Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/31IuJXymzyCCz-nBx80UcTy2KJM.roa
File: 31IuJXymzyCCz-nBx80UcTy2KJM.roa (raw, json)
Hash identifier: N3OXjTJ7vPVzKKs9xt/0Z8rYQDz7GcNmVIDCtknzJo4=
Subject key identifier: DF:52:2E:25:7C:A6:CF:20:82:CF:E9:C1:C7:CD:14:71:3C:B6:28:93
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F2368480027EAEE9756E4149C04EFDB82
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/31IuJXymzyCCz-nBx80UcTy2KJM.roa
Signing time: Thu 02 Jul 2026 15:17:44 +0000
ROA not before: Thu 02 Jul 2026 15:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212106
IP address blocks: 2a10:4646:11::/48 maxlen: 48
2a10:4646:60::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:48:00:27:ea:ee:97:56:e4:14:9c:04:ef:db:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df522e257ca6cf2082cfe9c1c7cd14713cb62893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2e:39:39:6d:47:bd:34:08:1c:ab:71:bc:1c:
77:57:81:8d:80:0c:bb:9b:84:a7:21:18:d3:3e:de:
46:ea:5a:82:1e:48:9c:1d:90:70:f1:cf:95:4c:03:
b5:98:89:e8:45:fc:a9:1f:eb:67:e0:63:20:1b:4e:
5d:ea:79:79:ec:a2:73:68:b5:b4:6d:85:c7:18:48:
86:3e:5e:fe:1a:e6:df:1c:1c:25:47:62:7f:38:85:
9f:28:a1:56:cb:c0:37:62:c4:26:2a:ce:c1:5b:8e:
aa:cc:3b:08:99:0f:03:22:a8:a5:70:1f:3c:a1:59:
0b:c1:6e:4a:79:46:37:4b:b4:cf:8f:d6:0b:46:92:
b1:d5:52:34:4a:c7:30:da:a9:e7:f4:07:80:00:17:
34:f4:08:c9:f5:11:8f:b7:db:ca:09:8b:6a:3b:59:
8a:4a:99:ea:e9:af:3e:e4:46:88:d8:d1:b7:dc:d3:
4d:58:40:92:e9:8c:8d:d1:e7:60:8a:c7:c7:23:01:
07:30:ee:75:ec:e6:1f:ea:06:3b:8c:34:44:70:13:
71:3b:22:9e:40:d8:08:44:e3:c4:0e:ba:11:50:b4:
c8:90:77:7d:79:0f:07:c1:0a:27:6f:d5:49:fa:bb:
be:93:4a:13:8b:33:ce:30:ae:a2:45:0b:04:1c:9d:
80:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:52:2E:25:7C:A6:CF:20:82:CF:E9:C1:C7:CD:14:71:3C:B6:28:93
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/31IuJXymzyCCz-nBx80UcTy2KJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:11::/48
2a10:4646:60::/44
Signature Algorithm: sha256WithRSAEncryption
7d:ad:43:41:13:5b:5d:1e:28:fd:8c:14:42:39:38:ee:a9:78:
dd:81:ee:65:f1:b4:cd:64:57:5d:7f:94:c8:14:24:84:13:a1:
d6:f3:af:8d:f4:c8:12:cd:62:98:71:4b:5e:cc:d0:6e:10:52:
51:a3:15:42:0f:24:9a:13:37:b5:4f:95:06:d0:14:c0:be:ab:
b1:71:ad:15:3e:84:e0:bc:1d:6f:1d:6c:0b:9b:77:1d:80:3e:
be:a2:ab:e8:5b:04:c6:4f:eb:ff:19:02:e4:19:ef:6c:33:7d:
0f:05:93:65:e6:92:8f:1d:c1:a5:22:69:35:9e:ac:85:13:0e:
89:c7:04:da:68:1a:f1:0d:ae:d5:8b:db:ee:98:7d:55:ec:b4:
09:68:29:28:8a:b4:09:ae:8f:e3:28:9e:66:80:e7:f3:99:a9:
30:cc:ce:2e:c5:9e:1d:e8:41:61:8a:fb:14:f9:25:18:9b:55:
1a:c9:3a:5b:47:b3:63:4f:39:a6:dd:a2:71:dc:71:c1:ec:de:
77:72:21:b7:80:30:46:f7:7e:7b:2b:2f:58:2a:5f:f1:81:19:
4f:72:65:5a:18:7e:09:4e:86:70:39:40:24:59:83:a2:f2:c2:
3e:6f:45:64:bc:f8:ad:33:d6:f5:8e:19:e6:dd:55:f4:71:73:
85:3f:50:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 16:00:07 2026 by rpki-client