKM5XfQw.roa (raw, json)
Hash identifier: 0v6Z94OQ8OEYuVPUX/BBkgAoPKUlQ0dv8VbYzRMpkfw=
Subject key identifier: F8:FD:27:A8:33:C3:26:B1:64:97:43:79:24:71:B2:28:CE:57:7D:0C
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F23683827335B70037E6666099CE962F1
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/1-P0nqDPDJrFkl0N5JHGyKM5XfQw.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52073
IP address blocks: 2a10:4646:120::/44 maxlen: 48
2a10:4646:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:38:27:33:5b:70:03:7e:66:66:09:9c:e9:62:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8fd27a833c326b1649743792471b228ce577d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:32:f7:51:64:4c:d0:2b:47:31:3a:49:13:cb:
48:5a:1a:e8:ac:29:34:85:a8:d4:4d:f8:c4:d9:59:
94:82:60:d7:1e:ed:d1:46:63:c2:23:f0:a6:7a:88:
f4:f0:b6:96:89:6d:2d:c4:4e:d9:49:c6:cd:cc:4d:
86:0e:68:33:90:f6:88:a9:7f:4c:cb:88:5c:8e:9a:
ad:72:78:fe:1b:3d:de:d9:9e:12:8f:e9:fa:a4:cc:
7c:91:5e:91:dc:91:bc:74:42:3b:e4:23:ac:37:fe:
76:99:29:5f:1f:bf:91:37:aa:ed:2c:d2:06:f2:d0:
ce:18:db:2f:c1:a4:6e:14:ec:b7:07:89:bd:e2:8c:
c9:11:0b:d2:f7:6f:a8:ab:bc:13:5b:a8:ce:2e:ed:
93:c5:88:40:18:c8:28:79:6c:2f:29:24:95:c5:4e:
c6:a3:94:a3:63:96:52:48:3c:5a:67:92:80:b7:d1:
5c:af:af:8c:2e:0d:e8:e7:57:47:85:5d:16:65:62:
59:55:32:a2:29:e1:fc:74:8f:4d:a5:77:32:2f:a1:
d0:00:96:b3:8b:15:5a:cf:82:54:cb:48:96:97:1f:
4e:2f:c3:b0:37:28:0b:7d:52:eb:e5:17:af:dc:91:
87:04:0d:02:e0:c2:21:b3:69:bb:04:9c:0d:62:e3:
20:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FD:27:A8:33:C3:26:B1:64:97:43:79:24:71:B2:28:CE:57:7D:0C
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/1-P0nqDPDJrFkl0N5JHGyKM5XfQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:120::/44
Signature Algorithm: sha256WithRSAEncryption
21:2c:57:be:3a:a0:2d:eb:cb:df:28:06:a1:2d:e5:1b:a1:c6:
28:66:97:eb:1f:0d:9b:8f:8b:70:5e:4f:3d:3e:56:3e:13:d6:
c7:37:32:6a:c3:0d:ba:1b:b5:69:be:ea:3d:15:67:db:15:a0:
d2:0b:8d:42:6b:f3:59:02:e3:48:a7:28:29:3a:a4:cc:e4:a7:
40:f5:f1:38:3d:1b:5d:28:8a:2a:ba:90:36:d7:62:90:7d:05:
cf:95:2f:67:75:28:b0:db:f0:ee:d1:4a:16:51:c4:17:81:b6:
f2:77:3a:b2:68:29:cc:d0:88:70:5b:6e:8b:5a:c8:54:23:12:
af:af:8f:48:1a:75:9b:f9:90:25:2c:3c:29:cd:62:a3:57:e2:
56:9c:4f:f2:db:32:31:45:3b:77:2c:21:ed:b9:b9:b7:ad:64:
84:2c:99:09:a7:6e:fb:17:99:11:b6:b9:98:9b:00:77:4c:24:
63:82:62:fe:33:27:19:0b:fc:dd:cb:b8:40:64:00:f8:39:53:
4c:87:9b:e3:44:b3:95:b8:e5:c1:b1:a7:e7:c5:75:c6:c9:bd:
56:13:97:d5:34:6b:71:62:5c:2e:78:13:d4:36:11:d3:cb:05:
d5:d4:53:3a:f5:e3:4d:7e:c0:93:d0:99:99:07:7e:95:89:f7:
b8:20:b1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:57:12 2026 by rpki-client