Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/AKdP_WnCYSC6ouwGRCd07y2VJDk.roa
File: AKdP_WnCYSC6ouwGRCd07y2VJDk.roa (raw, json)
Hash identifier: gnjZovsh4NDuHzxJtWk8Vj/NpReZ+7VV6PpuQ1xNrgk=
Subject key identifier: 00:A7:4F:FD:69:C2:61:20:BA:A2:EC:06:44:27:74:EF:2D:95:24:39
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F236849D6B42170238FB27490FFB1FD94
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/AKdP_WnCYSC6ouwGRCd07y2VJDk.roa
Signing time: Thu 02 Jul 2026 15:17:44 +0000
ROA not before: Thu 02 Jul 2026 15:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212504
IP address blocks: 2a10:4646:140::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:49:d6:b4:21:70:23:8f:b2:74:90:ff:b1:fd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00a74ffd69c26120baa2ec06442774ef2d952439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ff:0b:e2:5c:74:89:d9:ff:c9:cd:0a:2b:07:
ca:87:2c:5d:31:79:df:81:69:f3:dc:38:25:81:45:
4e:6a:f1:6b:71:ad:6f:14:56:88:61:0f:b3:1c:b4:
8a:82:50:c0:02:73:aa:69:e9:bf:70:c7:fa:8c:be:
25:ce:c2:a3:8f:a6:26:4c:84:cc:4d:42:1c:eb:00:
80:9c:14:46:f5:e5:7f:35:37:78:dc:ed:07:e6:79:
89:22:c7:ff:13:7e:5d:38:67:a4:5f:f0:74:d2:a2:
5b:ea:85:a2:a4:9b:06:42:cf:49:8e:2e:fc:be:73:
63:79:c7:7e:58:6b:f1:91:42:5a:b1:2f:94:33:8f:
c1:b7:c9:c8:2d:cf:7f:0f:ff:f1:56:38:ab:e4:f9:
f1:27:10:6b:00:4b:bc:3e:6d:6e:46:ac:4c:ac:bf:
2d:90:b3:97:37:a4:76:5a:b0:62:dc:d3:54:7e:80:
20:9e:66:c5:b8:f0:d8:01:5d:71:31:af:b4:d9:8a:
68:b0:75:81:17:42:c9:d6:dc:e5:8f:f3:31:05:6c:
2f:a7:30:33:f8:26:56:2d:8e:9a:86:50:2d:58:61:
1a:4f:bf:29:5c:2a:f9:1e:99:7a:f1:52:e5:5e:c7:
23:c3:49:67:8a:b8:a6:be:80:3a:a4:f1:db:82:ca:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A7:4F:FD:69:C2:61:20:BA:A2:EC:06:44:27:74:EF:2D:95:24:39
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/AKdP_WnCYSC6ouwGRCd07y2VJDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:140::/44
Signature Algorithm: sha256WithRSAEncryption
7f:07:4a:20:6e:64:97:56:16:32:74:ca:b5:77:ba:b9:c9:b0:
72:61:f0:48:77:71:df:19:0c:14:67:44:e3:60:2f:1a:87:25:
cc:5f:0a:74:66:e2:e4:34:ac:53:a3:32:bd:83:b6:ae:06:1a:
a9:c1:a1:b7:72:47:8c:99:68:b0:b0:36:0a:d6:d7:00:ef:c0:
94:89:13:59:d5:83:f1:bb:4c:27:ea:dc:93:8a:f0:d4:bf:96:
84:6f:95:87:3e:f7:02:55:a2:a7:32:f8:58:f2:d6:12:99:1a:
bb:95:a7:f6:91:65:66:10:9d:fc:61:e5:1c:cb:94:1f:cb:93:
68:f3:7c:45:82:b0:1e:a4:50:ba:5a:2b:0c:ae:6f:fc:4c:fa:
02:ea:58:f7:68:33:6f:48:93:5f:46:1d:84:97:ea:eb:98:b3:
97:da:c0:e8:ec:62:13:e3:ad:b0:f5:31:0c:87:db:86:e4:42:
80:7b:eb:a8:6a:cd:5d:04:55:df:d4:38:48:cc:f4:41:43:10:
2d:74:41:1b:5a:5b:88:23:62:ad:99:23:de:77:43:30:44:d0:
07:1f:52:d3:d9:1b:2d:de:65:ef:de:1a:88:73:00:f8:43:07:
dc:af:de:d6:0b:53:72:40:6c:2c:c7:5c:31:df:ec:86:24:c3:
00:5f:74:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:56:31 2026 by rpki-client