Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fB8XWNLLHNgHnYx78o3T2kcAKPs.roa
File: fB8XWNLLHNgHnYx78o3T2kcAKPs.roa (raw, json)
Hash identifier: jj9t1chBJ2t0t3tOHNeIqeQLqq+L6Q2JAiPF62ls9ac=
Subject key identifier: 7C:1F:17:58:D2:CB:1C:D8:07:9D:8C:7B:F2:8D:D3:DA:47:00:28:FB
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F2368501226618F6D6B377FDC1CD45047
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fB8XWNLLHNgHnYx78o3T2kcAKPs.roa
Signing time: Thu 02 Jul 2026 15:17:46 +0000
ROA not before: Thu 02 Jul 2026 15:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215140
IP address blocks: 2a10:4646:440::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:50:12:26:61:8f:6d:6b:37:7f:dc:1c:d4:50:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c1f1758d2cb1cd8079d8c7bf28dd3da470028fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:00:5e:05:da:f4:62:1b:83:9c:92:17:c2:1d:
08:e6:31:da:60:fe:84:8d:b2:12:1c:a8:80:a2:a9:
45:48:34:6e:38:03:cc:60:05:75:2a:4c:40:4f:45:
39:94:bf:ea:4a:1a:92:37:5c:28:fc:64:52:3c:a5:
ed:51:29:d2:1f:9f:ca:ab:aa:29:ca:61:72:73:5e:
42:c4:c5:2a:1b:bf:49:55:cc:8d:ce:15:b7:79:de:
d6:59:23:b6:b8:df:12:36:60:2a:ac:4f:0f:08:cc:
f0:83:e0:c3:be:34:08:ad:0e:8d:d2:c1:f8:35:7a:
18:e0:15:f6:f1:87:93:b3:9b:93:aa:94:14:81:dd:
25:0f:d4:70:63:43:08:28:37:a7:e7:5d:c5:16:05:
45:36:f7:73:0e:27:af:14:d9:2a:59:41:9e:fb:8d:
13:58:19:98:01:09:7e:12:8c:3b:68:14:38:65:f7:
f1:fa:4a:4e:03:c5:ed:11:e3:c7:24:b7:cc:2c:ad:
3d:5e:c7:ff:3c:ae:45:17:2c:96:bc:88:ac:ac:69:
21:0c:0c:29:46:50:ad:ab:b3:a4:25:1e:aa:8e:c5:
ab:be:e4:d7:d3:58:20:63:b5:80:1d:c6:8d:a6:23:
50:4f:7f:31:33:6e:7a:91:1d:f5:f5:38:eb:e9:4c:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1F:17:58:D2:CB:1C:D8:07:9D:8C:7B:F2:8D:D3:DA:47:00:28:FB
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fB8XWNLLHNgHnYx78o3T2kcAKPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:440::/44
Signature Algorithm: sha256WithRSAEncryption
57:28:84:69:b2:67:5c:48:52:1d:4a:85:16:c6:3c:d4:85:68:
56:38:87:c2:ab:e6:67:b1:ac:ce:e1:0e:03:d0:3e:87:15:20:
6b:b8:1a:88:03:b1:c5:18:3d:88:9f:00:52:e6:68:79:da:3f:
61:b6:f9:49:99:d1:b9:31:18:ce:98:09:80:ad:85:71:d0:3a:
5b:04:4f:12:42:1a:68:40:d9:4c:62:b1:05:a4:0d:f4:2c:f1:
79:c2:47:ec:02:28:26:30:e3:5b:e4:c3:e7:35:e2:e6:9f:c9:
d2:86:32:92:3e:53:5e:f6:96:de:16:08:ba:a2:57:a0:a5:2f:
86:a4:bc:66:f8:89:17:e5:0a:d5:c3:22:1d:79:14:89:16:31:
9e:7e:a6:75:d8:56:42:87:3c:63:a8:42:87:e0:19:2c:19:a9:
21:44:f8:9d:44:54:a0:72:7d:1e:bd:f0:bc:76:29:22:fd:8f:
8f:9f:a4:81:56:83:d9:d8:f1:ad:81:3f:c8:27:2a:44:21:89:
26:a7:90:57:41:a4:f4:d6:40:f9:54:32:4f:41:a4:c1:26:f6:
af:d3:60:4e:22:58:4a:86:46:b7:c8:b2:7b:4a:90:f7:7e:38:
85:6c:20:30:87:7a:83:41:f1:82:27:bd:6e:8f:50:30:59:6b:
3b:d0:d8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:58:43 2026 by rpki-client