Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/0webfAWJBJhCymTfG1VV_l-6GdE.roa
File: 0webfAWJBJhCymTfG1VV_l-6GdE.roa (raw, json)
Hash identifier: CU8VIzZUokgtCWuCy3VjIwnuAfnY5SJwkztl+JWVmLk=
Subject key identifier: D3:07:9B:7C:05:89:04:98:42:CA:64:DF:1B:55:55:FE:5F:BA:19:D1
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 019F50F382D80107114E3EE3BABB912B0008
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/0webfAWJBJhCymTfG1VV_l-6GdE.roa
Signing time: Sat 11 Jul 2026 11:32:43 +0000
ROA not before: Sat 11 Jul 2026 11:32:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151338
IP address blocks: 2a13:a5c7:3700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:50:f3:82:d8:01:07:11:4e:3e:e3:ba:bb:91:2b:00:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jul 11 11:32:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3079b7c0589049842ca64df1b5555fe5fba19d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:77:3d:9b:3a:94:8a:40:c8:6f:14:51:86:
87:cd:3a:92:d4:bc:06:6c:39:70:91:7f:da:79:74:
8e:16:90:98:56:7d:ac:a7:f4:b9:be:0b:23:1a:03:
b5:87:b8:e8:53:e5:f4:69:be:38:c5:d0:49:21:fe:
19:d1:38:f6:15:af:66:23:68:fa:2e:fb:18:c8:4c:
41:c1:02:e9:ab:14:1e:d9:3a:53:c2:8d:0e:6a:fc:
07:c4:cc:cc:ed:0e:f1:4c:98:3e:40:e4:66:63:a2:
13:96:89:df:03:77:63:d8:80:38:92:6b:e3:24:65:
61:7e:ee:c6:1f:51:40:69:13:6a:56:f7:f9:78:70:
ce:a8:85:6c:5a:da:55:3e:71:fe:e7:f4:24:7e:d0:
98:50:c8:03:88:49:91:7d:06:4f:7b:9e:4d:9d:04:
79:f5:eb:90:83:e3:0f:98:8b:6f:0b:0d:3c:4c:68:
d3:a9:74:c1:90:06:00:10:f0:75:ea:f5:41:48:e5:
a6:11:21:8d:b9:22:38:83:f3:84:62:de:39:ba:3d:
03:72:de:8d:d9:f3:19:1a:87:20:e6:ff:8a:33:2a:
fd:a6:b3:0d:08:54:cd:ed:24:ba:72:99:21:f2:04:
8e:d0:09:87:9d:6a:a4:09:89:f5:97:4a:42:77:58:
ad:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:07:9B:7C:05:89:04:98:42:CA:64:DF:1B:55:55:FE:5F:BA:19:D1
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/0webfAWJBJhCymTfG1VV_l-6GdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:3700::/40
Signature Algorithm: sha256WithRSAEncryption
20:68:0a:ef:91:50:7c:40:fa:13:8e:b5:29:6a:70:5d:4d:aa:
ca:c3:44:ab:76:bb:9a:6c:5a:9d:2f:78:86:85:85:df:f4:1a:
b4:19:4a:5f:50:3f:64:d4:c7:0c:8f:f0:70:cc:e3:c2:ba:c2:
5b:d2:01:a6:50:a7:a2:92:e7:06:22:ea:cc:3f:58:ac:86:9c:
56:1f:48:f6:98:45:61:5b:a2:72:c6:b5:88:83:c9:1d:d7:95:
c1:aa:fe:d0:a4:a9:64:5e:43:1c:10:4b:a4:e9:90:26:26:b8:
d5:16:e3:52:ee:9e:25:ef:1f:95:c3:a6:c4:c1:3c:d8:2e:4e:
8a:1a:e7:de:d8:46:d8:a2:27:e5:03:3d:fb:c7:d5:00:3f:9f:
23:5e:1e:96:45:69:9c:70:b5:bf:b9:f1:c8:df:92:bb:5f:3e:
6d:d7:6b:e8:03:34:eb:8d:ec:b9:93:d0:c4:a3:21:80:ea:7a:
98:b7:95:1d:08:f8:c3:2e:e9:65:0a:b7:23:58:48:e9:6f:80:
2a:49:97:c5:75:d4:6e:21:a6:67:2b:5a:14:81:51:a5:22:20:
44:aa:91:fa:1b:88:27:d9:a2:32:03:d4:95:88:19:b0:6a:be:
5e:66:d8:b3:a9:9e:d6:e5:af:b8:59:7b:6c:8d:9c:d5:82:d7:
f6:2b:ba:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 06:45:55 2026 by rpki-client