Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/9xIOZBHwAAkNANpknXvG8dZrLL4.roa
File: 9xIOZBHwAAkNANpknXvG8dZrLL4.roa (raw, json)
Hash identifier: OabLyuPtexleKLH5wRVOVV9OaUguM+6/MQcUPjkveC8=
Subject key identifier: F7:12:0E:64:11:F0:00:09:0D:00:DA:64:9D:7B:C6:F1:D6:6B:2C:BE
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F23684D04A785EA1A32027680007961FB
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/9xIOZBHwAAkNANpknXvG8dZrLL4.roa
Signing time: Thu 02 Jul 2026 15:17:45 +0000
ROA not before: Thu 02 Jul 2026 15:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214961
IP address blocks: 2a10:4646:700::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4d:04:a7:85:ea:1a:32:02:76:80:00:79:61:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7120e6411f000090d00da649d7bc6f1d66b2cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:86:73:8c:69:a1:5a:2c:20:17:36:e6:2b:c5:
a1:64:84:e0:a2:f1:bc:08:53:9d:fa:96:17:d9:86:
82:9f:5c:2d:9f:b9:b2:eb:b9:52:f2:1d:f5:0e:90:
df:29:81:d3:c7:6f:85:4d:7d:ea:cc:54:d5:d3:bd:
7d:d6:c5:1d:4f:7e:8a:57:f5:4c:dc:20:7f:a5:d1:
c6:fc:ac:45:65:cd:c1:78:04:a5:37:fe:8b:69:5a:
e2:cb:7f:75:6b:cc:ae:02:fa:42:dd:9e:8a:0f:98:
44:1c:38:bf:74:fe:1d:da:a5:84:51:39:c6:bd:5e:
90:91:5d:d4:08:38:3a:cb:f6:ae:36:78:ed:58:96:
a0:dc:4b:1d:83:b5:c0:18:98:8d:e8:f4:c8:34:8b:
f4:a5:43:59:03:1c:9a:76:3f:c0:ed:2c:8d:e3:56:
61:ec:7b:77:95:44:24:e3:de:04:58:9d:95:8b:36:
e7:d0:5b:43:37:a5:0e:79:8e:12:56:e0:c1:f3:0d:
f5:b8:e3:77:9d:1f:89:d3:bd:23:f9:4c:eb:b6:a4:
fe:3b:bf:02:20:b9:54:bd:d0:3f:fd:2f:0b:0e:05:
72:d2:50:83:08:1e:c2:db:3b:72:4c:e3:88:a7:be:
ec:e9:10:f3:0b:e9:a3:07:30:91:68:61:a9:1c:2b:
cc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:12:0E:64:11:F0:00:09:0D:00:DA:64:9D:7B:C6:F1:D6:6B:2C:BE
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/9xIOZBHwAAkNANpknXvG8dZrLL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:700::/44
Signature Algorithm: sha256WithRSAEncryption
05:92:e7:1f:b0:f4:68:4f:7a:db:a1:9c:5e:3a:bf:ed:06:4a:
d5:a5:83:64:fd:b7:b5:35:fd:2c:fa:87:6e:e5:b2:d5:b1:13:
c4:a0:1f:b0:78:7d:86:ae:f6:32:8d:8b:7b:03:59:e1:6f:0b:
3f:04:7b:b8:fa:a0:29:80:c6:79:da:23:48:bd:72:f0:72:84:
96:ed:2e:a8:a8:28:4d:33:28:41:7b:22:a6:0b:75:73:07:e0:
16:11:c3:0b:d5:6f:49:56:0c:3a:13:d5:ea:70:4e:0f:0d:15:
1a:36:f6:4c:fe:b3:75:82:5d:2b:7e:fe:60:78:32:38:d4:f2:
a8:63:90:ea:92:23:29:a4:b2:bd:d4:f7:ab:0e:88:d2:dd:55:
3b:8e:2d:3d:32:4f:58:ec:b6:f0:b3:fd:b0:81:04:ad:b4:4f:
24:c0:94:72:a8:8b:59:87:08:dd:9e:68:8a:f7:7d:98:6d:5f:
9d:29:fb:0b:b4:73:56:a5:d5:d0:60:51:93:07:fc:02:fb:2a:
cb:dc:ac:78:7d:39:5f:8d:83:0e:0e:d8:a3:b2:67:25:2a:96:
06:65:59:16:ae:50:e9:c8:be:1f:c6:d5:14:4f:28:eb:9c:1a:
a2:22:b6:2f:47:2c:4a:d6:56:b0:99:1f:5c:5d:50:a7:96:5f:
ff:f3:21:a4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaE0Ep4XqGjICdoAAeWH7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkY2M0OTUyYjZmM2E4Y2M3YzgxNjMwZDNlODNiMmE5ODI3
MTYzZjYwHhcNMjYwNzAyMTUxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzEyMGU2NDExZjAwMDA5MGQwMGRhNjQ5ZDdiYzZmMWQ2NmIyY2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oZzjGmhWiwgFzbmK8WhZITgovG8
CFOd+pYX2YaCn1wtn7my67lS8h31DpDfKYHTx2+FTX3qzFTV07191sUdT36KV/VM
3CB/pdHG/KxFZc3BeASlN/6LaVriy391a8yuAvpC3Z6KD5hEHDi/dP4d2qWEUTnG
vV6QkV3UCDg6y/auNnjtWJag3Esdg7XAGJiN6PTINIv0pUNZAxyadj/A7SyN41Zh
7Ht3lUQk494EWJ2Vizbn0FtDN6UOeY4SVuDB8w31uON3nR+J070j+UzrtqT+O78C
ILlUvdA//S8LDgVy0lCDCB7C2ztyTOOIp77s6RDzC+mjBzCRaGGpHCvMmwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPcSDmQR8AAJDQDaZJ17xvHWayy+MB8GA1UdIwQY
MBaAFH3MSVK286jMfIFjDT6DsqmCcWP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmN4SlVyYnpxTXg4Z1dNTlBvT3lxWUp4WV9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt
YWU5MjgzZTc5NjRlLzEvOXhJT1pCSHdBQWtOQU5wa25Ydkc4ZFpyTEw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl
LzEvZmN4SlVyYnpxTXg4Z1dNTlBvT3lxWUp4WV9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgcA
MA0GCSqGSIb3DQEBCwUAA4IBAQAFkucfsPRoT3rboZxeOr/tBkrVpYNk/be1Nf0s
+odu5bLVsRPEoB+weH2GrvYyjYt7A1nhbws/BHu4+qApgMZ52iNIvXLwcoSW7S6o
qChNMyhBeyKmC3VzB+AWEcML1W9JVgw6E9XqcE4PDRUaNvZM/rN1gl0rfv5geDI4
1PKoY5DqkiMppLK91PerDojS3VU7ji09Mk9Y7Lbws/2wgQSttE8kwJRyqItZhwjd
nmiK932YbV+dKfsLtHNWpdXQYFGTB/wC+yrL3Kx4fTlfjYMODtijsmclKpYGZVkW
rlDpyL4fxtUUTyjrnBqiIrYvRyxK1lawmR9cXVCnll//8yGk
-----END CERTIFICATE-----
Generated at Sat Jul 11 13:46:51 2026 by rpki-client