Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/x5guuAosMFmq5eJvD3KWfyibJEo.roa
File: x5guuAosMFmq5eJvD3KWfyibJEo.roa (raw, json)
Hash identifier: 0TT2fn2DQ/oQeYAJOgp14i1XmJQ6hYMiNIM3lUNvqpE=
Subject key identifier: C7:98:2E:B8:0A:2C:30:59:AA:E5:E2:6F:0F:72:96:7F:28:9B:24:4A
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F23684291BA64C97943A2E6A7DF13EBAE
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/x5guuAosMFmq5eJvD3KWfyibJEo.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208796
IP address blocks: 2a10:4646:270::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:42:91:ba:64:c9:79:43:a2:e6:a7:df:13:eb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7982eb80a2c3059aae5e26f0f72967f289b244a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:37:5f:a8:eb:5b:a8:78:52:0d:73:a3:4b:
59:6b:5e:29:b0:80:dc:00:1b:f6:c0:91:50:97:4a:
a3:d2:57:15:98:8a:51:42:8c:1e:e1:25:f9:52:84:
e4:a2:63:95:57:8c:7e:33:fc:c0:42:e6:69:a0:51:
62:2f:08:37:96:6f:43:e4:0d:38:f2:36:e3:79:ba:
1f:16:39:16:ce:b8:29:97:45:93:b5:47:02:3f:8c:
af:02:00:16:2d:c6:ce:d8:e6:6d:00:ea:1a:58:0c:
71:81:c8:dd:dc:e1:25:67:12:d0:a8:21:18:59:35:
c2:f1:c3:a3:af:01:9e:77:c3:fd:ed:cc:34:bc:e0:
fc:60:9e:36:72:32:8b:05:79:6e:8b:0c:3e:54:8f:
6a:b7:ea:bc:cd:a4:39:bf:18:28:9f:64:ce:61:18:
0a:c9:76:ae:9e:87:98:c5:a2:a5:d7:ec:5a:d5:6f:
80:be:7c:33:d3:87:44:3b:53:de:4a:aa:04:4b:c0:
2a:73:8e:51:bc:e0:d5:ed:14:4f:f6:0d:7e:36:43:
49:2d:29:ed:0b:7f:ba:44:0c:79:77:c3:23:49:d2:
a9:f7:5e:59:ad:91:29:50:99:21:44:db:1e:46:73:
a5:c3:3c:61:95:40:24:f2:8e:47:14:d8:dc:6c:1b:
e2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:98:2E:B8:0A:2C:30:59:AA:E5:E2:6F:0F:72:96:7F:28:9B:24:4A
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/x5guuAosMFmq5eJvD3KWfyibJEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:270::/44
Signature Algorithm: sha256WithRSAEncryption
7c:9f:3c:4c:a3:16:be:2e:27:11:bc:9e:64:63:c4:71:84:9d:
3d:22:d0:90:c9:73:bf:3c:31:63:1a:a9:5d:af:73:b2:ff:47:
89:33:d9:01:aa:68:3d:af:3f:ad:a4:ad:ed:d9:44:54:1c:24:
cf:be:c8:b0:90:a2:6f:e3:71:d7:52:a9:19:96:af:f4:a7:d6:
7c:0b:d5:c6:12:38:1f:77:f1:3d:e8:48:7f:57:82:14:75:cd:
32:d6:1f:51:74:5b:25:a6:20:96:f1:2e:97:8b:64:28:79:a7:
2a:c2:cb:1b:0d:c5:0c:3f:6f:b9:66:3c:47:a9:15:04:b4:82:
83:95:76:0e:2e:3e:5c:56:a6:b5:ff:b0:c1:b9:58:ed:5a:83:
a9:6b:39:2f:0b:59:c8:e3:f9:f4:49:ba:d2:9a:97:ff:67:2b:
c0:1c:e0:74:a1:aa:bb:d0:c3:42:ee:f5:a0:87:21:9c:8d:f5:
dc:66:fd:73:23:49:95:27:39:15:3a:aa:6b:77:91:c6:34:56:
2f:50:4c:20:58:c8:1f:09:3d:dd:ea:06:73:1d:5e:38:9d:04:
6e:cc:01:ed:cb:ff:f2:cc:07:9c:69:1c:8a:00:d3:be:a2:11:
54:c9:56:d0:22:4b:f7:e0:5c:4b:d4:cc:4a:1c:bf:bd:0d:0d:
29:20:32:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 16:00:58 2026 by rpki-client