Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/w2Zllddsp3ETUfwlekfQFAQqlxo.roa
File: w2Zllddsp3ETUfwlekfQFAQqlxo.roa (raw, json)
Hash identifier: Om10yXY3nPE/Bz/T/FmfqE3jNsjHIMUKT6SBgFk16bM=
Subject key identifier: C3:66:65:95:D7:6C:A7:71:13:51:FC:25:7A:47:D0:14:04:2A:97:1A
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F236840F1BAEC669084A734BC101A68BC
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/w2Zllddsp3ETUfwlekfQFAQqlxo.roa
Signing time: Thu 02 Jul 2026 15:17:42 +0000
ROA not before: Thu 02 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205021
IP address blocks: 2a10:4646:1e0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:40:f1:ba:ec:66:90:84:a7:34:bc:10:1a:68:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3666595d76ca7711351fc257a47d014042a971a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1f:f3:a7:c9:38:d4:aa:18:13:a6:fe:e4:07:
6f:7d:b5:58:0f:45:00:ed:10:71:32:73:61:3f:a5:
51:09:5c:13:83:b2:0c:38:06:16:0e:2f:90:96:6e:
23:8f:46:c8:d0:00:77:9a:0f:96:0b:24:21:dd:ed:
97:4f:5a:f6:22:94:fd:eb:5d:ec:35:5f:c7:5a:1b:
42:fd:d0:14:35:82:af:8d:50:11:99:a2:82:5b:3e:
7a:19:60:ba:ca:fc:2c:50:21:cc:4a:d1:5d:61:2d:
7f:87:12:d2:73:0d:3a:22:1f:e8:0f:8a:55:77:db:
6f:0f:3d:bb:44:f8:ca:c4:1a:98:a5:ab:3e:b2:79:
5d:0d:8b:e4:16:0c:0b:b5:5f:e8:86:70:7e:d0:ce:
e3:49:a6:1f:fd:5b:3b:0a:78:27:90:40:3d:94:7f:
2c:98:28:88:b2:f4:70:53:28:d4:8c:c5:d4:af:65:
0a:e0:44:25:66:80:63:aa:c7:cf:fe:58:45:2d:a2:
3b:a8:49:1a:35:a4:2b:c8:f3:75:75:25:1c:e8:30:
3a:b9:26:73:af:6c:87:cf:aa:36:13:31:ea:c3:fe:
07:0c:59:c8:b0:57:3e:4d:88:ae:64:4e:f3:ba:51:
68:9c:c9:b5:30:72:5e:90:34:30:21:f7:15:90:58:
f1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:66:65:95:D7:6C:A7:71:13:51:FC:25:7A:47:D0:14:04:2A:97:1A
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/w2Zllddsp3ETUfwlekfQFAQqlxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:1e0::/44
Signature Algorithm: sha256WithRSAEncryption
0b:7f:7c:2f:23:81:df:9d:e0:aa:f4:8a:d4:b2:2a:f0:ba:bc:
ce:e5:b4:22:42:eb:1d:77:69:00:57:08:40:04:c7:0f:71:3e:
83:ad:81:0a:9a:0e:7b:bb:2f:05:91:bc:74:11:ae:58:32:fc:
a0:37:26:62:4f:d7:28:5b:55:0d:4d:05:78:6d:7d:96:46:0f:
0e:0e:a8:39:44:4a:cb:3b:80:a0:1b:18:97:ab:79:f3:7f:6b:
b3:5c:2e:0f:ce:c3:1c:b0:28:5d:b5:42:79:21:cd:77:7e:19:
22:7d:f5:76:43:ff:2b:2f:71:51:8e:45:e8:34:ae:4d:cd:d0:
0a:30:af:54:74:26:33:72:e9:26:f7:cc:59:dc:d0:cb:f5:65:
11:8f:81:3f:a3:a0:48:fb:ba:03:95:52:d2:f2:e6:33:11:ac:
cf:e2:9e:cc:fc:04:c3:78:36:4b:ce:8f:d2:ff:ca:22:07:92:
49:5a:36:f9:a0:6b:d1:48:02:4c:1c:95:0c:88:ed:b9:a6:ec:
b6:06:67:46:33:6b:76:4a:34:12:81:71:4d:0a:5b:38:5c:96:
b3:c2:35:31:6b:c8:7e:18:d5:45:96:db:64:6e:96:23:78:cd:
07:38:d7:93:94:63:f1:88:85:35:e9:8f:84:af:2e:f6:94:15:
8d:35:01:c8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaEDxuuxmkISnNLwQGmi8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkY2M0OTUyYjZmM2E4Y2M3YzgxNjMwZDNlODNiMmE5ODI3
MTYzZjYwHhcNMjYwNzAyMTUxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzY2NjU5NWQ3NmNhNzcxMTM1MWZjMjU3YTQ3ZDAxNDA0MmE5NzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5R/zp8k41KoYE6b+5AdvfbVYD0UA
7RBxMnNhP6VRCVwTg7IMOAYWDi+Qlm4jj0bI0AB3mg+WCyQh3e2XT1r2IpT9613s
NV/HWhtC/dAUNYKvjVARmaKCWz56GWC6yvwsUCHMStFdYS1/hxLScw06Ih/oD4pV
d9tvDz27RPjKxBqYpas+snldDYvkFgwLtV/ohnB+0M7jSaYf/Vs7CngnkEA9lH8s
mCiIsvRwUyjUjMXUr2UK4EQlZoBjqsfP/lhFLaI7qEkaNaQryPN1dSUc6DA6uSZz
r2yHz6o2EzHqw/4HDFnIsFc+TYiuZE7zulFonMm1MHJekDQwIfcVkFjxMwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMNmZZXXbKdxE1H8JXpH0BQEKpcaMB8GA1UdIwQY
MBaAFH3MSVK286jMfIFjDT6DsqmCcWP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmN4SlVyYnpxTXg4Z1dNTlBvT3lxWUp4WV9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt
YWU5MjgzZTc5NjRlLzEvdzJabGxkZHNwM0VUVWZ3bGVrZlFGQVFxbHhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl
LzEvZmN4SlVyYnpxTXg4Z1dNTlBvT3lxWUp4WV9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgHg
MA0GCSqGSIb3DQEBCwUAA4IBAQALf3wvI4HfneCq9IrUsirwurzO5bQiQusdd2kA
VwhABMcPcT6DrYEKmg57uy8Fkbx0Ea5YMvygNyZiT9coW1UNTQV4bX2WRg8ODqg5
RErLO4CgGxiXq3nzf2uzXC4PzsMcsChdtUJ5Ic13fhkiffV2Q/8rL3FRjkXoNK5N
zdAKMK9UdCYzcukm98xZ3NDL9WURj4E/o6BI+7oDlVLS8uYzEazP4p7M/ATDeDZL
zo/S/8oiB5JJWjb5oGvRSAJMHJUMiO25puy2BmdGM2t2SjQSgXFNCls4XJazwjUx
a8h+GNVFlttkbpYjeM0HONeTlGPxiIU16Y+Ery72lBWNNQHI
-----END CERTIFICATE-----
Generated at Sat Jul 11 15:56:28 2026 by rpki-client