Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/K-RBB8xZFxWlmtVZVq1Y0AQfQNo.roa
File: K-RBB8xZFxWlmtVZVq1Y0AQfQNo.roa (raw, json)
Hash identifier: g076Y7WvmqIjLiy3ZLB52YNXxeeqiR1jHUxs7vXARmE=
Subject key identifier: 2B:E4:41:07:CC:59:17:15:A5:9A:D5:59:56:AD:58:D0:04:1F:40:DA
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F23685813A50477367CF386D3816A1E21
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/K-RBB8xZFxWlmtVZVq1Y0AQfQNo.roa
Signing time: Thu 02 Jul 2026 15:17:48 +0000
ROA not before: Thu 02 Jul 2026 15:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216174
IP address blocks: 2a10:4646:3b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:58:13:a5:04:77:36:7c:f3:86:d3:81:6a:1e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2be44107cc591715a59ad55956ad58d0041f40da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a2:94:45:fe:76:de:75:5b:83:37:82:21:45:
50:3d:e2:ac:63:73:d9:31:d8:50:b7:25:e2:af:91:
d6:c2:92:b7:b1:13:66:6e:05:aa:fb:61:89:18:a8:
c4:cc:95:8d:9d:50:96:aa:23:5f:c9:5e:ba:34:d0:
79:06:db:16:31:ac:45:b6:54:3d:60:5b:d4:32:fb:
ab:a1:d9:8f:bf:3e:60:68:a3:af:31:27:11:65:3d:
c3:75:3f:57:3d:5a:97:1e:ec:96:fb:21:7f:2c:d5:
a9:de:6c:c0:be:a6:b6:c0:a9:59:5f:19:8f:79:86:
e0:5f:24:d2:87:cd:de:8b:fa:ff:45:7c:9e:27:43:
25:5b:09:6a:02:f3:6e:35:43:ee:c0:15:a1:44:c3:
d7:55:81:79:1d:20:50:b4:7f:bc:4f:61:08:ea:f9:
65:6b:6f:e4:39:22:fd:85:c5:75:04:df:f5:03:d3:
57:82:36:15:2b:02:e0:cb:6c:5e:aa:ee:34:53:1a:
b7:41:80:1a:ba:0e:95:ca:52:40:2b:fb:c9:17:7a:
7d:44:2a:51:99:ab:63:47:88:f6:63:ae:a4:d6:83:
ba:a4:69:6c:1f:f1:47:ac:ad:4a:6a:62:50:c8:a1:
79:6d:00:68:76:95:ae:fd:20:6f:ea:89:73:c0:4e:
e7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E4:41:07:CC:59:17:15:A5:9A:D5:59:56:AD:58:D0:04:1F:40:DA
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/K-RBB8xZFxWlmtVZVq1Y0AQfQNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:3b0::/44
Signature Algorithm: sha256WithRSAEncryption
10:f5:e8:b6:7e:9c:c3:5d:1d:04:37:7b:5f:e5:e6:be:dc:e2:
50:f3:a9:bf:da:c4:ab:9c:30:aa:bf:8f:04:a6:30:ca:cd:d4:
89:d8:d4:27:7f:f8:96:14:b5:e6:18:6f:2b:94:ce:b7:ca:8c:
33:30:7d:b8:ed:69:70:0b:32:bd:d3:32:35:87:8d:e5:04:fa:
f0:ed:93:9e:28:37:4e:67:1f:b0:6b:be:cd:ab:c9:f8:42:e1:
3d:62:89:d3:64:a6:64:84:34:37:d7:9f:ba:09:f9:14:79:86:
a7:35:fc:c4:d6:3f:37:bf:5d:f7:cb:a4:aa:3d:c6:17:1f:19:
18:61:77:68:ff:d2:4e:02:3f:67:7d:0e:1d:a7:ff:ca:c2:3d:
96:fe:36:c8:8a:32:8c:69:02:5f:2d:c1:49:f9:f0:e6:85:5e:
c4:36:59:21:10:9a:0c:e3:66:62:bf:d6:f0:6c:44:8a:55:04:
91:15:51:3e:95:88:2b:68:1b:c2:ab:c1:a1:20:04:a9:3c:91:
65:ca:9c:e2:ac:a9:97:18:80:38:bd:16:65:da:11:03:3d:22:
5f:05:a5:37:fe:9a:dc:5c:19:9c:72:02:e1:11:98:6d:c3:01:
3b:bc:c7:6e:75:c9:00:20:3c:1f:bd:3f:67:fe:1e:dc:05:ac:
be:98:f8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:57:08 2026 by rpki-client