Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Np7zLmXKA3yA-ioGsFaWFV5ebns.roa
File: Np7zLmXKA3yA-ioGsFaWFV5ebns.roa (raw, json)
Hash identifier: ite+WatU4VDz5FpF5VICtwu7wBAE93/8nd6qjBjs2Jg=
Subject key identifier: 36:9E:F3:2E:65:CA:03:7C:80:FA:2A:06:B0:56:96:15:5E:5E:6E:7B
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F236850FBCE6D32744D9BAB8E25614772
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Np7zLmXKA3yA-ioGsFaWFV5ebns.roa
Signing time: Thu 02 Jul 2026 15:17:46 +0000
ROA not before: Thu 02 Jul 2026 15:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215144
IP address blocks: 2a10:4646:450::/44 maxlen: 44
2a10:4646:455::/48 maxlen: 48
2a10:4646:45a::/48 maxlen: 48
2a10:4646:45b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:50:fb:ce:6d:32:74:4d:9b:ab:8e:25:61:47:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=369ef32e65ca037c80fa2a06b05696155e5e6e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:8a:55:2c:bc:4b:09:77:e3:07:4f:93:a6:
b2:81:6a:4d:fb:74:b1:98:6f:91:96:73:b3:20:21:
16:c9:76:b7:81:5a:bf:cc:91:d3:3c:45:e9:01:0f:
c2:23:58:f7:d3:00:31:b4:5d:53:98:ab:07:77:f3:
60:35:d7:a9:c0:32:de:12:4e:cb:d8:14:35:b2:70:
62:e3:da:14:79:e6:ad:ed:a2:bc:32:5d:7b:de:e5:
77:b5:8a:ef:ab:30:d6:f7:c7:fb:d5:6c:68:bd:69:
bb:7b:42:e0:43:67:1a:d1:5c:49:90:3b:10:43:56:
37:dc:e1:6a:cb:74:36:ed:da:d8:cb:ca:d9:53:24:
7d:28:6c:68:e3:67:86:fb:51:12:1b:1b:18:0f:b6:
62:f1:46:f3:b8:07:fe:25:84:35:61:b9:ed:50:23:
4b:40:74:93:e0:30:c4:fc:53:27:28:d7:c3:9e:af:
db:a9:7d:a2:92:22:95:c0:d4:c6:41:23:91:04:aa:
cc:6c:29:0b:56:88:3c:d6:3a:cd:19:44:80:43:8e:
20:ae:80:a8:ff:c1:93:d6:09:49:df:4a:14:25:46:
77:63:6e:14:b5:df:57:1c:f5:0f:c6:73:62:85:57:
0f:33:30:a3:46:84:6b:01:38:fe:c9:81:82:2a:90:
10:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9E:F3:2E:65:CA:03:7C:80:FA:2A:06:B0:56:96:15:5E:5E:6E:7B
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Np7zLmXKA3yA-ioGsFaWFV5ebns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:450::/44
Signature Algorithm: sha256WithRSAEncryption
68:d4:67:cc:5c:40:03:9e:48:5f:a3:66:3c:dd:32:99:1b:19:
64:0c:86:d5:05:86:64:f5:ac:5e:05:a8:9b:a1:4b:0e:4c:09:
4a:9e:17:8d:6d:ea:59:87:c6:07:ef:57:17:3d:bd:9e:eb:87:
47:1d:11:d4:9d:9c:49:a7:eb:1b:6e:5c:d4:1a:2e:86:e3:4c:
7d:df:4f:84:b1:cf:7e:e5:b1:0b:3d:9b:75:71:2e:0c:b6:e1:
c1:1f:13:ee:0d:ca:06:8b:2f:d4:bc:6b:69:37:bf:77:e4:45:
cd:cf:bc:4f:db:5a:a5:55:b5:5f:a6:c1:7a:83:eb:b3:a7:ba:
a1:35:69:eb:ad:7c:28:89:5e:00:70:d8:4e:c4:49:3b:13:42:
4d:95:dd:6c:34:88:a9:d8:44:62:b0:aa:52:ea:b1:bb:93:b4:
d2:9e:ff:23:de:a4:9a:d1:49:44:66:d1:c1:bd:c3:35:3a:a8:
cd:ae:82:6a:8a:55:9a:bb:56:45:32:2d:e2:ab:e6:df:5f:e5:
a8:d3:9d:81:6f:09:72:6e:88:79:d0:7b:69:70:89:4b:c3:8d:
0e:fb:87:f6:8a:61:42:83:ab:63:85:2c:7a:eb:35:31:8e:3d:
e0:ad:c7:51:b7:95:2d:4d:5d:44:04:74:33:9d:c6:54:93:22:
c4:d1:1d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:57:54 2026 by rpki-client