Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/1gbHCEbgQwjeiouKm5GaF97BBGc.roa
File: 1gbHCEbgQwjeiouKm5GaF97BBGc.roa (raw, json)
Hash identifier: ybmEELamwbI3k/0S59jWHQ3NihRk/30dBtI2TdBBoS4=
Subject key identifier: D6:06:C7:08:46:E0:43:08:DE:8A:8B:8A:9B:91:9A:17:DE:C1:04:67
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F2368451A43C42CF1692AC4E3E243EFA7
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/1gbHCEbgQwjeiouKm5GaF97BBGc.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211617
IP address blocks: 2a10:4646:40::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:45:1a:43:c4:2c:f1:69:2a:c4:e3:e2:43:ef:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d606c70846e04308de8a8b8a9b919a17dec10467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:3f:fc:11:21:7d:97:c3:e9:bc:00:8b:ae:
c6:38:68:15:57:54:43:de:ce:77:24:91:e3:48:00:
7a:43:63:3d:5b:8e:2b:0f:c1:ba:b0:f0:52:50:05:
d7:e1:7c:62:58:f1:40:4c:00:60:f8:68:5a:95:b5:
74:2e:fd:e0:28:81:f1:6b:1d:8f:79:d2:8d:89:0c:
1d:85:e1:f6:f7:4c:c2:dc:18:fb:65:72:ce:82:6c:
84:70:ed:df:3c:c1:29:db:10:59:7b:26:4a:6f:1d:
f6:3c:5c:5a:81:9e:d4:d3:dd:ed:19:d1:99:36:91:
84:06:7f:73:d8:3a:ef:fc:3a:77:27:99:39:e1:9e:
c6:13:bd:80:c6:4b:37:2e:aa:81:66:b6:c9:5f:e0:
70:c8:44:77:f4:f7:8d:d2:88:34:03:cb:64:af:3d:
c0:d4:05:41:a9:bc:81:7c:1d:1f:53:c0:27:d3:9e:
2f:d2:8e:ca:2c:38:00:45:0f:c1:9f:7b:ed:97:62:
24:7a:58:04:42:c3:2b:3b:3f:77:5a:dd:1c:c1:e2:
71:8e:bc:9f:73:32:27:d2:be:6b:86:0f:52:de:0c:
cf:38:7d:45:08:8b:92:d8:30:d3:73:5c:fc:fc:26:
99:78:e7:d9:68:8b:00:65:73:3b:e2:29:0a:79:b8:
c6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:06:C7:08:46:E0:43:08:DE:8A:8B:8A:9B:91:9A:17:DE:C1:04:67
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/1gbHCEbgQwjeiouKm5GaF97BBGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:40::/44
Signature Algorithm: sha256WithRSAEncryption
80:6d:74:25:0a:92:ac:06:e3:00:37:93:e9:68:51:ae:dd:66:
a7:26:6c:fd:51:77:b8:b3:67:1a:af:e9:0a:9b:7c:e9:dc:30:
97:5c:67:bd:2d:56:a8:b4:d5:a8:07:86:bb:cc:9b:2f:ad:20:
17:a0:e7:e4:c1:d4:54:81:5a:a8:ac:88:44:c9:2b:f7:cb:5a:
13:54:9c:3b:33:bc:44:68:be:fe:5e:bb:29:f9:64:38:80:16:
1d:f5:25:cf:3a:63:dc:6f:1e:29:06:c5:b7:9e:d1:dd:d4:70:
42:a3:fe:5c:a6:c0:fe:7b:51:1a:7d:20:74:9f:af:0d:8d:b9:
f4:22:ad:3f:fb:84:33:2b:64:85:50:c6:a7:fd:63:84:0f:e4:
d5:9a:9d:a8:08:7d:17:f0:c3:13:f0:e4:5c:7c:f0:26:08:78:
7a:c2:6c:a9:e6:de:b0:e4:39:51:75:f9:bd:6b:15:87:f7:c0:
1a:59:3c:a9:8f:6a:95:47:5f:31:98:63:0e:69:a5:cc:f2:0e:
80:03:b4:87:a5:cc:8f:b8:be:65:dd:e3:b6:22:f2:76:36:dd:
aa:f5:16:e1:33:d9:84:90:24:c9:d3:3f:8f:ba:1a:c7:4c:d0:
73:43:d9:b6:09:2d:af:b6:52:b2:d5:fe:6b:05:93:25:19:49:
ec:30:a8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 16:00:21 2026 by rpki-client