Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/a_xgCSeQn5Ssbn8baCisaVeCEIo.roa
File: a_xgCSeQn5Ssbn8baCisaVeCEIo.roa (raw, json)
Hash identifier: mm9SsTEQyCJpAwPRjfFIv0OGNftc+iPyUjxpgaN7qkA=
Subject key identifier: 6B:FC:60:09:27:90:9F:94:AC:6E:7F:1B:68:28:AC:69:57:82:10:8A
Certificate issuer: /CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Certificate serial: 019E43B06F20AF3E596F3278928C2B2D97E8
Authority key identifier: CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/a_xgCSeQn5Ssbn8baCisaVeCEIo.roa
Signing time: Wed 20 May 2026 04:41:36 +0000
ROA not before: Wed 20 May 2026 04:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8143
IP address blocks: 2a12:1340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:43:b0:6f:20:af:3e:59:6f:32:78:92:8c:2b:2d:97:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Validity
Not Before: May 20 04:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bfc600927909f94ac6e7f1b6828ac695782108a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ef:b6:6f:9f:b4:0b:35:67:ca:f9:ce:08:17:
7a:8c:b0:f7:48:a4:26:9f:44:25:bd:b8:aa:4c:25:
d6:37:4e:2e:81:eb:d8:79:15:e4:e4:73:90:41:9a:
2f:e1:d1:5c:01:d1:08:d6:a8:c2:b9:0e:1c:36:b4:
1b:d2:03:14:11:23:b0:85:7c:4b:93:9f:1a:9d:b6:
67:45:26:98:86:dd:2a:a9:a6:ac:63:c5:f2:ca:02:
da:de:e4:e9:80:1b:f0:90:7a:21:e1:af:a7:2e:f3:
d0:cf:1a:fb:05:c2:55:14:a2:01:bf:01:2c:e1:19:
99:33:e7:bf:78:71:c5:4b:3f:13:98:85:87:ac:29:
e1:89:2f:84:fe:de:1f:5b:4f:a6:dc:84:06:8a:d9:
01:f5:e3:4c:5f:f0:1d:a3:1e:f8:f5:ac:9c:02:c6:
d3:b9:50:dc:28:6a:72:01:74:6b:13:e1:9b:51:c9:
22:6f:73:82:1e:d6:6e:8c:88:da:ba:e2:7e:e4:ec:
c7:4b:e7:e2:f7:23:c1:29:1d:b5:03:b9:6d:61:3a:
d0:7b:c9:e2:b8:1d:5f:da:66:39:90:57:6a:dd:7f:
80:ef:bd:ad:0e:74:e5:72:2b:d3:31:7a:9c:4b:28:
5c:c7:53:9d:c0:01:bc:a4:06:20:27:62:85:56:2d:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FC:60:09:27:90:9F:94:AC:6E:7F:1B:68:28:AC:69:57:82:10:8A
X509v3 Authority Key Identifier:
keyid:CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/a_xgCSeQn5Ssbn8baCisaVeCEIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1340::/29
Signature Algorithm: sha256WithRSAEncryption
2e:d4:88:ab:4a:f1:b5:a5:9c:88:18:36:6a:25:92:18:fc:cf:
68:da:b6:7d:20:ba:2c:b1:89:2e:c1:18:16:be:55:ce:1b:a5:
68:fd:4b:49:5d:cf:64:dc:03:bd:61:83:e2:a1:33:40:80:b7:
17:47:45:74:0c:a2:77:5d:30:58:58:02:6e:38:af:be:2b:b9:
67:c7:83:23:b2:0d:4e:df:71:f4:bf:cf:df:1d:7e:1c:0e:6b:
24:d0:ec:36:a4:9e:b7:9b:47:ac:ad:b7:94:a4:7c:8d:e4:eb:
bd:9c:0c:13:f6:81:18:14:1a:0d:f0:d2:3e:13:b7:8e:63:52:
5c:2a:f0:d4:00:da:31:c9:55:a0:08:77:3b:c2:47:e1:9f:6c:
79:15:41:e8:a7:00:8d:29:ce:30:06:a9:f5:b3:c5:15:b2:1c:
b4:88:23:1f:39:27:6d:d0:f5:f6:a0:e4:53:47:9f:5c:da:a3:
ee:79:2d:5c:3a:fc:df:1c:fb:c7:7b:48:97:9d:99:b8:88:47:
48:6f:ae:1b:02:43:c3:31:8e:99:71:2d:84:64:e4:77:f5:04:
bf:b9:60:f9:4c:a5:7d:49:b8:11:87:d8:9a:99:ea:ef:f1:c9:
8d:bc:62:fa:49:81:28:06:b7:e9:63:f6:50:4b:30:42:c6:ce:
68:c4:97:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 15:04:13 2026 by rpki-client