Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/G83V1nWk1M0pYAHDfAvxnUMwSMA.roa
File: G83V1nWk1M0pYAHDfAvxnUMwSMA.roa (raw, json)
Hash identifier: j4wXmxdv/0enwpuVvGc3vBJ4lXdgd81VwD2IbAUVpeo=
Subject key identifier: 1B:CD:D5:D6:75:A4:D4:CD:29:60:01:C3:7C:0B:F1:9D:43:30:48:C0
Certificate issuer: /CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Certificate serial: 019E43B06F856BFFDEF996DAC8DE0A460B9D
Authority key identifier: CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/G83V1nWk1M0pYAHDfAvxnUMwSMA.roa
Signing time: Wed 20 May 2026 04:41:36 +0000
ROA not before: Wed 20 May 2026 04:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200772
IP address blocks: 2a12:1340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:43:b0:6f:85:6b:ff:de:f9:96:da:c8:de:0a:46:0b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Validity
Not Before: May 20 04:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bcdd5d675a4d4cd296001c37c0bf19d433048c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c5:13:cb:e3:41:31:ff:0b:5e:f3:07:b5:1e:
b7:c2:cb:12:ad:91:cd:1c:39:60:b3:c9:bd:d5:69:
ad:34:c0:dc:89:cb:a6:fe:16:c8:d4:e3:2d:eb:10:
6e:2c:2e:f7:99:7c:43:03:96:95:b9:08:d3:96:50:
14:8b:ab:76:69:f2:a4:d8:f4:7d:b4:b1:54:8a:4a:
a3:d6:d3:64:d0:91:98:b5:ef:fb:6c:04:18:a3:6d:
16:10:41:de:52:ea:04:63:af:20:72:8f:3a:d2:7a:
fa:8d:7f:b9:b9:5c:7b:8b:8f:80:35:ac:57:d9:8d:
cc:e8:2b:69:57:86:10:10:ed:53:06:2b:9d:d4:81:
64:e6:62:74:ba:e8:d7:0e:a2:a6:b5:4c:ea:71:e6:
5c:22:5b:8c:a1:10:66:4c:e8:f7:e8:d3:64:d1:0f:
07:ca:91:6f:a2:f8:b7:6e:4b:86:8e:e7:ff:3c:b7:
c1:38:ec:55:26:78:25:36:21:61:b5:75:7e:d7:14:
19:31:fc:94:72:de:03:b9:fd:4a:2a:c6:0e:a3:41:
09:99:c7:79:ab:15:16:24:07:ff:ff:cf:ff:99:6d:
10:a5:de:3b:a4:52:86:36:46:2d:27:02:11:53:e2:
a6:17:13:13:8f:58:03:c7:c4:70:8f:8e:00:92:52:
e5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CD:D5:D6:75:A4:D4:CD:29:60:01:C3:7C:0B:F1:9D:43:30:48:C0
X509v3 Authority Key Identifier:
keyid:CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/G83V1nWk1M0pYAHDfAvxnUMwSMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1340::/29
Signature Algorithm: sha256WithRSAEncryption
50:e6:4e:c6:9d:53:c4:46:6c:ef:b1:0f:ce:db:28:6c:99:c4:
74:a4:48:f9:1e:ba:22:2e:6d:f6:75:7e:64:6b:76:43:d5:ee:
71:4e:5f:04:e0:f2:91:89:fe:ee:14:da:55:1a:b3:3f:ec:9e:
7f:6d:dd:38:5e:3c:25:13:c2:72:55:ee:3f:e7:0a:31:35:3f:
a7:f9:d5:99:00:d3:c1:48:8e:0e:e8:dd:fc:e2:3a:a9:df:a8:
7c:dc:d5:b8:4a:13:23:9d:36:f9:e3:3e:14:8e:b5:7f:ab:38:
13:b0:ac:cf:be:26:5e:82:06:e0:42:e0:28:cb:e8:8a:bf:18:
64:5a:4a:d7:e2:12:1d:8c:14:01:63:25:ff:f3:02:9f:19:68:
95:c6:f5:4e:00:eb:2c:f0:a5:84:fd:7f:77:6c:1a:61:a9:bb:
7f:69:a9:7b:dd:8f:f5:45:6f:53:5b:17:bf:0a:b0:5d:53:08:
2d:b4:8c:80:af:ad:65:22:38:c7:dd:43:ba:ea:6b:3a:0f:40:
a2:b4:e4:cb:9a:0c:6c:f7:21:f0:a2:7b:d6:d3:51:e4:89:54:
ae:f8:61:72:64:10:20:68:35:6d:ca:85:df:f0:b0:d9:6c:9f:
d2:b0:f2:c5:01:5a:9c:af:20:a1:b0:86:6b:70:6e:2a:77:54:
52:85:0e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 16:57:12 2026 by rpki-client