Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/1-eYpjqyP0r2jlGDmyFTZ63K6osM.roa
File: 1-eYpjqyP0r2jlGDmyFTZ63K6osM.roa (raw, json)
Hash identifier: DwYLVMYxwptlKH2Jo7VsqdJLNSIsspd6i0cEzgvakYU=
Subject key identifier: F9:E6:29:8E:AC:8F:D2:BD:A3:94:60:E6:C8:54:D9:EB:72:BA:A2:C3
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F23684B6993172E0AFC1F3C26B57DB403
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/1-eYpjqyP0r2jlGDmyFTZ63K6osM.roa
Signing time: Thu 02 Jul 2026 15:17:45 +0000
ROA not before: Thu 02 Jul 2026 15:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214560
IP address blocks: 2a10:4646:123::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4b:69:93:17:2e:0a:fc:1f:3c:26:b5:7d:b4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9e6298eac8fd2bda39460e6c854d9eb72baa2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:55:33:5f:a2:a6:2b:05:34:1d:18:03:8a:b6:
90:91:b9:bd:23:f4:b4:22:db:d4:bd:4c:9d:a3:fc:
d8:a5:18:f0:e8:f5:4c:3d:3b:4a:8a:dc:c0:58:2f:
1e:5d:63:ed:f2:77:80:be:37:07:26:b0:4d:9e:68:
60:4b:da:d5:f6:4b:75:89:23:0e:17:2c:c3:d2:0d:
b6:57:ff:84:43:cd:24:6b:b2:e1:f1:e9:c0:bc:58:
46:a7:03:70:04:ae:9a:ab:cd:38:86:91:11:c4:a0:
6a:6c:71:d0:22:ad:57:56:ed:b8:f8:6e:e4:19:70:
af:d2:fe:ce:7d:06:26:84:7a:22:76:83:70:07:0d:
4b:99:dc:05:d4:20:a5:ff:fc:46:06:8b:35:b1:39:
06:4e:e3:74:db:4e:85:9d:d7:30:3c:73:dc:1e:bf:
e4:de:b2:a5:4f:25:e6:fd:ae:59:9e:5e:60:f5:86:
13:6f:4f:d9:58:41:13:d1:86:a5:b4:ab:d9:92:5e:
23:9a:bc:33:dc:11:41:5c:00:27:8c:91:00:8e:77:
6d:a8:f3:f5:3f:82:2a:59:e1:bc:60:5e:42:0b:95:
fb:0c:e1:fb:f9:71:cd:5a:6a:40:c9:d3:88:a6:e4:
85:14:15:7b:80:0e:ea:b9:a2:47:67:05:f5:85:d9:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E6:29:8E:AC:8F:D2:BD:A3:94:60:E6:C8:54:D9:EB:72:BA:A2:C3
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/1-eYpjqyP0r2jlGDmyFTZ63K6osM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:123::/48
Signature Algorithm: sha256WithRSAEncryption
a0:7d:72:9e:7d:0d:ae:71:54:72:70:63:5c:5a:12:9c:68:64:
8f:51:cc:0f:57:1a:90:3c:50:61:f8:7a:ae:18:b9:b2:d6:35:
46:73:be:c8:31:bb:dd:cf:03:ca:6a:72:86:31:0f:8a:55:16:
3b:45:35:e7:b3:2b:82:f8:3a:6a:1a:b2:46:cd:d4:43:b1:22:
f0:b8:c9:7e:97:c4:ff:f9:72:0c:ef:37:e8:6c:d9:45:08:62:
06:c3:6f:42:fb:8a:4f:37:bf:f1:b0:a1:7b:f7:d1:70:5e:30:
03:ba:f4:ff:79:da:5d:e1:0e:c9:53:2d:6b:47:a0:eb:46:4b:
7b:c1:9f:a0:09:ca:96:99:22:6f:58:77:cb:fe:43:0f:20:f7:
ca:a7:bf:61:be:23:c6:f0:c8:51:e3:e4:3a:9f:a8:a3:28:4a:
05:73:51:3a:dd:11:e3:03:fb:c1:a3:64:35:7c:aa:a2:dc:65:
53:f3:04:9d:f7:90:3d:3d:96:6a:3c:0e:36:ef:c5:f6:d1:e1:
24:3f:b8:16:7e:05:4d:0f:59:cc:f0:ba:ed:3e:ad:fd:6d:64:
5c:17:41:0e:14:17:a4:3b:c5:a1:be:1b:c5:e6:1c:7f:31:19:
15:cd:2e:92:28:7c:26:cd:ff:ca:1f:2a:51:a1:fc:1c:df:ad:
cf:d9:9b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:59:26 2026 by rpki-client