Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/x6odgv4GBx7koYM0lfehBGyNvyM.roa
File: x6odgv4GBx7koYM0lfehBGyNvyM.roa (raw, json)
Hash identifier: hiMJKGkjwzFZrEmaNtZ57Yu5ODoeuShCdiRgVeJUTjM=
Subject key identifier: C7:AA:1D:82:FE:06:07:1E:E4:A1:83:34:95:F7:A1:04:6C:8D:BF:23
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F23683A4E85B424442DF2F4E373B4F961
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/x6odgv4GBx7koYM0lfehBGyNvyM.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198474
IP address blocks: 2a10:4646:340::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3a:4e:85:b4:24:44:2d:f2:f4:e3:73:b4:f9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7aa1d82fe06071ee4a1833495f7a1046c8dbf23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:8d:54:d1:b7:29:e8:b5:07:15:74:e0:34:
a5:f1:02:bd:4f:31:9f:bf:80:51:fe:c5:2d:0b:30:
aa:fb:3d:98:d8:9c:9a:e0:b5:53:aa:d4:d7:63:88:
35:45:9e:70:3a:3f:ec:46:5c:8c:23:66:d2:ef:a6:
61:3a:1e:de:78:da:04:a6:dc:cf:f2:4f:68:83:b3:
96:27:6f:c2:cc:e0:c6:10:07:44:4a:fe:1f:92:55:
a6:c9:83:ab:da:23:e8:77:62:53:b0:75:f3:40:b1:
15:c2:bb:55:58:6f:f3:25:b7:8a:19:eb:4a:b2:11:
7e:d6:67:48:36:1c:7b:a4:8c:88:98:7f:87:0c:00:
45:3a:49:2f:99:47:43:ad:b3:c2:a0:a5:15:00:5c:
4b:16:b9:6e:53:1b:3c:a5:52:6d:84:ad:11:6e:45:
87:9d:87:a5:21:d4:f6:ad:33:9c:f4:f5:a2:1d:7d:
4d:45:bb:03:25:bf:1f:66:98:23:ca:50:6d:31:a2:
39:1d:b5:00:49:f2:d1:37:72:36:55:cb:75:1c:97:
65:05:87:48:a5:80:a6:55:07:89:9b:ed:aa:37:78:
32:aa:12:15:6c:88:17:c9:c7:05:0b:da:58:eb:cd:
ab:9e:7b:d6:e0:a1:9b:ae:6b:44:66:a9:4f:64:a0:
79:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AA:1D:82:FE:06:07:1E:E4:A1:83:34:95:F7:A1:04:6C:8D:BF:23
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/x6odgv4GBx7koYM0lfehBGyNvyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:340::/44
Signature Algorithm: sha256WithRSAEncryption
b0:e6:d7:c8:c4:81:01:5d:e4:23:5d:9d:2e:c1:a1:90:47:89:
b5:8f:ad:e9:83:a6:4a:5a:36:30:a3:6e:88:09:de:92:78:5b:
8a:1c:30:06:45:3f:e5:26:2b:b2:10:a8:71:91:1b:ea:b9:76:
64:8a:e6:45:aa:f1:cf:55:0a:cb:8f:63:cb:d8:19:15:67:ff:
bb:7a:35:c4:0b:ae:51:4c:d8:7f:e2:38:d4:24:ef:a5:88:ae:
d2:2a:64:8a:10:36:b0:09:9a:2c:5b:a2:03:db:0d:7a:1b:0b:
7b:fe:c8:79:77:ee:a0:07:c2:3d:8d:c8:89:1c:6b:8b:9c:8f:
64:2e:2e:6a:a8:49:ec:c8:1c:e2:51:ff:3f:f7:74:b7:d2:44:
ea:6a:3a:3d:f8:0a:6d:a0:0a:1a:13:f0:b5:16:40:b5:75:9c:
7b:cc:46:87:ae:17:a0:2d:13:5c:3a:38:e4:46:62:4a:b0:10:
dc:c6:a3:c5:35:19:02:38:4b:48:70:b6:8b:60:a0:2d:ed:36:
4e:03:6b:39:a0:c8:18:6f:53:53:ee:20:bd:f4:ed:b4:46:17:
8d:6a:ad:6e:ad:46:63:fe:95:28:8a:84:e2:8d:3d:06:b6:4d:
1d:5a:4d:7a:48:59:ac:8d:09:5c:41:22:92:7d:d1:f3:cd:c3:
f0:af:a0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 16:01:13 2026 by rpki-client