Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/TXUKJJoKGveOWU1d4MKKpC7vG9g.roa
File: TXUKJJoKGveOWU1d4MKKpC7vG9g.roa (raw, json)
Hash identifier: +6CW9WY885Em14YZDApYOXXY83soIXGmk3RqofjJhjs=
Subject key identifier: 4D:75:0A:24:9A:0A:1A:F7:8E:59:4D:5D:E0:C2:8A:A4:2E:EF:1B:D8
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F2368526AF3DFD99502723003C7B20D0A
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/TXUKJJoKGveOWU1d4MKKpC7vG9g.roa
Signing time: Thu 02 Jul 2026 15:17:46 +0000
ROA not before: Thu 02 Jul 2026 15:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215663
IP address blocks: 2a10:4646:400::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:52:6a:f3:df:d9:95:02:72:30:03:c7:b2:0d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d750a249a0a1af78e594d5de0c28aa42eef1bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:30:51:44:e1:17:23:b1:6b:24:cb:bb:22:
5d:85:af:86:68:d6:d2:96:ed:d9:08:58:97:ba:86:
79:7a:85:5c:45:b3:88:c7:8b:c9:25:bd:a6:a9:f4:
36:f1:91:a8:7f:ab:fa:9e:9b:5d:c0:9b:e6:bf:11:
e4:33:d2:bc:c3:fe:f2:0b:ff:7d:ef:ad:7d:9c:16:
5f:18:c8:45:60:54:c0:b6:fc:c1:00:1e:32:2b:8d:
6d:c7:14:6c:fb:85:b4:2a:f9:f5:d6:f5:09:a7:c7:
ed:77:01:41:37:9f:36:e4:f0:45:c0:8f:b0:b7:51:
be:23:15:48:64:da:d0:57:0c:b8:1a:ff:29:8d:4f:
d9:0f:03:31:52:67:8f:af:86:cb:d7:54:0b:77:92:
fb:0f:0a:19:71:a1:71:ee:1f:63:92:63:4e:6d:d5:
15:3d:3c:b5:4a:e6:c5:fb:d5:53:91:70:a8:04:62:
0e:fc:17:ce:aa:0d:45:b3:a4:d4:2a:56:1b:17:83:
9c:bb:55:fd:9d:2c:45:06:9a:c3:0f:0f:55:0e:39:
77:a5:3c:39:ad:1d:b7:79:de:18:7a:23:0a:4b:4c:
79:70:20:5f:2c:c6:90:fa:f8:ba:9e:04:7b:63:f3:
7a:6f:35:58:91:9a:f1:da:c5:a3:c3:52:8b:b6:96:
b9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:75:0A:24:9A:0A:1A:F7:8E:59:4D:5D:E0:C2:8A:A4:2E:EF:1B:D8
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/TXUKJJoKGveOWU1d4MKKpC7vG9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:400::/44
Signature Algorithm: sha256WithRSAEncryption
4c:a2:cb:0d:31:0b:c6:71:67:47:f3:b3:25:82:e3:25:f7:b6:
b0:70:df:3a:29:38:86:a7:b3:8f:57:37:ea:ba:db:7c:84:ce:
d8:88:1d:3f:b4:c7:44:4c:ea:23:2d:92:c1:15:59:eb:11:2b:
d8:b2:da:fe:b2:95:31:09:5b:cf:c3:56:44:f9:7d:70:c1:af:
55:e7:96:a3:75:08:de:8a:3a:60:bb:99:83:61:6a:66:04:ee:
30:cd:c9:0b:3f:6c:22:59:35:f7:07:dd:43:2e:db:6e:8f:8d:
69:5f:3f:2d:c7:3f:5c:d4:bc:c1:77:c2:c2:da:cd:07:cc:48:
bf:b1:db:d6:f8:14:f4:55:f2:2d:c8:07:33:28:97:50:5d:de:
78:db:a1:49:85:fc:96:fe:f9:19:44:1c:66:9d:2f:44:aa:af:
ab:ba:0b:51:7f:98:5c:70:db:24:d3:cb:bb:51:36:d4:5f:25:
21:47:fc:ec:12:72:70:67:8b:51:72:ac:a4:ea:b4:21:d2:8b:
8e:36:5f:cc:51:00:35:49:03:9f:b3:9f:03:d7:aa:af:3d:56:
62:6b:8b:9a:a9:fa:49:8b:64:75:48:30:7f:b3:80:2c:51:a1:
c0:54:2c:fe:f1:70:1e:4c:c7:cc:54:d5:80:83:94:36:78:4e:
83:25:bf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 16:01:12 2026 by rpki-client