Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/rkXmkXfMN96unGF951D4RUAZm7s.roa
File: rkXmkXfMN96unGF951D4RUAZm7s.roa (raw, json)
Hash identifier: DOvHWXPvMRR6+Gmo9Hh9n91hxEM9f/WGszHqiHPudYU=
Subject key identifier: AE:45:E6:91:77:CC:37:DE:AE:9C:61:7D:E7:50:F8:45:40:19:9B:BB
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F23683C9DA36C65C79F353E321CEAAB39
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/rkXmkXfMN96unGF951D4RUAZm7s.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198825
IP address blocks: 2a10:4646:2e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3c:9d:a3:6c:65:c7:9f:35:3e:32:1c:ea:ab:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae45e69177cc37deae9c617de750f84540199bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a6:ab:8f:1d:ff:5e:b5:a7:cd:f6:a7:00:1f:
fb:96:24:1a:cb:1e:dd:c2:10:b8:a0:99:7c:58:30:
42:6c:b1:b3:d9:4f:c8:d0:c0:52:61:94:e7:93:1b:
4d:fa:6d:01:38:ef:85:04:13:25:5b:f6:f6:8c:88:
90:79:0e:6b:30:64:39:4b:a3:e1:99:4c:14:fc:1a:
86:bb:bd:96:f7:50:74:64:fe:78:65:20:dc:03:a9:
49:4b:71:c1:b5:eb:59:b4:ff:90:d3:4e:a1:49:4f:
82:f7:18:3a:36:28:ec:b3:95:b5:72:9e:8f:3f:83:
a5:9b:88:8b:a7:0b:44:ef:3b:41:5e:c4:63:f3:a2:
64:65:6e:92:5d:29:7d:25:78:14:8d:4d:70:af:c4:
56:a8:4c:39:eb:6e:12:8e:51:0f:76:02:6e:9f:28:
e9:0d:08:9a:72:97:95:0a:57:47:b8:db:7e:ba:b9:
13:b4:5a:49:f6:bb:f5:f0:0e:40:06:cc:25:e9:70:
27:31:7c:f4:eb:cf:e8:54:2e:62:2c:2a:3f:3f:35:
07:b5:ff:9d:3e:74:03:2d:82:5e:84:8b:11:b0:c5:
26:9c:fd:0c:15:e9:72:52:a7:c5:65:03:00:ef:5c:
f9:70:61:66:d1:f2:a3:f3:38:ca:59:11:54:7d:11:
d8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:45:E6:91:77:CC:37:DE:AE:9C:61:7D:E7:50:F8:45:40:19:9B:BB
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/rkXmkXfMN96unGF951D4RUAZm7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:2e0::/44
Signature Algorithm: sha256WithRSAEncryption
2d:ca:1f:e5:66:1d:2d:38:95:7c:16:ef:0d:57:24:4c:4a:41:
ae:ed:55:45:6b:29:38:5f:8e:7f:30:e0:9d:ef:86:2e:5f:8e:
83:a8:50:11:ee:17:62:c1:4c:d9:3a:89:df:7a:04:7a:92:65:
bd:fd:a5:b8:68:0a:81:72:d9:ca:e9:d2:2c:3f:95:84:ee:c4:
d0:7c:63:b7:6f:2c:e9:2f:05:33:05:0d:59:a8:fe:fc:bf:80:
6b:57:69:57:78:5f:9a:b7:31:e2:c5:ae:5c:be:b2:2c:9a:66:
9f:fc:c2:38:b9:85:05:16:81:67:86:8a:8a:a6:fa:1d:2f:72:
29:0b:96:81:cf:0a:cf:c7:34:f1:36:a5:e3:7e:39:a8:e8:26:
33:e1:e4:d0:fd:a6:51:e0:37:93:a4:d3:c6:00:bb:a1:42:f6:
b4:0f:44:ff:67:ca:33:1f:1d:de:ae:82:4f:e0:89:0e:cc:58:
fe:5e:a8:d6:33:5e:da:9a:88:d6:51:f6:55:e0:bb:fe:98:b6:
0c:91:7a:09:cb:0d:0a:ea:d2:25:43:f3:c7:67:db:4f:fd:cd:
3b:5a:f4:0e:ff:a4:a7:00:3c:d0:86:fb:c7:c6:d8:8b:28:11:
83:45:88:42:9c:c9:40:5f:a7:99:23:03:93:72:0e:ea:bc:67:
d0:91:20:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:58:43 2026 by rpki-client