Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/dWkVykwRuyJ7cK8v3frF0XRMW3Q.roa
File: dWkVykwRuyJ7cK8v3frF0XRMW3Q.roa (raw, json)
Hash identifier: 7YBcg3eoh/u0arCV5cilBpldW9SOARulU+iJYPbWCbY=
Subject key identifier: 75:69:15:CA:4C:11:BB:22:7B:70:AF:2F:DD:FA:C5:D1:74:4C:5B:74
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F23683E1EEF5647B3E654F19D6B9DBE80
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/dWkVykwRuyJ7cK8v3frF0XRMW3Q.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199415
IP address blocks: 2a10:4646:121::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3e:1e:ef:56:47:b3:e6:54:f1:9d:6b:9d:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=756915ca4c11bb227b70af2fddfac5d1744c5b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a6:2b:e3:f1:33:74:9b:e3:c6:2c:34:f7:da:
4a:1a:19:73:2f:c0:a9:ab:8a:95:e4:23:08:16:32:
8e:c1:af:13:46:8e:36:19:01:ab:44:12:53:5d:ca:
f0:10:6c:30:89:0a:df:dd:0d:8a:b7:0e:91:b2:85:
e5:b9:e3:fe:d0:51:cd:27:aa:20:51:1d:0d:df:ef:
37:35:f4:a1:a8:87:a0:6f:7e:91:b1:8d:1a:cd:59:
3d:ca:17:7f:03:70:93:2c:0f:ce:96:19:f4:c9:1d:
f9:0a:9a:ea:a2:95:f4:cd:23:5d:90:f9:da:0e:29:
4e:31:d0:5a:94:49:78:8f:94:cb:f8:34:0b:48:21:
4a:d5:5f:53:b7:80:75:6c:e6:a2:6c:dd:f8:00:39:
06:d4:a9:d6:24:a8:cf:7b:83:04:44:6f:34:e4:6c:
20:4a:77:24:e3:93:40:82:b4:4c:23:cf:69:5b:50:
da:4b:9d:f1:3a:ba:18:0b:95:51:78:ab:f1:3e:b6:
19:76:f9:8d:ad:38:b1:ac:11:12:af:aa:b1:b0:bd:
57:cf:a7:7d:2d:d4:0a:fa:3f:12:ec:77:94:ac:ed:
39:72:8c:fe:06:9a:f0:12:80:32:e5:cc:81:13:3b:
60:45:bc:a0:72:65:5c:8f:d1:5c:5d:1a:49:a8:4c:
9d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:69:15:CA:4C:11:BB:22:7B:70:AF:2F:DD:FA:C5:D1:74:4C:5B:74
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/dWkVykwRuyJ7cK8v3frF0XRMW3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:121::/48
Signature Algorithm: sha256WithRSAEncryption
ad:70:d6:b3:21:3e:b9:7a:98:44:dd:e9:88:57:f5:07:c4:31:
b9:8d:d9:32:1a:d0:c4:36:38:1d:e7:9e:f3:93:53:d9:d8:db:
31:bf:2b:90:60:d1:e3:4e:78:48:20:0e:b9:0b:34:ee:ee:06:
f4:0a:e6:7c:12:25:64:45:95:00:55:71:33:bf:9c:00:ed:61:
ae:4c:58:80:5f:72:b3:71:a4:68:a2:78:96:6a:55:7d:f2:58:
a5:ea:6f:99:50:87:54:be:da:47:8e:d3:8c:19:3c:10:80:13:
97:ba:42:cf:20:67:dc:9a:eb:e9:ca:2b:e4:16:fe:85:a0:11:
92:85:98:69:15:d5:97:3f:43:79:be:04:ab:4d:9e:b1:08:33:
c2:07:9b:23:dc:18:98:be:6c:3d:a7:de:29:d5:cf:86:78:00:
ad:ab:7f:7e:e9:37:47:9f:fd:31:ce:0b:08:8e:f4:9f:c9:04:
f9:63:9b:6f:b5:5d:97:70:8e:cf:c9:49:93:67:5e:c0:c3:eb:
5f:29:d1:ac:40:78:9c:fc:70:33:f5:e4:a7:1d:f4:fa:1b:0a:
5c:b4:0e:cf:5f:1b:ff:31:95:34:72:b0:1f:bb:af:cf:59:41:
9b:51:a6:a3:1d:7a:3e:60:02:9c:67:77:cd:81:d2:b1:bc:3a:
93:77:ea:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 16:01:00 2026 by rpki-client