Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/jg6hfYCoXuAuPPoa7YinNKFlL28.roa
File: jg6hfYCoXuAuPPoa7YinNKFlL28.roa (raw, json)
Hash identifier: rY+k9rbHpeWLCQT7qtOX5aiLx5RJnRuBw9S8uvo5yHI=
Subject key identifier: 8E:0E:A1:7D:80:A8:5E:E0:2E:3C:FA:1A:ED:88:A7:34:A1:65:2F:6F
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F23683F7E37643F3BFFED2A3D35C709E3
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/jg6hfYCoXuAuPPoa7YinNKFlL28.roa
Signing time: Thu 02 Jul 2026 15:17:42 +0000
ROA not before: Thu 02 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204613
IP address blocks: 2a10:4646:260::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3f:7e:37:64:3f:3b:ff:ed:2a:3d:35:c7:09:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e0ea17d80a85ee02e3cfa1aed88a734a1652f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a3:82:97:04:fa:0c:99:e4:07:77:dc:e9:ca:
a9:ea:4c:4e:42:0b:35:8f:b0:b1:99:b5:00:04:ff:
bb:a3:41:29:4e:8c:cc:c0:17:42:2e:d8:3b:38:d7:
f4:50:62:bb:cc:da:ff:8a:eb:2e:b7:6c:0b:2b:0a:
6f:7b:52:fe:83:68:8c:a3:d9:d4:19:f0:0b:43:9a:
39:8c:de:37:34:4f:cc:1a:26:15:3c:8f:5f:31:3b:
23:33:27:3e:69:2e:02:58:f6:b2:08:a9:86:20:69:
9f:2b:8f:e1:0d:d9:48:f4:4e:1d:df:54:ba:2d:68:
6d:ed:d4:86:07:d8:67:ad:c7:2f:d9:2b:2f:bb:32:
e5:94:fe:c0:6f:ba:42:9b:f8:4a:00:79:42:7f:1e:
f0:42:f3:a7:04:66:e9:93:b1:40:02:68:19:be:58:
42:73:37:89:87:bf:92:9b:f7:f1:cb:77:55:d8:fe:
0f:8b:19:18:3a:64:af:2e:c3:07:c9:ac:2b:a5:20:
80:bc:f0:fe:ce:a6:bb:34:b2:80:3d:89:e6:6f:c4:
e7:fe:bc:88:54:1d:74:e9:ae:52:59:46:a8:77:df:
ca:c8:80:b1:56:8f:5a:05:cd:be:0d:1e:a2:f7:c6:
48:f9:96:90:9e:4a:3a:1b:e2:5e:e9:5c:67:cd:71:
6b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0E:A1:7D:80:A8:5E:E0:2E:3C:FA:1A:ED:88:A7:34:A1:65:2F:6F
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/jg6hfYCoXuAuPPoa7YinNKFlL28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:260::/44
Signature Algorithm: sha256WithRSAEncryption
0d:1e:36:12:7b:62:d7:19:90:64:07:f9:cc:75:ee:86:b2:a4:
7a:8e:57:69:f5:23:9f:8d:70:30:12:ae:be:18:ec:96:d1:70:
ee:41:da:e5:62:93:ba:6f:7e:37:d3:7f:ad:84:21:26:ba:f1:
3a:3f:0c:9b:89:2f:ca:7d:a6:9d:17:8a:21:ef:88:cc:07:24:
7e:2d:dc:4c:78:ce:a1:ab:f9:dd:33:db:c9:4c:44:9b:7e:b4:
42:87:8b:a2:a9:48:64:97:aa:b9:de:94:90:fa:ea:a0:49:93:
f0:6e:cb:42:cc:c8:35:d7:6d:85:d0:a9:bf:40:ae:21:29:f2:
0c:28:f9:c0:6f:6a:7e:3d:aa:07:76:e0:c4:0b:53:23:63:6d:
0d:ab:73:e6:ca:e1:70:51:56:ef:ab:75:af:ad:29:9d:7a:af:
c9:ca:f2:6f:d5:26:4f:18:5f:3a:4a:60:d3:95:2f:55:b2:59:
51:ae:d4:eb:f5:b6:3e:21:54:44:60:10:22:61:7d:c1:78:ac:
42:5a:14:ff:c8:12:31:3a:1a:fa:69:5d:2f:7d:66:16:5f:0a:
14:0e:b9:41:0d:38:4f:cb:d7:7b:fd:7d:89:6e:56:9e:91:46:
96:30:9c:d9:a5:52:50:ce:e6:d8:1d:62:08:33:dd:5b:9c:34:
00:55:4a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 16:01:41 2026 by rpki-client