Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/4w9eMhz25cgw3wBmUofTq4aW9uM.roa
File: 4w9eMhz25cgw3wBmUofTq4aW9uM.roa (raw, json)
Hash identifier: Yu6i3q4t0BYz44PAfY8hgxLUoKL6ChdFdr0U09RhdHg=
Subject key identifier: E3:0F:5E:32:1C:F6:E5:C8:30:DF:00:66:52:87:D3:AB:86:96:F6:E3
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F2368573EA29BE98B1ACA1466AF787886
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/4w9eMhz25cgw3wBmUofTq4aW9uM.roa
Signing time: Thu 02 Jul 2026 15:17:48 +0000
ROA not before: Thu 02 Jul 2026 15:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216155
IP address blocks: 2a10:4646:3c0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:57:3e:a2:9b:e9:8b:1a:ca:14:66:af:78:78:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e30f5e321cf6e5c830df00665287d3ab8696f6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:97:e5:c5:46:81:23:97:ec:eb:93:f9:b7:
10:9e:50:cd:1e:26:ce:c9:7a:bb:d3:2c:6b:20:43:
67:d7:57:55:fd:f6:22:0d:47:26:46:c1:55:ed:28:
36:bb:16:ec:24:2b:f0:21:e1:53:76:c4:12:e9:3c:
55:af:f4:b1:a9:95:d1:71:7a:da:6d:ab:c4:ad:e9:
c6:24:5e:77:e6:6c:26:77:94:61:e4:81:b7:8d:8f:
22:18:bb:f6:f4:56:96:65:66:70:fb:d4:4d:57:88:
f5:7a:ee:29:a5:6d:22:08:5b:00:c1:1c:90:9c:c0:
53:97:5e:4d:ad:64:3e:a7:98:ac:19:a5:9a:f2:6d:
66:c9:23:81:ee:70:58:b8:5c:83:12:2a:a0:03:65:
5e:d1:9d:df:3b:8c:26:93:84:c5:c8:18:88:d8:47:
cc:67:de:36:75:c9:b5:7e:78:ed:b5:27:a4:a5:02:
08:0b:e4:17:d8:55:d0:9d:a3:58:92:1f:53:1d:a3:
e5:24:b6:43:d8:f0:d8:4c:ce:48:54:ef:60:b4:0f:
1d:68:a1:14:56:be:e3:cb:d4:6a:b2:22:bb:a0:9f:
49:76:24:34:06:58:43:f5:74:47:38:b1:2f:08:38:
4a:94:00:ac:2d:cb:8f:9e:31:39:3f:5e:a8:91:c4:
0d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0F:5E:32:1C:F6:E5:C8:30:DF:00:66:52:87:D3:AB:86:96:F6:E3
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/4w9eMhz25cgw3wBmUofTq4aW9uM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:3c0::/44
Signature Algorithm: sha256WithRSAEncryption
29:3d:39:d6:40:65:74:b3:75:d9:82:72:15:f5:1c:d9:3b:8b:
68:d2:90:34:b8:f4:78:9a:b0:e9:ee:ff:c3:bf:47:f1:43:cf:
a1:8b:9a:b1:fb:ce:89:47:a9:2e:62:41:4b:9d:53:a2:22:3e:
4f:32:ae:e6:cc:99:d2:7a:ce:b3:09:40:e2:ce:51:f9:06:2e:
dd:3e:d0:3f:64:11:ab:01:68:f4:62:8e:ed:75:23:db:5a:97:
38:64:74:7d:7e:61:cb:f7:2b:25:41:8d:fe:cb:88:a3:e9:0e:
c5:e2:a5:9b:e5:4b:4b:a9:5a:2a:44:71:97:35:bf:09:c2:39:
2a:10:79:34:c6:44:c0:94:bf:9d:d3:b5:94:44:0d:99:8c:aa:
44:c7:7f:8a:f5:04:34:29:5c:58:ce:22:a9:e8:a0:00:66:cf:
f8:e1:55:58:b4:3f:64:7b:92:ac:96:0f:9f:3f:d4:4e:4c:5a:
88:2e:87:8f:6d:d6:a7:b6:f6:41:91:45:a9:d9:85:e3:ff:7a:
7d:b2:fd:98:05:6f:31:8f:eb:e9:d3:a5:4a:75:f3:2e:aa:f0:
23:02:c4:54:a0:8a:86:21:7d:3a:e6:93:e1:c9:e5:fb:39:13:
f5:ba:85:e6:ad:1f:61:df:db:d9:da:07:06:b2:d6:9f:e1:fb:
8a:a5:c6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 16:00:07 2026 by rpki-client