Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/ext-QDDWINcKwa2Mw4rXO7S9uXs.roa
File: ext-QDDWINcKwa2Mw4rXO7S9uXs.roa (raw, json)
Hash identifier: fWesDUJo13M+KG37vYxdJdEn2ynVJZfDjSl1lpbRFz0=
Subject key identifier: 7B:1B:7E:40:30:D6:20:D7:0A:C1:AD:8C:C3:8A:D7:3B:B4:BD:B9:7B
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F23685668737827A8DAF0051DD154C7D3
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/ext-QDDWINcKwa2Mw4rXO7S9uXs.roa
Signing time: Thu 02 Jul 2026 15:17:48 +0000
ROA not before: Thu 02 Jul 2026 15:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216147
IP address blocks: 2a10:4646:3d0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:56:68:73:78:27:a8:da:f0:05:1d:d1:54:c7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b1b7e4030d620d70ac1ad8cc38ad73bb4bdb97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:ba:05:60:50:f1:59:c6:20:72:eb:a6:09:
e1:57:bb:d1:d0:ee:47:16:83:0c:06:3b:31:01:80:
6f:43:f8:46:e5:7c:73:36:3e:89:ac:1f:f4:f5:dd:
d6:17:3c:f1:2b:50:43:bb:3b:f9:0c:57:86:78:a2:
8a:c8:76:85:dd:9b:4f:7d:57:91:16:da:2e:00:28:
69:09:00:b9:13:6d:d4:cd:64:4a:99:2f:86:de:cb:
7a:74:35:84:db:53:56:66:3a:06:cb:8c:5c:f6:87:
7f:f5:af:4d:b9:be:c0:d8:91:7e:b1:19:93:36:03:
4c:59:35:bf:3a:5e:5e:80:c6:48:20:52:bd:a1:3d:
3f:a3:af:ff:32:d8:14:37:6a:26:95:f8:dc:d6:93:
08:fa:d8:8a:55:27:86:e1:0b:6f:bc:48:10:77:0e:
0f:27:4f:bf:5f:00:4d:fe:fc:3f:7e:9c:bf:aa:80:
87:6c:d3:4a:46:a4:e5:ab:69:95:93:54:d2:57:c4:
f4:2e:51:b3:b1:ca:0e:85:47:37:2d:09:51:ff:2d:
f7:a6:eb:2e:9b:e8:85:bc:78:ec:92:5a:23:76:c3:
b7:c8:ae:34:f5:02:e5:54:26:a7:7a:6c:7d:07:7e:
13:4b:78:a7:0f:a9:3c:f9:53:ed:12:79:cc:c7:02:
45:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1B:7E:40:30:D6:20:D7:0A:C1:AD:8C:C3:8A:D7:3B:B4:BD:B9:7B
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/ext-QDDWINcKwa2Mw4rXO7S9uXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:3d0::/48
Signature Algorithm: sha256WithRSAEncryption
2f:fa:3a:5e:de:48:4b:5b:d7:68:58:67:18:75:9e:05:fa:57:
84:9e:14:d5:cb:57:0e:92:85:ac:d1:19:6e:93:50:4f:29:ca:
c1:dc:9b:17:40:37:02:74:48:e5:fb:78:42:3c:38:c1:e0:58:
2f:40:ab:f7:f9:5e:2d:52:67:4d:2f:02:d7:b0:44:5d:2a:66:
b1:b3:9c:6e:2a:9a:8a:4a:e7:f8:34:be:0a:62:92:02:8c:97:
01:2a:e1:dc:0d:05:9a:6c:f6:66:a6:6e:b3:66:21:c4:67:2e:
5a:05:d4:b6:c9:4b:0d:ba:68:03:49:d7:b4:29:ad:55:b6:61:
24:f3:90:fd:63:80:32:2a:3b:ce:3d:3e:e7:db:cd:e4:18:a2:
23:80:27:93:a2:8f:64:17:7f:3c:1f:86:bb:17:32:09:51:34:
e3:71:0f:9a:6a:2a:e2:c9:14:75:a3:bd:e1:ea:fe:46:6e:54:
cf:08:33:b2:3a:8f:a6:fd:75:3d:2e:04:66:a2:72:33:2d:a5:
b1:bb:d9:da:2b:3d:43:51:ef:b0:38:19:86:13:26:21:a6:f4:
eb:88:7c:00:6a:84:87:6a:ac:60:40:7e:2a:35:c7:9e:7e:6e:
80:c8:a5:1d:2d:86:70:08:a7:d8:89:df:5e:fc:8f:f2:15:79:
77:3d:a8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:58:12 2026 by rpki-client