Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/wAZtAE_3By_Xf-nupeBBOmp5mhY.roa
File: wAZtAE_3By_Xf-nupeBBOmp5mhY.roa (raw, json)
Hash identifier: hc/J/aEXc6fO3eZxYzWtgyBj0rsf+xPtP36ty39IdFA=
Subject key identifier: C0:06:6D:00:4F:F7:07:2F:D7:7F:E9:EE:A5:E0:41:3A:6A:79:9A:16
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F23683E88E631DB85583EB18FC176C031
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/wAZtAE_3By_Xf-nupeBBOmp5mhY.roa
Signing time: Thu 02 Jul 2026 15:17:42 +0000
ROA not before: Thu 02 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200063
IP address blocks: 2a10:4646:290::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3e:88:e6:31:db:85:58:3e:b1:8f:c1:76:c0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0066d004ff7072fd77fe9eea5e0413a6a799a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:41:7d:f2:46:f3:58:cc:43:0f:11:24:3a:
00:07:c3:66:11:00:ac:dd:33:4e:61:a6:1d:3b:83:
48:6b:5e:af:bb:af:c8:ac:f2:3f:49:85:43:2b:4c:
d3:ce:bd:7a:3a:19:1d:20:b5:40:59:4c:20:ff:64:
2f:8a:17:8e:5d:09:f1:7f:26:4e:a1:2e:22:32:58:
82:d9:18:2c:1e:0c:c8:8f:90:7b:d8:6e:bb:35:32:
bc:0e:fd:dc:50:69:c9:26:61:1b:9a:fd:1d:62:10:
cd:fc:9b:bd:d3:e6:19:b6:df:05:ab:25:40:7f:bf:
c0:32:e4:c6:37:6f:51:3f:40:e5:50:06:92:df:ea:
ca:c3:90:63:6e:60:c4:06:03:e1:31:25:cd:3e:eb:
c6:c6:84:dc:2c:c2:b3:de:e1:07:e8:ed:37:3e:cf:
48:fd:79:af:05:30:03:4a:a9:45:2a:e1:d2:b0:5a:
f1:53:51:8e:fd:bf:1e:d2:c5:57:cb:f6:f5:68:af:
a2:02:ca:c5:95:86:1f:8a:7f:eb:89:95:0d:d6:8d:
6f:38:a5:58:00:4a:dd:fb:ec:36:a6:09:72:50:01:
ac:f6:d6:37:bb:45:27:7d:a6:78:44:8c:97:e7:af:
ed:22:4e:82:b3:6a:fa:ae:c1:ab:af:a6:86:ee:97:
b2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:06:6D:00:4F:F7:07:2F:D7:7F:E9:EE:A5:E0:41:3A:6A:79:9A:16
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/wAZtAE_3By_Xf-nupeBBOmp5mhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:290::/44
Signature Algorithm: sha256WithRSAEncryption
3e:f8:b6:49:54:0e:fe:02:5c:b8:a7:6c:82:f9:99:66:50:59:
bb:fa:68:66:02:73:8b:90:61:1e:d0:e4:6a:1b:b8:fe:54:61:
35:80:5c:db:5c:3c:a0:8f:99:81:ce:36:13:99:51:f0:33:9a:
2a:93:5e:9a:f6:02:3d:8f:8a:95:7a:66:84:b6:c7:94:0d:0f:
51:2f:e8:1b:11:b4:ea:87:6c:72:1c:91:83:70:ed:17:e0:bc:
21:cb:b0:4b:08:44:a6:d8:58:64:a5:2d:d2:1d:a9:de:ed:1d:
9a:b8:b6:0b:5f:b2:26:d5:fd:59:cf:a1:da:8c:f8:74:9a:c3:
94:78:4e:87:28:77:75:88:f4:92:86:22:91:20:14:45:55:7d:
4e:1b:74:06:fa:83:1d:1d:0a:5a:21:77:8e:1b:f2:f4:89:8f:
9a:62:fa:be:4a:57:71:33:27:21:ea:f6:7c:94:8a:69:62:26:
b7:88:90:2c:0b:76:66:6f:53:82:92:ad:9a:43:5b:de:f7:fc:
0d:b2:46:71:99:0e:05:5c:3c:58:d9:46:9f:fa:70:b4:e0:ee:
77:f2:6f:67:24:0f:f3:cc:48:cc:3f:07:0c:78:c3:1d:90:0a:
0c:8f:a1:eb:e0:f5:e6:df:25:4a:b1:6f:08:82:87:c2:30:12:
eb:22:fe:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 13:46:57 2026 by rpki-client