Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/_nI_PNVjm1tzW7fbPHRQ_UNXGio.roa
File: _nI_PNVjm1tzW7fbPHRQ_UNXGio.roa (raw, json)
Hash identifier: 7b8iKmGmZaMSXOaqiUPziUPJsSVF6OMYA76iGGmqXEs=
Subject key identifier: FE:72:3F:3C:D5:63:9B:5B:73:5B:B7:DB:3C:74:50:FD:43:57:1A:2A
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F2368387C394E7E2D3110DBA64C1C1A50
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/_nI_PNVjm1tzW7fbPHRQ_UNXGio.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57080
IP address blocks: 2a10:4646:1c0::/48 maxlen: 48
2a10:4646:1c1::/48 maxlen: 48
2a10:4646:1c2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:38:7c:39:4e:7e:2d:31:10:db:a6:4c:1c:1a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe723f3cd5639b5b735bb7db3c7450fd43571a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bb:42:14:af:f7:74:b9:71:df:12:67:b3:0d:
f2:31:de:9a:53:c7:fb:f0:b0:77:3b:53:fb:4e:b2:
b6:32:5a:3f:3a:5c:25:8e:da:d9:8d:ab:2c:4a:7e:
e6:db:5a:83:60:e8:d4:ad:f4:1a:f4:f8:e9:8f:f9:
6b:a9:f7:1d:53:b2:c3:64:f6:ca:b7:2b:bb:4e:d7:
bf:0a:22:e5:80:3f:86:e6:52:1d:2c:07:ff:df:35:
65:65:d4:0e:69:34:be:3c:b1:2d:ea:b0:91:35:3b:
ce:9b:a2:d1:81:4f:36:a9:6a:fe:76:e1:33:8a:ec:
39:cc:ad:80:70:a0:14:3c:be:1e:5d:22:6e:6a:cc:
8a:f1:35:dc:aa:e9:b7:19:dd:6a:27:0b:b1:33:21:
fc:a7:db:07:83:d8:7b:40:0b:46:b8:16:07:4e:98:
61:02:1c:b8:73:91:7e:62:d9:ef:ff:a3:36:03:8a:
ab:1c:e3:d1:cf:59:dc:7e:74:d9:97:a0:cc:b5:49:
f0:b7:14:e4:0d:72:cf:a5:09:98:7c:c3:f7:b7:95:
ab:07:42:6c:45:d7:e5:9e:ee:2b:8f:36:91:8a:26:
d6:33:c8:5f:82:03:a5:7b:ca:b2:93:77:8e:1f:74:
5d:46:89:11:96:d6:ae:c1:84:d0:83:30:46:95:09:
75:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:72:3F:3C:D5:63:9B:5B:73:5B:B7:DB:3C:74:50:FD:43:57:1A:2A
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/_nI_PNVjm1tzW7fbPHRQ_UNXGio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:1c0::-2a10:4646:1c2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4b:dd:9a:77:b9:10:4c:84:b2:cc:91:85:91:60:c4:9f:35:21:
02:2b:43:11:a7:79:ce:ec:a1:73:18:65:e8:5f:5a:a8:f6:88:
64:74:4a:5d:3e:c0:4d:e7:95:79:bd:62:1c:bb:2e:10:ae:c2:
28:33:42:14:32:5f:af:90:52:06:03:f0:b4:72:f2:ca:7b:ec:
9a:cc:0f:6a:17:59:c0:bb:6c:e2:10:56:2a:76:90:bf:c2:2e:
e1:4f:d9:5f:b3:b5:c4:99:4f:bc:08:2f:10:78:48:91:d9:d1:
a8:0e:66:08:44:6d:e2:55:93:6a:c3:17:fe:84:0c:57:18:f1:
98:f0:5d:3c:dc:84:b0:8b:7a:b7:f4:f8:d0:e6:3b:68:97:05:
84:28:a6:0d:c8:51:d9:06:9b:fb:48:bc:8a:86:d8:07:06:92:
ca:65:a0:2b:2d:6a:43:f2:54:1a:e3:48:b5:a0:6f:e6:69:76:
18:d7:11:36:5c:3f:ee:cd:5b:28:84:a2:b8:61:41:1f:8b:e1:
3f:95:92:5e:a9:73:0b:03:8e:be:14:24:69:1c:31:7f:c9:f0:
70:e7:93:b0:d1:ae:53:a8:3b:96:b5:97:b3:60:4e:42:af:8b:
ee:b1:8f:70:6a:54:57:28:95:9d:64:34:4e:42:78:a2:01:7f:
2b:13:0f:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 11 15:57:05 2026 by rpki-client