Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/baE-uTGXhUmXS65TJe0eoTaAdTA.roa
File: baE-uTGXhUmXS65TJe0eoTaAdTA.roa (raw, json)
Hash identifier: AjzX6VNfFo0NJGvUKk2w+nDwgkPWIsuzZYkfZRHLP3E=
Subject key identifier: 6D:A1:3E:B9:31:97:85:49:97:4B:AE:53:25:ED:1E:A1:36:80:75:30
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F236845E9B1FC5E5AF77495056C4AC46D
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/baE-uTGXhUmXS65TJe0eoTaAdTA.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211693
IP address blocks: 2a10:4646:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:45:e9:b1:fc:5e:5a:f7:74:95:05:6c:4a:c4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6da13eb931978549974bae5325ed1ea136807530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:12:da:eb:06:52:3b:72:de:8b:0e:c7:f9:
f7:66:29:50:45:c9:38:55:cf:10:77:15:bd:4c:e4:
af:f3:e3:3e:3f:58:1b:80:b6:fc:96:54:5d:58:2f:
cb:3d:bc:b3:5f:66:03:05:f3:97:41:07:7b:2d:62:
b3:3d:f4:29:82:b2:c6:2d:44:2d:1b:39:60:1b:ba:
76:78:34:6c:4b:39:19:2d:d0:82:81:bd:c0:2a:69:
1c:b9:c9:23:80:7b:b2:6c:30:02:15:a0:d3:83:02:
da:23:c0:47:33:54:71:98:65:80:fa:44:e4:b6:6a:
a2:ca:b0:72:94:e2:dc:6c:51:c4:c0:3a:ec:c3:39:
11:58:50:ef:63:45:44:ca:c1:9f:12:ea:bd:42:84:
ab:61:8d:c2:81:6f:15:7f:93:10:a5:ff:b0:7f:9e:
80:72:e9:8e:23:00:4e:8f:61:50:3f:c6:e4:97:c2:
d4:f5:34:6a:a2:40:50:55:71:54:ca:59:da:7f:62:
b1:cf:72:a8:14:db:0c:89:fb:d2:9c:06:6b:1e:b5:
5e:4f:4a:ff:9f:6b:37:ba:a5:04:43:f0:96:65:06:
3b:f0:84:74:0d:8e:68:f9:f2:ee:d1:df:5f:22:78:
f9:2b:99:34:6a:78:6d:a3:32:df:36:fc:f1:2e:01:
d7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A1:3E:B9:31:97:85:49:97:4B:AE:53:25:ED:1E:A1:36:80:75:30
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/baE-uTGXhUmXS65TJe0eoTaAdTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:b::/48
Signature Algorithm: sha256WithRSAEncryption
ad:09:86:09:8f:cf:c5:b8:ac:9a:85:3a:05:ce:77:1b:0e:30:
02:24:a7:63:a1:69:b1:37:b5:c0:d2:6e:e8:65:19:de:35:0a:
93:52:8f:f2:8d:65:c1:cf:6f:f5:9c:a0:f6:e0:cd:ff:dd:e0:
82:a4:f0:f3:91:96:8c:11:18:f0:5c:a8:66:6f:85:e3:3e:5e:
de:fd:59:eb:43:fd:2f:6f:1f:4d:b5:9b:a3:80:14:94:90:9f:
49:c3:d9:8d:fb:c3:33:1a:12:5c:20:bb:10:ce:4f:76:41:a1:
9c:79:2c:37:80:4d:f7:80:c6:dc:84:3a:fe:4e:f3:bd:c9:1d:
42:a7:a0:31:fe:f0:df:29:03:7a:63:c2:16:26:6d:69:02:56:
b7:7e:43:26:8e:05:b1:02:b6:4d:e3:cf:e7:53:89:fd:e6:dd:
6a:ec:c6:32:6c:68:79:a3:e8:e3:28:76:ad:57:9a:67:42:c3:
17:fc:6f:c5:16:83:3b:9b:bc:1d:67:f7:37:36:c4:9b:1b:9f:
f2:fb:87:6d:e0:fa:54:7b:57:46:b4:ec:fb:8f:31:d5:62:a2:
43:55:b9:9b:db:4e:85:cf:d7:5d:49:08:b1:cb:b4:ba:3c:b8:
66:c9:8f:af:3b:ce:a3:8f:31:a0:f8:f4:d8:da:42:38:66:e7:
c4:bc:d8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:57:31 2026 by rpki-client