Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/i-hpQGQD_olSPkbON4yJ260Gn4k.roa
File: i-hpQGQD_olSPkbON4yJ260Gn4k.roa (raw, json)
Hash identifier: VMX6kwlqgvD1HXkveYx6V7xEhwbg/d6QkZsoa+esubE=
Subject key identifier: 8B:E8:69:40:64:03:FE:89:52:3E:46:CE:37:8C:89:DB:AD:06:9F:89
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 019F70D8A826BA57369BD84CDC63E0CA89F4
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/i-hpQGQD_olSPkbON4yJ260Gn4k.roa
Signing time: Fri 17 Jul 2026 16:11:14 +0000
ROA not before: Fri 17 Jul 2026 16:11:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197213
IP address blocks: 2a13:a5c7:3700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:d8:a8:26:ba:57:36:9b:d8:4c:dc:63:e0:ca:89:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jul 17 16:11:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8be869406403fe89523e46ce378c89dbad069f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:f1:1f:93:ed:3a:03:a0:bd:06:fd:91:e9:
f8:fc:52:19:7d:ee:11:ce:67:e9:f0:29:fc:14:c6:
64:6c:e8:7b:4b:ad:a3:09:7a:1c:db:59:eb:32:1b:
ce:1b:27:d1:5d:87:3a:84:90:17:77:46:1e:5f:59:
bc:b6:7c:68:f6:42:2c:64:90:c9:dc:83:37:d2:3e:
11:8c:07:6d:30:78:56:fb:db:6b:b9:24:fa:dc:ee:
92:78:07:e8:2d:f7:21:7a:49:7f:7f:7b:2c:03:e0:
a2:9b:76:a8:b8:70:83:08:87:bc:c0:b3:fe:21:b6:
11:86:ca:00:77:6a:59:bd:a7:9d:e1:d4:b8:2d:45:
e1:2c:c0:b8:05:e6:31:91:8f:7d:50:f0:da:44:3a:
c4:7c:ec:9a:8b:96:85:c0:65:4c:fc:29:ab:17:45:
74:3b:4b:1e:b8:9c:21:77:11:76:74:6f:77:07:70:
fe:af:3b:40:96:a6:ee:79:bc:3b:b7:27:dc:e7:9e:
03:b3:39:e0:95:1b:59:f2:73:e1:c8:57:f7:e6:bf:
be:24:fb:5e:52:ea:40:bb:c5:61:6c:9e:a5:d5:81:
fc:44:dc:58:2f:10:12:4a:1e:c5:2a:3f:fa:4c:bd:
13:8a:0c:c7:31:5b:16:34:c6:e9:d3:43:ec:d8:60:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E8:69:40:64:03:FE:89:52:3E:46:CE:37:8C:89:DB:AD:06:9F:89
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/i-hpQGQD_olSPkbON4yJ260Gn4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:3700::/40
Signature Algorithm: sha256WithRSAEncryption
2b:4e:e1:e4:c1:dd:d2:52:a5:a0:be:fb:d1:69:d2:43:da:3e:
13:de:0c:79:df:6e:a9:67:94:30:9a:3c:8b:7d:97:83:cd:b2:
9a:22:5c:dd:80:e7:8a:2e:45:74:4f:ba:ac:05:74:18:33:ed:
e2:7f:72:8c:12:c2:47:cb:fd:22:ae:67:9a:59:56:5e:f7:cf:
32:b4:88:81:24:e5:c6:46:1e:fc:27:79:f2:de:30:57:55:53:
e9:17:58:4a:30:1f:f4:21:22:f2:dc:f6:74:08:17:a9:53:c0:
2f:fc:9c:ca:b5:33:e3:b3:34:05:fc:a2:d4:60:df:f9:66:a6:
ef:02:99:3e:ac:63:a6:41:73:a5:7b:37:41:29:e4:86:96:5d:
d7:0b:77:57:b5:da:4c:6e:2a:16:13:1d:56:55:19:2b:e1:4f:
48:d2:e4:75:7c:4c:86:d0:7c:9b:d5:7b:49:ef:08:11:95:05:
32:72:8a:cf:21:c2:22:8f:7f:fd:f3:ba:5c:ba:43:43:ec:52:
c0:b8:cc:2c:be:23:c8:70:c3:4b:43:8d:ee:7b:61:c4:a1:fe:
5e:80:ae:55:6a:52:a7:b0:d5:04:66:6b:d4:fb:de:0a:f2:cc:
7a:6a:c5:ea:50:ef:01:01:d2:2f:c4:c3:2b:22:45:dc:e3:5f:
3c:42:a1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:17:59 2026 by rpki-client