Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/djMRtN4n-vW3YMUBEBvNiIfj40I.roa
File: djMRtN4n-vW3YMUBEBvNiIfj40I.roa (raw, json)
Hash identifier: ltFpunT0BizmulOUlJUDwwLOMBG9WmZoGqBwiKtC7gU=
Subject key identifier: 76:33:11:B4:DE:27:FA:F5:B7:60:C5:01:10:1B:CD:88:87:E3:E3:42
Certificate issuer: /CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Certificate serial: 019FD1E5F19D1F4A88DD435CBD6303DF05DA
Authority key identifier: 7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/djMRtN4n-vW3YMUBEBvNiIfj40I.roa
Signing time: Wed 05 Aug 2026 12:28:55 +0000
ROA not before: Wed 05 Aug 2026 12:28:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219051
IP address blocks: 2a0a:87c0:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:e5:f1:9d:1f:4a:88:dd:43:5c:bd:63:03:df:05:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Validity
Not Before: Aug 5 12:28:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=763311b4de27faf5b760c501101bcd8887e3e342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:65:2b:f4:f8:fd:cd:9f:65:67:14:b3:f8:
73:b4:27:f5:98:ed:1d:35:07:5f:5f:b1:99:87:81:
f5:1c:36:54:81:db:d0:12:c1:d1:d0:1f:9b:db:9f:
fd:ab:67:53:c0:cf:4c:28:3b:3c:a5:5c:5f:89:ba:
63:73:36:b2:6a:cd:3d:bf:c5:a5:01:2a:4a:62:d0:
1c:2f:8d:5a:30:e6:fc:1f:64:80:d1:5b:68:7c:a2:
56:12:64:a5:cb:1d:54:79:32:3d:0a:8e:ad:81:aa:
9b:67:85:9d:0b:b5:84:0d:e1:fb:5c:a2:22:c2:02:
6c:81:84:ae:08:7f:47:51:16:56:85:60:bb:b4:85:
ab:4f:ca:ac:c8:63:29:fa:07:2b:21:c5:ec:6a:aa:
b5:cf:ee:e8:bf:dc:75:25:6f:2a:ef:8f:4f:2f:3b:
c9:2f:fa:fd:7b:02:60:64:ff:7f:54:b0:91:fd:7f:
bf:ee:b2:9f:b2:08:49:e8:eb:e6:3e:67:af:0d:29:
bf:8b:98:d5:be:96:a8:84:08:1f:36:9e:13:33:76:
ef:b9:52:07:ce:ae:36:d6:75:96:82:31:04:f2:92:
e3:5e:44:be:dc:32:66:55:4c:76:98:f6:24:e8:63:
1f:40:bb:5f:d9:e6:e1:3f:83:5b:e8:8f:4f:8d:54:
c8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:33:11:B4:DE:27:FA:F5:B7:60:C5:01:10:1B:CD:88:87:E3:E3:42
X509v3 Authority Key Identifier:
keyid:7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/djMRtN4n-vW3YMUBEBvNiIfj40I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:87c0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
2e:c6:42:bd:c1:e9:bd:f6:a0:76:95:0b:2d:2e:0d:a9:19:65:
30:cc:54:c3:a7:ec:5e:02:5a:d7:7a:94:cc:ca:3e:20:b9:4b:
6c:95:db:fd:8a:95:5b:33:64:6c:16:13:91:19:f7:35:74:c5:
d5:56:73:09:62:d6:57:e2:ce:a7:9f:02:29:7a:a5:b0:e7:24:
a2:c7:6a:d3:9d:dc:76:ab:88:26:a2:28:ae:db:ae:84:72:95:
18:3d:b1:c1:47:59:8d:7b:c4:13:3b:64:e1:20:c9:83:81:f7:
41:10:48:08:7a:5b:ec:3e:c2:1a:83:c3:92:fe:b7:c7:f7:3a:
4f:8b:9a:c5:bc:64:a7:43:3c:21:44:ee:ba:6c:03:e6:2d:b3:
90:5b:c3:2d:ec:f1:00:a3:72:38:d5:a2:ec:5b:95:a5:35:28:
1f:33:29:53:ac:5d:2a:99:11:e7:e1:22:ee:db:b0:9a:e5:f0:
bf:b8:0d:95:21:93:be:c2:7f:11:8d:c9:02:5a:62:29:5d:49:
a4:db:31:50:77:0f:8d:df:f6:2c:65:5d:7c:34:bb:8f:7e:ab:
5c:b4:c0:a6:5b:b5:a3:9e:fe:fc:69:81:b8:8c:44:46:8b:f8:
fb:93:5d:f1:08:a2:65:81:56:45:9f:5d:a0:55:13:51:be:a5:
90:a0:14:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:33:59 2026 by rpki-client