Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/2BycUX4OMpp_ONmpWqOOx8A7GP8.roa
File: 2BycUX4OMpp_ONmpWqOOx8A7GP8.roa (raw, json)
Hash identifier: fBXfZQwwJARK7+JDrhcq1IBYyI1YOEEWIdgMx7lYI70=
Subject key identifier: D8:1C:9C:51:7E:0E:32:9A:7F:38:D9:A9:5A:A3:8E:C7:C0:3B:18:FF
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F236842E765A39FF2561D3018C4134D13
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/2BycUX4OMpp_ONmpWqOOx8A7GP8.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210810
IP address blocks: 2a10:4646:d0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:42:e7:65:a3:9f:f2:56:1d:30:18:c4:13:4d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d81c9c517e0e329a7f38d9a95aa38ec7c03b18ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:08:bf:69:8b:6b:dd:96:0f:a7:82:0a:0a:
fb:a7:72:57:c7:02:a3:ba:7c:4c:41:60:f6:bf:a5:
2f:b1:4c:be:d2:99:68:29:1d:78:c4:d8:7e:fe:89:
1a:6c:d7:3b:68:ce:1a:e6:3c:09:43:f8:14:a8:2a:
86:e3:ae:e4:90:79:5a:2d:68:1f:6f:48:3e:09:22:
ff:cb:ed:ee:49:92:70:bd:e1:14:ce:88:d3:bc:06:
76:cd:80:7c:90:ad:56:26:7d:c5:84:4a:21:44:fc:
78:58:b7:d6:89:4d:e7:31:be:b4:1b:5b:ef:26:cb:
1c:4e:1a:0d:ab:b3:27:11:4f:9b:72:1a:e3:97:5c:
96:3f:d9:f5:98:b8:f3:e6:51:10:3a:65:49:f2:8b:
43:d4:71:86:15:2c:db:7c:96:72:62:fc:80:1d:00:
da:04:90:1b:fd:3b:7c:1c:a5:00:28:ef:3d:47:2a:
25:d8:a2:8e:a2:77:91:72:59:fe:4f:d5:93:f5:7a:
95:6c:5e:91:c1:c6:7f:72:52:df:24:db:0a:9f:e2:
8a:f0:12:52:cd:bc:f1:ae:cf:49:94:d1:42:32:00:
a5:21:cb:33:da:81:c4:19:d4:42:a2:f4:1b:18:f4:
21:97:0d:73:a6:bc:e7:d9:53:85:12:76:2e:c3:fb:
75:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1C:9C:51:7E:0E:32:9A:7F:38:D9:A9:5A:A3:8E:C7:C0:3B:18:FF
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/2BycUX4OMpp_ONmpWqOOx8A7GP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:d0::/44
Signature Algorithm: sha256WithRSAEncryption
4d:a4:ea:06:9e:c6:21:75:9f:d2:0f:55:d7:c6:8e:48:0a:05:
73:0f:68:9b:6d:34:3e:2e:b1:b1:9d:46:91:b6:54:ab:73:ee:
7a:c7:a0:5d:7f:ff:cf:31:8a:35:59:5d:6f:a8:8b:48:4c:4f:
40:e7:fc:ab:7c:26:3e:4a:4d:55:2b:df:95:6c:63:ea:60:53:
11:2d:dc:25:c5:c1:5a:f0:36:00:de:10:d9:11:a0:eb:ea:0a:
da:ba:9b:64:1c:a2:65:f4:03:fc:0f:74:af:79:91:f2:dc:ce:
61:ba:a3:51:18:3e:db:51:4a:80:fc:0e:eb:4f:32:c7:25:32:
30:d4:95:5c:90:0f:5b:56:c3:ad:8d:e1:9a:ac:1b:ba:dc:1c:
e5:83:68:ad:51:87:8a:6a:2f:2f:b4:df:83:b5:a5:16:f1:68:
39:9d:d7:ba:25:67:c3:33:6e:19:5e:76:55:12:a3:c4:ba:69:
b5:5e:70:1f:c2:6c:37:3d:9d:25:04:cd:43:10:11:f8:82:17:
73:f0:ee:2a:4b:94:5e:c1:3b:ed:2b:c3:30:3f:58:08:d5:72:
66:a5:51:84:14:3d:4b:da:82:c2:26:ad:7c:23:c0:39:03:82:
cb:67:42:fb:a5:99:cd:ee:de:9f:0d:3f:55:df:0c:f4:5d:bb:
44:53:06:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:56:32 2026 by rpki-client