Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fGk8MXUQeP8UOlNgTjKGT8DHe_w.roa
File: fGk8MXUQeP8UOlNgTjKGT8DHe_w.roa (raw, json)
Hash identifier: 9Pj2j1VDZ2oEcMkOoN8txqGGDjWHMZWAwK3n7bTvCg0=
Subject key identifier: 7C:69:3C:31:75:10:78:FF:14:3A:53:60:4E:32:86:4F:C0:C7:7B:FC
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F23683F41747B1AA49C5BC066CA1881A8
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fGk8MXUQeP8UOlNgTjKGT8DHe_w.roa
Signing time: Thu 02 Jul 2026 15:17:42 +0000
ROA not before: Thu 02 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202827
IP address blocks: 2a10:4646:70::/48 maxlen: 48
2a13:89c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3f:41:74:7b:1a:a4:9c:5b:c0:66:ca:18:81:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c693c31751078ff143a53604e32864fc0c77bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f7:87:92:b7:3b:76:97:2a:6a:6a:66:61:d3:
cf:67:01:84:d2:ff:d2:dc:4a:c9:2c:73:be:51:d8:
0c:2d:9f:a5:1e:be:99:52:3a:bb:0d:30:3e:5f:28:
54:84:d2:36:7e:07:8d:00:f0:0f:43:9a:ae:76:0e:
84:a9:e8:10:98:de:f2:c7:f8:a5:53:e8:52:01:9d:
e7:32:1b:3e:56:dc:06:24:3c:9a:c7:ff:e5:fd:be:
1d:b7:56:7c:b3:0e:28:b4:0d:e2:93:78:66:51:f4:
56:45:88:2f:e9:7b:69:57:01:b0:8f:3f:f6:56:04:
e0:36:38:26:fa:21:12:cc:ed:78:10:29:3a:92:70:
ad:51:ae:2b:48:ed:b8:5a:74:f8:43:e8:10:bb:53:
9e:ae:dd:86:8c:24:dc:38:ab:94:8d:ee:de:d8:88:
6c:d8:f7:61:43:3d:ce:e8:22:38:bd:37:6f:15:1c:
a6:03:b7:3e:19:6b:4a:9e:01:c4:46:39:24:a7:70:
be:43:a3:0b:46:1d:65:a5:7a:17:eb:8e:ce:c8:8e:
38:55:b8:0d:22:c7:56:13:22:d6:44:a2:4f:4b:aa:
dc:c9:ca:1f:c8:bb:53:27:c1:c4:0a:b7:f7:ae:7e:
3f:96:0c:dd:6e:3a:2e:7d:36:50:50:ff:82:9b:f3:
85:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:69:3C:31:75:10:78:FF:14:3A:53:60:4E:32:86:4F:C0:C7:7B:FC
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fGk8MXUQeP8UOlNgTjKGT8DHe_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:70::/48
2a13:89c0::/32
Signature Algorithm: sha256WithRSAEncryption
bc:ed:f2:00:af:9a:04:37:9f:66:de:94:ec:fe:30:72:3f:35:
8d:c0:02:07:2a:96:f3:5c:11:8d:db:a8:5a:6f:90:d6:ca:8b:
4e:70:57:c6:9b:cd:e7:0c:d9:93:06:ad:78:91:93:a4:d9:1c:
40:6d:8a:97:ca:39:2d:6c:38:72:4c:c6:a0:b9:77:4e:f5:26:
38:34:43:a6:59:e3:b7:69:39:51:63:e8:4e:03:8f:41:34:54:
23:1e:de:a2:88:7d:f8:4a:47:1d:fb:24:75:ed:4e:87:99:9b:
0b:f4:bf:88:c2:0a:ea:3c:3f:ad:a0:c2:aa:6f:82:ba:03:91:
a3:8d:94:5f:15:f0:10:ec:ff:4a:20:98:4c:6a:4d:6d:f6:01:
99:02:b3:2b:f7:08:61:29:ba:5c:77:09:cb:ea:31:dd:92:b4:
d5:a3:85:1c:f6:56:35:03:d1:5a:57:ed:51:67:84:4f:de:b1:
84:02:ca:89:69:09:8b:ee:fb:c9:12:7c:e3:31:c3:7c:ec:63:
11:2c:b8:1b:98:18:04:a0:34:67:92:6a:02:db:ac:0f:e0:c1:
e0:f8:de:43:6b:61:b9:83:c5:5f:40:79:8a:58:89:69:f4:c8:
b8:64:b1:7e:08:6b:49:01:db:f3:8f:64:1a:e8:e6:47:d3:82:
db:6d:c8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:59:25 2026 by rpki-client