Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/9e4nhDBDV7BzN-doC3Rdukk4IwM.roa
File: 9e4nhDBDV7BzN-doC3Rdukk4IwM.roa (raw, json)
Hash identifier: kDPiKKf9CtaPCGXBNFKViWoi33U2OU7GaDd0TDYj/II=
Subject key identifier: F5:EE:27:84:30:43:57:B0:73:37:E7:68:0B:74:5D:BA:49:38:23:03
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F23683942F6619D1A98FC4F10B5D34D44
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/9e4nhDBDV7BzN-doC3Rdukk4IwM.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60668
IP address blocks: 2a10:4646:2c0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:39:42:f6:61:9d:1a:98:fc:4f:10:b5:d3:4d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5ee2784304357b07337e7680b745dba49382303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9c:cc:4c:37:54:47:58:29:09:b8:fc:3a:b7:
18:74:72:11:bf:5e:45:18:d6:ee:04:17:7b:c7:4e:
6e:e5:e1:c4:c5:2d:13:ad:20:e4:72:f0:7b:10:6b:
07:df:e9:ab:14:f1:8e:6f:0a:87:fd:41:44:61:b9:
83:fa:b0:9a:86:41:c6:b4:22:34:80:ef:0e:0f:21:
84:02:93:33:55:a4:a7:84:04:49:c3:f9:cd:9b:07:
fa:cd:8c:71:27:ef:74:07:f6:41:b4:85:02:98:2c:
79:fb:80:26:31:1b:7e:9e:ea:42:15:dd:39:67:06:
5c:18:31:44:47:13:e2:38:73:60:8e:43:cf:ae:dd:
9b:87:e0:b9:4b:00:23:e5:20:40:8c:44:f0:21:a5:
54:94:62:52:33:e8:46:42:64:91:66:98:68:0b:c2:
c1:3c:67:90:57:a7:bb:85:41:a1:bd:98:43:88:06:
57:13:42:ea:bb:12:34:bb:86:07:c6:0d:12:fa:dd:
b8:c5:c8:c4:63:85:0a:a2:d1:bd:0a:13:99:5c:f2:
a8:43:c6:eb:20:ca:71:6a:f1:e9:6a:ce:7d:fc:bc:
37:a5:00:bc:01:93:3d:1f:ec:ee:28:bb:74:9e:a6:
bf:34:f9:55:6f:32:d2:98:c0:ae:05:af:e4:d2:f3:
c9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EE:27:84:30:43:57:B0:73:37:E7:68:0B:74:5D:BA:49:38:23:03
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/9e4nhDBDV7BzN-doC3Rdukk4IwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:2c0::/44
Signature Algorithm: sha256WithRSAEncryption
7c:59:44:98:ae:86:91:b9:85:f9:1f:06:bf:8d:32:7f:5c:fd:
7c:63:08:a4:08:f7:b9:19:cb:fb:8c:01:6e:eb:95:8e:1a:60:
30:1f:78:1e:71:12:a5:56:4a:36:bc:de:49:3f:7e:cd:e8:98:
2d:70:e6:f6:2c:e1:07:aa:ed:e2:16:a9:e3:b3:e8:c2:6a:37:
7d:88:08:a4:d3:17:9a:fc:e3:99:59:ef:4b:fc:00:20:d7:e3:
dd:c2:1d:53:c3:da:fe:a6:6f:7f:60:42:27:9c:e0:f2:af:8f:
a1:82:a3:d8:06:48:93:b3:9d:c9:11:2a:45:1d:93:66:88:2b:
bf:43:af:dd:13:af:2c:d3:9e:20:dc:e9:ba:a7:0b:7f:d1:42:
8e:1f:92:9b:85:bf:18:4d:bd:1c:43:68:ba:17:8d:19:2d:1d:
0f:d1:d8:72:91:34:41:99:d9:73:93:a6:08:40:99:06:21:39:
3b:34:a8:24:40:ce:36:f7:99:fd:07:20:bb:99:c8:da:9e:32:
13:9b:a2:fe:f2:e2:fe:92:46:f2:f8:40:4a:98:b1:12:fe:dc:
e7:35:ed:ef:72:bd:99:93:cf:51:3f:3d:5f:22:60:1b:df:00:
b7:03:a2:9a:e9:69:d3:ab:2d:33:47:00:2d:b4:d6:8d:37:eb:
51:38:30:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:58:44 2026 by rpki-client