Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/5mU-gM-R2tfSMY0BpJeZUwfk8bE.roa
File: 5mU-gM-R2tfSMY0BpJeZUwfk8bE.roa (raw, json)
Hash identifier: NwWWrwv2iEIMkY7yf+unqyAydilFqabTc8rRRuphZ2s=
Subject key identifier: E6:65:3E:80:CF:91:DA:D7:D2:31:8D:01:A4:97:99:53:07:E4:F1:B1
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F23683748C7938DF3CD149888630581B6
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/5mU-gM-R2tfSMY0BpJeZUwfk8bE.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47484
IP address blocks: 2a10:4646:6::/48 maxlen: 48
2a10:4646:2f0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:37:48:c7:93:8d:f3:cd:14:98:88:63:05:81:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6653e80cf91dad7d2318d01a497995307e4f1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:09:cb:f3:1f:7a:7a:13:73:aa:29:54:db:
61:e4:4c:e0:8e:a4:b7:fc:82:71:10:65:1d:ab:8f:
1a:68:ad:20:2c:bd:d8:84:92:d7:ff:b8:15:53:3c:
20:d3:60:a7:16:a0:ca:45:eb:6a:af:d0:41:70:60:
55:b9:07:e7:ac:51:9e:f6:24:0a:7c:45:18:eb:84:
8f:7c:09:c4:a2:51:8d:28:a2:01:f2:f0:c4:a0:17:
2f:9b:fd:05:ac:4d:e9:fe:bb:e1:6d:ac:31:e0:f0:
55:9e:7f:c1:b3:e1:41:8a:f8:57:04:f6:d6:7a:05:
7e:66:43:f6:d5:7f:d1:7d:c7:e3:ea:75:92:3c:1f:
52:1c:55:14:3f:47:5f:3e:0d:7f:94:06:ec:04:6e:
3c:c6:a0:4c:85:1f:88:63:4e:50:7e:48:c6:25:41:
ce:6a:f9:a1:96:fc:87:db:0f:08:c6:af:1c:83:21:
ff:5a:07:03:60:b3:e8:e1:f8:7d:f4:fe:99:dc:fa:
43:64:29:57:a1:3e:76:d1:67:89:cb:22:cd:d9:22:
1e:26:1d:c7:4c:2c:75:0a:ea:20:46:1c:36:e8:46:
8a:4e:96:96:ea:93:76:b1:f3:a3:60:c2:12:d5:a2:
7b:fa:a9:5f:cc:8a:54:49:dc:ad:85:9a:55:92:f9:
df:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:65:3E:80:CF:91:DA:D7:D2:31:8D:01:A4:97:99:53:07:E4:F1:B1
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/5mU-gM-R2tfSMY0BpJeZUwfk8bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:6::/48
2a10:4646:2f0::/44
Signature Algorithm: sha256WithRSAEncryption
9f:5b:84:56:99:7a:2c:fa:db:a1:04:89:25:0d:a9:fd:38:12:
4d:37:03:9b:6c:10:b4:8b:c5:35:7c:84:18:ce:97:84:16:63:
1c:93:70:32:b8:3b:f0:08:aa:60:3f:46:13:e2:51:5b:79:d7:
6f:20:55:9c:d6:42:1c:73:c4:f0:ba:74:4f:d8:91:e3:e4:23:
75:9f:af:85:87:14:de:14:a7:d2:7f:db:9e:eb:8a:0e:a6:ab:
95:ef:b6:58:35:45:11:af:52:07:fd:3c:01:f1:d9:66:52:9d:
4b:58:6c:fa:70:42:1a:e0:34:03:55:42:d6:54:1b:c6:ae:ca:
ba:cc:3a:a5:a5:1e:44:75:a3:bf:b4:b7:d4:e8:3f:64:5f:8d:
41:b8:3a:f0:91:46:54:4c:00:f1:ab:6d:8c:2f:f2:63:97:fa:
ca:86:4d:85:5c:f2:8b:92:16:36:71:37:f5:8d:99:a6:a1:ec:
cf:a4:6d:37:12:46:ee:1c:62:65:cf:90:05:44:da:b0:03:4d:
73:05:f0:1c:b4:54:b1:2a:38:dd:01:bf:c0:a1:e7:9f:42:74:
c7:f3:96:6d:c0:22:d9:6d:bc:e0:f8:f3:bb:5e:97:b3:97:a7:
19:ba:52:39:08:4a:f7:f3:d9:ec:9e:51:38:5f:db:69:de:ab:
f4:50:e6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:56:28 2026 by rpki-client