Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/rKMXOu1LAkitTnIIuffCkZ36o8I.roa
File: rKMXOu1LAkitTnIIuffCkZ36o8I.roa (raw, json)
Hash identifier: WkIoax7Ob7CGue2VjVswuJpb+FMRnB0LCAFbENC607M=
Subject key identifier: AC:A3:17:3A:ED:4B:02:48:AD:4E:72:08:B9:F7:C2:91:9D:FA:A3:C2
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F23683EB780D822482A90C9B75B5961E4
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/rKMXOu1LAkitTnIIuffCkZ36o8I.roa
Signing time: Thu 02 Jul 2026 15:17:42 +0000
ROA not before: Thu 02 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201480
IP address blocks: 2a10:4646:250::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3e:b7:80:d8:22:48:2a:90:c9:b7:5b:59:61:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aca3173aed4b0248ad4e7208b9f7c2919dfaa3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:82:cb:3b:6c:50:6e:e6:af:df:1e:2e:3f:
36:e0:d3:b5:e9:4f:aa:ef:72:78:64:4b:35:c3:0b:
f4:47:88:88:c7:b8:d9:fb:f2:e6:20:7d:ad:2e:5c:
5e:dc:ed:a3:ce:ed:8f:92:a2:e7:6b:12:c9:9d:00:
81:70:1c:68:5b:56:a7:75:55:3a:ef:88:0f:0b:ee:
fe:d1:4d:0c:f4:a4:cd:b7:b7:58:b1:dd:4f:81:ab:
4a:2d:f8:71:d0:02:a3:ae:ed:b4:d2:34:9f:89:4e:
39:ac:cb:6e:b2:61:40:fc:f5:49:08:bb:55:7c:9a:
4f:60:3d:fd:9a:72:79:2e:e8:07:bf:35:cf:ab:2a:
d4:85:f7:7c:e5:0b:39:87:fd:fb:d4:1e:bd:23:b8:
e4:ab:aa:e7:05:37:9a:7d:9f:cb:62:0f:d1:9b:da:
a6:22:76:04:38:d9:a4:2e:a8:e0:89:d4:f3:dd:4d:
f4:cf:67:a5:b4:a0:99:e9:9f:bb:08:bb:d7:54:ac:
bd:3b:29:00:0a:79:c3:e9:8a:0f:25:0a:96:dd:1e:
11:ae:ee:22:da:da:77:87:e0:56:19:10:7f:25:b9:
4d:fb:c7:c3:fb:73:30:d3:5d:9b:d4:8b:05:28:d9:
13:02:ae:13:80:a2:c5:65:e5:79:49:2e:9d:64:48:
cf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A3:17:3A:ED:4B:02:48:AD:4E:72:08:B9:F7:C2:91:9D:FA:A3:C2
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/rKMXOu1LAkitTnIIuffCkZ36o8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:250::/44
Signature Algorithm: sha256WithRSAEncryption
a6:36:7b:b5:a4:b9:76:9c:63:b7:52:13:d4:16:80:d4:6a:9b:
5e:32:28:9b:39:7c:c0:65:46:0d:b6:3c:20:51:85:0e:d9:2e:
67:4e:f8:0e:6a:1f:3c:f5:ba:3b:76:e0:66:b8:2f:30:31:f1:
fc:48:58:2e:a0:29:a4:e7:af:46:1d:7a:db:4a:67:fc:16:8c:
a5:7d:94:5a:4f:34:57:5a:ed:57:9b:87:3e:9c:89:ef:51:4d:
88:69:35:18:92:18:e8:87:2d:95:d4:74:56:9d:5b:d3:06:3c:
e3:75:6f:1e:0b:6e:9c:54:75:bf:d9:5e:c0:3f:09:3c:53:50:
87:e2:ba:8f:02:b3:7c:e4:e4:ce:c7:ad:d1:e0:da:a7:db:8e:
6b:03:ca:21:1c:52:98:32:f9:4f:2b:0f:85:b1:0a:f0:14:90:
45:94:dd:f6:fe:b7:5e:3c:3f:ff:91:e2:78:53:36:bf:17:de:
be:83:dd:16:5c:83:00:8b:99:61:6b:37:da:a9:c2:e6:9c:ab:
16:c8:96:75:7d:37:7b:ec:f6:97:50:b4:62:aa:2b:6f:56:c3:
70:d9:03:99:68:80:f8:c3:74:72:86:f6:a8:6b:12:df:8f:3d:
3c:25:7d:82:ca:9f:05:5c:35:18:f4:4b:87:f0:94:45:8b:0b:
0e:8c:2f:53
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaD63gNgiSCqQybdbWWHkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkY2M0OTUyYjZmM2E4Y2M3YzgxNjMwZDNlODNiMmE5ODI3
MTYzZjYwHhcNMjYwNzAyMTUxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2EzMTczYWVkNGIwMjQ4YWQ0ZTcyMDhiOWY3YzI5MTlkZmFhM2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP6CyztsUG7mr98eLj824NO16U+q
73J4ZEs1wwv0R4iIx7jZ+/LmIH2tLlxe3O2jzu2PkqLnaxLJnQCBcBxoW1andVU6
74gPC+7+0U0M9KTNt7dYsd1PgatKLfhx0AKjru200jSfiU45rMtusmFA/PVJCLtV
fJpPYD39mnJ5LugHvzXPqyrUhfd85Qs5h/371B69I7jkq6rnBTeafZ/LYg/Rm9qm
InYEONmkLqjgidTz3U30z2eltKCZ6Z+7CLvXVKy9OykACnnD6YoPJQqW3R4Rru4i
2tp3h+BWGRB/JblN+8fD+3Mw012b1IsFKNkTAq4TgKLFZeV5SS6dZEjPQwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKyjFzrtSwJIrU5yCLn3wpGd+qPCMB8GA1UdIwQY
MBaAFH3MSVK286jMfIFjDT6DsqmCcWP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmN4SlVyYnpxTXg4Z1dNTlBvT3lxWUp4WV9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt
YWU5MjgzZTc5NjRlLzEvcktNWE91MUxBa2l0VG5JSXVmZkNrWjM2bzhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl
LzEvZmN4SlVyYnpxTXg4Z1dNTlBvT3lxWUp4WV9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgJQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCmNnu1pLl2nGO3UhPUFoDUapteMiibOXzAZUYN
tjwgUYUO2S5nTvgOah889bo7duBmuC8wMfH8SFguoCmk569GHXrbSmf8FoylfZRa
TzRXWu1Xm4c+nInvUU2IaTUYkhjohy2V1HRWnVvTBjzjdW8eC26cVHW/2V7APwk8
U1CH4rqPArN85OTOx63R4Nqn245rA8ohHFKYMvlPKw+FsQrwFJBFlN32/rdePD//
keJ4Uza/F96+g90WXIMAi5lhazfaqcLmnKsWyJZ1fTd77PaXULRiqitvVsNw2QOZ
aID4w3RyhvaoaxLfjz08JX2Cyp8FXDUY9EuH8JRFiwsOjC9T
-----END CERTIFICATE-----
Generated at Sat Jul 11 15:58:49 2026 by rpki-client