Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/uT3QMrwiz8DLUpUPlgWNg8JF0CI.roa
File: uT3QMrwiz8DLUpUPlgWNg8JF0CI.roa (raw, json)
Hash identifier: OuyxmyR7qFi2pZrcmF4ecIE7EgJUQ6+HiBKeZV/ae5E=
Subject key identifier: B9:3D:D0:32:BC:22:CF:C0:CB:52:95:0F:96:05:8D:83:C2:45:D0:22
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F23683B871CB7DDA3BB281EA1A7411D1A
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/uT3QMrwiz8DLUpUPlgWNg8JF0CI.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198596
IP address blocks: 2a10:4646:320::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3b:87:1c:b7:dd:a3:bb:28:1e:a1:a7:41:1d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b93dd032bc22cfc0cb52950f96058d83c245d022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b7:de:d8:17:dd:f1:75:71:56:d1:1b:5c:9a:
f3:a9:74:f1:a2:b1:4e:8e:f7:bf:7f:6b:5c:79:e5:
cc:08:da:05:c3:6b:87:08:c3:61:e3:1d:ec:74:82:
8e:39:28:d0:97:d0:58:66:a5:e3:8b:05:b8:12:c6:
9a:1a:a9:20:7d:00:df:83:e1:27:61:20:c7:f5:72:
21:13:0f:a4:17:02:39:bd:6c:84:57:2e:b3:e8:7c:
c9:de:2b:72:5f:bf:2c:9c:88:a0:76:ef:d3:ff:e2:
f1:a4:af:2a:e6:1e:67:2c:60:d6:20:16:e9:5b:7d:
3c:e7:f1:e5:e2:ad:41:06:d5:d6:b3:f3:47:23:03:
0f:5e:c9:56:06:d4:25:e5:b1:3e:4a:76:af:f1:96:
74:e2:98:1d:06:65:51:a0:58:16:6c:39:4a:10:56:
1f:21:c6:d8:6f:a5:82:77:d6:8a:2a:e8:85:17:b9:
69:37:c5:bb:74:0a:29:1f:49:7d:71:e0:db:cd:16:
b1:c9:da:d6:26:cc:32:89:90:21:4d:31:c0:1c:cd:
db:26:fb:4c:56:05:5e:ab:24:fd:40:9e:a0:58:91:
3e:ae:31:ab:98:2b:fe:e9:d7:f8:b3:7f:4c:8c:a1:
04:d1:0f:63:a3:a4:70:75:3b:4f:3b:45:d7:53:cf:
a1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3D:D0:32:BC:22:CF:C0:CB:52:95:0F:96:05:8D:83:C2:45:D0:22
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/uT3QMrwiz8DLUpUPlgWNg8JF0CI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:320::/44
Signature Algorithm: sha256WithRSAEncryption
23:b1:b4:6a:1a:7a:00:d0:2f:6e:a6:b3:d8:3c:0c:68:39:05:
08:af:24:a7:ec:1a:46:2a:ec:d8:01:d9:9d:70:99:2c:86:b5:
30:8a:05:dc:f1:01:e8:9f:76:81:04:7d:58:64:b4:be:64:e5:
19:30:70:0c:9c:c9:02:fd:a1:a6:57:26:fc:9d:19:30:02:66:
af:81:8c:8c:ed:ca:6b:5f:6c:c2:04:9b:00:3b:7b:9a:59:73:
bf:4a:a5:45:5c:8c:19:3c:38:1a:6c:18:cf:f4:32:c7:a4:7b:
57:ba:3f:c9:9e:4f:15:d7:0e:31:44:0d:6f:be:2f:94:19:3d:
b8:dc:5c:40:3f:d2:3e:a9:fd:ca:22:b7:37:26:67:3a:67:84:
85:37:0b:de:41:e6:45:8c:50:06:20:74:c1:52:c1:c4:8d:d8:
e6:79:ef:b4:24:9f:f1:a8:c3:17:68:11:6d:bd:b2:06:d0:6e:
f7:62:6d:88:76:b0:27:3d:98:63:ae:72:54:a6:0b:99:1a:c1:
4b:e9:60:af:ab:17:de:91:4b:c2:d8:f2:22:78:af:e4:6b:9f:
7e:b8:87:cc:08:82:71:11:79:79:1f:2b:82:49:2f:28:e0:8d:
07:7c:81:5c:55:21:a4:33:0b:02:f2:c0:38:26:e6:ae:69:e1:
f3:49:00:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:57:55 2026 by rpki-client