Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/gcB9OLOx-KqwqMp-e_TB7COz-xw.roa
File: gcB9OLOx-KqwqMp-e_TB7COz-xw.roa (raw, json)
Hash identifier: zOEacADZrsOUIT8na1aHga1C9RSgmdETsExbU8pE4Dc=
Subject key identifier: 81:C0:7D:38:B3:B1:F8:AA:B0:A8:CA:7E:7B:F4:C1:EC:23:B3:FB:1C
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F236839992CA08D726C33673C26D68D15
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/gcB9OLOx-KqwqMp-e_TB7COz-xw.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198180
IP address blocks: 2a10:4646:370::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:39:99:2c:a0:8d:72:6c:33:67:3c:26:d6:8d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81c07d38b3b1f8aab0a8ca7e7bf4c1ec23b3fb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:7b:46:47:bf:5c:db:5a:fa:2a:f9:4b:53:
b8:6b:53:3c:70:81:02:0d:8c:8d:b3:bc:07:70:83:
90:e9:98:59:72:b0:f7:59:0a:b3:74:da:60:73:22:
b5:4b:67:b4:ad:33:6f:e4:a0:f8:ba:0a:5c:29:bf:
52:08:3b:5d:72:f2:a6:67:9f:34:71:68:1a:c2:0d:
9a:94:6c:7b:60:c9:ae:9c:70:85:98:24:2f:6a:a3:
98:4b:d3:ad:c4:da:39:30:86:4c:e0:0a:b3:5b:53:
93:51:18:91:61:b7:dc:78:58:9e:f8:ee:95:f9:82:
3a:a9:56:30:62:9b:ad:c3:0c:76:22:78:27:ce:3b:
d3:d4:f1:da:0b:20:02:8e:e1:64:4f:01:a9:77:5b:
6d:c1:a4:a3:4d:22:60:94:66:be:12:1f:61:06:8b:
25:50:b8:fd:33:7e:2f:ef:ba:4c:66:c4:bb:cf:f1:
f8:bd:cf:e2:3e:cf:5f:be:73:5a:de:78:c1:d6:5e:
ef:9b:21:aa:b5:94:b1:ee:f2:3c:d6:99:51:f1:ae:
6e:2f:50:16:97:5c:d7:ad:8d:ec:cb:d2:3c:34:0b:
6b:af:29:ce:a8:85:d1:90:c4:4b:01:40:83:28:b2:
60:45:9d:05:06:7f:54:b4:28:af:f7:42:3d:10:22:
8a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C0:7D:38:B3:B1:F8:AA:B0:A8:CA:7E:7B:F4:C1:EC:23:B3:FB:1C
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/gcB9OLOx-KqwqMp-e_TB7COz-xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:370::/44
Signature Algorithm: sha256WithRSAEncryption
5a:a7:f7:f6:a1:03:e1:94:6d:72:e9:ea:62:5d:b8:eb:19:c0:
58:ae:27:85:f9:80:d2:e5:89:d1:09:de:f6:01:12:28:84:9d:
9d:8d:f0:d5:7e:6e:03:a4:20:f6:45:96:3c:92:da:19:48:d0:
d2:a6:41:da:10:d9:88:ad:cd:5b:af:d9:2a:97:fe:d2:e8:b8:
9c:3c:f5:e4:5a:aa:c2:7e:be:bf:c1:c3:a9:0a:17:24:94:24:
17:e3:2c:3a:c8:45:c3:5d:7d:bb:42:0f:68:71:96:fa:9e:70:
58:d7:b1:7e:e4:36:48:3e:71:e4:1f:c5:59:91:fa:86:c6:fa:
fa:dd:82:ec:6b:9d:2f:b0:f0:87:90:fb:94:2c:5f:27:bd:81:
20:3c:ae:5e:b3:c8:c1:28:aa:74:8b:cc:b9:f3:da:42:a8:bb:
21:5e:62:df:7a:5e:ce:b6:8d:af:59:00:e6:03:52:6a:e5:74:
ec:32:b5:93:31:22:0a:0e:49:60:70:f5:86:f8:2b:60:24:ec:
ab:34:74:d0:51:7d:aa:2d:d8:71:d5:e8:be:64:e3:9f:4f:4c:
1e:22:cd:b5:b6:4b:44:cf:f9:98:3d:49:36:9f:62:93:9a:eb:
4a:e2:dc:fd:83:3d:55:14:6e:c9:77:8e:3b:1d:57:52:bd:cc:
b0:0c:6c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 16:01:12 2026 by rpki-client