Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/R7Vr98elCl8-XI40OwgjbRBy2ok.roa
File: R7Vr98elCl8-XI40OwgjbRBy2ok.roa (raw, json)
Hash identifier: uXZhX4GIglHQod9UoZAg4FOS+PXKnbh8c2QJQLW5IfY=
Subject key identifier: 47:B5:6B:F7:C7:A5:0A:5F:3E:5C:8E:34:3B:08:23:6D:10:72:DA:89
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F2368589D59EFDE6BB703DC06C90EA9FE
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/R7Vr98elCl8-XI40OwgjbRBy2ok.roa
Signing time: Thu 02 Jul 2026 15:17:48 +0000
ROA not before: Thu 02 Jul 2026 15:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216187
IP address blocks: 2a10:4646:3a0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:58:9d:59:ef:de:6b:b7:03:dc:06:c9:0e:a9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47b56bf7c7a50a5f3e5c8e343b08236d1072da89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2c:f3:d9:18:8c:92:3a:4b:25:77:94:15:07:
c2:20:84:ac:69:14:60:da:d2:b3:76:66:72:c2:c5:
69:33:63:a9:fc:06:12:fe:7c:69:e0:60:26:90:3a:
2d:22:66:ee:e5:20:f5:d0:72:8d:21:8b:d3:41:d4:
fe:48:f5:89:d2:3f:7c:01:7c:94:d5:dc:36:d5:6c:
80:3f:4c:23:9c:75:19:54:1e:eb:87:05:62:9b:06:
24:b4:d9:64:e3:1b:b3:d6:9d:de:b7:be:e7:4b:be:
49:2d:92:7c:bf:8a:24:1c:41:2b:60:db:60:05:82:
75:e5:a9:6c:a4:21:fb:ba:32:c0:8b:86:d7:6f:0c:
bf:61:6e:61:a6:c0:33:1a:5b:b7:29:be:0f:f5:99:
f7:ad:c7:be:19:d6:74:cc:b0:ec:53:79:67:bb:87:
89:6a:50:82:7b:af:6e:53:27:16:d6:58:42:82:ec:
02:81:4f:67:ab:42:13:e6:2d:2d:f7:10:fa:81:37:
94:2d:c8:e4:fc:62:78:4e:5b:a7:f9:ee:e9:a2:14:
e3:ba:1f:d6:e7:20:83:b0:73:60:3d:f1:d1:fa:7e:
fc:eb:6e:42:5a:f0:63:80:68:07:2a:fd:78:a7:b1:
70:d6:76:a3:d0:08:49:be:51:d7:7f:7f:56:2b:05:
aa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B5:6B:F7:C7:A5:0A:5F:3E:5C:8E:34:3B:08:23:6D:10:72:DA:89
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/R7Vr98elCl8-XI40OwgjbRBy2ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:3a0::/44
Signature Algorithm: sha256WithRSAEncryption
ae:72:8a:ff:6d:71:76:ae:39:3e:f5:98:98:4f:1f:dc:b1:28:
a7:f9:d7:a2:28:0f:29:a9:83:c5:6f:52:81:22:4c:7f:f7:6b:
e5:20:57:c9:eb:ec:d2:58:c9:15:72:f3:28:91:24:d1:93:f3:
8a:02:45:b0:8d:0e:40:45:c8:74:ea:7a:a0:cb:cc:62:ba:39:
67:f1:fc:54:21:d9:54:1a:95:49:47:c0:fb:f7:17:52:0c:b8:
59:db:bd:d5:4a:c3:f4:24:d8:a5:75:72:c4:03:26:43:8d:09:
4d:e4:9d:35:0b:43:ba:8d:11:3b:8b:d9:6b:54:64:12:fb:f6:
e1:4b:29:c7:6e:0c:7d:d7:f7:9a:18:eb:b9:dc:68:54:7b:da:
c8:34:bf:79:51:35:2f:73:b8:a5:99:a6:9f:65:49:79:d7:3f:
a8:bb:8b:3a:68:4e:10:e1:a7:41:e3:22:95:fc:3c:c8:3d:07:
ae:f2:76:4f:a6:19:ee:cd:5c:1b:7d:f4:63:e8:44:80:e9:a5:
08:b5:86:c9:c1:06:c1:f1:6c:41:04:a8:58:fd:b2:4e:b3:8a:
f7:e2:b2:86:72:66:8c:06:35:5f:3b:99:47:f6:71:8a:58:58:
4c:ea:59:25:bb:b8:e4:f4:31:2a:48:24:24:3b:66:9c:d3:e5:
4c:9e:a2:91
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaFidWe/ea7cD3AbJDqn+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkY2M0OTUyYjZmM2E4Y2M3YzgxNjMwZDNlODNiMmE5ODI3
MTYzZjYwHhcNMjYwNzAyMTUxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2I1NmJmN2M3YTUwYTVmM2U1YzhlMzQzYjA4MjM2ZDEwNzJkYTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Czz2RiMkjpLJXeUFQfCIISsaRRg
2tKzdmZywsVpM2Op/AYS/nxp4GAmkDotImbu5SD10HKNIYvTQdT+SPWJ0j98AXyU
1dw21WyAP0wjnHUZVB7rhwVimwYktNlk4xuz1p3et77nS75JLZJ8v4okHEErYNtg
BYJ15alspCH7ujLAi4bXbwy/YW5hpsAzGlu3Kb4P9Zn3rce+GdZ0zLDsU3lnu4eJ
alCCe69uUycW1lhCguwCgU9nq0IT5i0t9xD6gTeULcjk/GJ4Tlun+e7pohTjuh/W
5yCDsHNgPfHR+n78625CWvBjgGgHKv14p7Fw1naj0AhJvlHXf39WKwWqjQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEe1a/fHpQpfPlyONDsII20QctqJMB8GA1UdIwQY
MBaAFH3MSVK286jMfIFjDT6DsqmCcWP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmN4SlVyYnpxTXg4Z1dNTlBvT3lxWUp4WV9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt
YWU5MjgzZTc5NjRlLzEvUjdWcjk4ZWxDbDgtWEk0ME93Z2piUkJ5Mm9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl
LzEvZmN4SlVyYnpxTXg4Z1dNTlBvT3lxWUp4WV9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgOg
MA0GCSqGSIb3DQEBCwUAA4IBAQCucor/bXF2rjk+9ZiYTx/csSin+deiKA8pqYPF
b1KBIkx/92vlIFfJ6+zSWMkVcvMokSTRk/OKAkWwjQ5ARch06nqgy8xiujln8fxU
IdlUGpVJR8D79xdSDLhZ273VSsP0JNildXLEAyZDjQlN5J01C0O6jRE7i9lrVGQS
+/bhSynHbgx91/eaGOu53GhUe9rINL95UTUvc7ilmaafZUl51z+ou4s6aE4Q4adB
4yKV/DzIPQeu8nZPphnuzVwbffRj6ESA6aUItYbJwQbB8WxBBKhY/bJOs4r34rKG
cmaMBjVfO5lH9nGKWFhM6lklu7jk9DEqSCQkO2ac0+VMnqKR
-----END CERTIFICATE-----
Generated at Sat Jul 11 16:00:23 2026 by rpki-client