Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/f2zJwbsJQDjbgUwAMqBn3yhf67g.roa
File: f2zJwbsJQDjbgUwAMqBn3yhf67g.roa (raw, json)
Hash identifier: HoFw8uwofu/rWBg89N7bjQ91Fy2ImP28Tf0BytyeuJg=
Subject key identifier: 7F:6C:C9:C1:BB:09:40:38:DB:81:4C:00:32:A0:67:DF:28:5F:EB:B8
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F236855D7E894B074C1FECB1A1820B14F
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/f2zJwbsJQDjbgUwAMqBn3yhf67g.roa
Signing time: Thu 02 Jul 2026 15:17:47 +0000
ROA not before: Thu 02 Jul 2026 15:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216117
IP address blocks: 2a10:4646:122::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:55:d7:e8:94:b0:74:c1:fe:cb:1a:18:20:b1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f6cc9c1bb094038db814c0032a067df285febb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:66:de:5b:ff:e0:7c:4b:7a:db:22:02:d2:
df:6f:34:46:de:06:19:a2:66:43:76:0e:2f:ba:17:
8b:22:ca:85:82:04:bf:4a:01:b8:db:15:4e:2e:64:
19:13:b2:ff:a2:e5:68:6c:ff:4c:3e:b5:e6:02:9c:
63:50:7f:e4:34:f0:3d:4b:7f:7d:7a:8e:82:0e:9a:
66:e8:f9:77:a4:ce:28:ba:61:f8:5f:0c:cc:d6:17:
61:0b:ac:50:0c:45:80:ac:b2:21:3b:02:d5:a6:e5:
06:c9:63:34:f3:cb:11:27:f6:3b:e7:48:81:f7:f7:
f9:68:e8:7d:43:be:5d:33:35:8c:d4:e4:94:e9:40:
2e:03:1e:e5:b3:ce:2b:e5:b3:70:a5:e8:a2:ea:22:
51:a6:ff:44:0e:bb:98:5f:6c:f1:4f:22:85:db:e9:
1d:44:a4:ac:74:40:47:4d:93:43:f4:6d:0b:17:1b:
40:11:18:48:63:1f:97:61:8d:25:9f:6b:96:22:40:
fb:0b:98:c4:55:54:b5:65:33:77:55:e8:06:3d:f1:
20:b4:6b:d8:a9:d5:bc:d2:5a:54:b1:ae:15:6a:3a:
31:d4:11:1f:78:85:8d:17:62:c4:9c:be:1d:0c:4b:
d2:43:0b:c5:99:fd:de:e0:e3:58:18:e7:b5:86:66:
85:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6C:C9:C1:BB:09:40:38:DB:81:4C:00:32:A0:67:DF:28:5F:EB:B8
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/f2zJwbsJQDjbgUwAMqBn3yhf67g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:122::/48
Signature Algorithm: sha256WithRSAEncryption
a5:fc:1f:35:b1:3d:dc:a2:d3:90:af:4a:81:7a:c0:6d:b4:1f:
e5:a7:34:87:77:1d:b6:8c:b2:6d:7a:07:87:17:4b:f2:38:3d:
6d:3e:19:91:4b:fe:b4:b4:c2:87:14:c7:76:25:ac:e6:4b:87:
e5:a9:56:ac:8e:26:ed:da:ee:49:38:ab:51:a8:1b:8a:bf:9c:
19:9f:c9:fd:c6:c0:1d:7d:c2:15:16:95:d0:4c:d9:b4:75:83:
4c:c2:6d:ce:88:d5:7d:e9:6a:d2:e1:ba:ad:be:f3:74:7e:fc:
de:4c:c4:14:e3:ff:2d:33:ea:83:05:4c:fe:5c:8f:60:68:f4:
8b:0d:30:b8:98:d7:d0:23:e9:6f:b3:d9:9c:b9:e5:9c:17:c1:
34:48:91:58:83:a5:30:bd:8f:09:a4:27:e2:8e:a0:57:10:e9:
8b:2d:9e:c0:b6:bc:5f:33:00:61:0e:24:6e:95:2b:55:98:d4:
0d:6d:cb:75:45:b1:f1:b5:2b:6c:30:45:0a:04:7f:15:e4:fe:
19:e3:9d:83:5f:28:0f:bc:3c:b1:15:4f:5b:2b:cf:f9:57:84:
9a:d0:40:c0:0f:d8:ae:b7:4b:96:58:68:8a:2b:90:8e:37:44:
03:a4:1b:d9:c8:98:fd:56:03:5f:08:29:c7:05:4f:02:da:80:
82:01:82:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:58:48 2026 by rpki-client