Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/1084e4-eb93-46bb-a5c4-787678fdc977/1/fuGQD3dIcuYFPHWfFYN9XNzksWs.roa
File: fuGQD3dIcuYFPHWfFYN9XNzksWs.roa (raw, json)
Hash identifier: 2ylZRzaFJXpYOr7KOt0jit74Kjsd61AmZ353s2BWVvY=
Subject key identifier: 7E:E1:90:0F:77:48:72:E6:05:3C:75:9F:15:83:7D:5C:DC:E4:B1:6B
Certificate issuer: /CN=5815a3e0959de2f27b45e71d2a84ff535f8163b2
Certificate serial: 019F379427EB6E4BDAF4DC7F23FF6CB493E2
Authority key identifier: 58:15:A3:E0:95:9D:E2:F2:7B:45:E7:1D:2A:84:FF:53:5F:81:63:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBWj4JWd4vJ7RecdKoT_U1-BY7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/1084e4-eb93-46bb-a5c4-787678fdc977/1/fuGQD3dIcuYFPHWfFYN9XNzksWs.roa
Signing time: Mon 06 Jul 2026 13:18:04 +0000
ROA not before: Mon 06 Jul 2026 13:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47341
IP address blocks: 2a07:f80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/1084e4-eb93-46bb-a5c4-787678fdc977/1/WBWj4JWd4vJ7RecdKoT_U1-BY7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/1084e4-eb93-46bb-a5c4-787678fdc977/1/WBWj4JWd4vJ7RecdKoT_U1-BY7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBWj4JWd4vJ7RecdKoT_U1-BY7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:94:27:eb:6e:4b:da:f4:dc:7f:23:ff:6c:b4:93:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5815a3e0959de2f27b45e71d2a84ff535f8163b2
Validity
Not Before: Jul 6 13:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ee1900f774872e6053c759f15837d5cdce4b16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b7:06:12:f1:4f:b7:42:2a:d7:7c:9a:d1:8c:
d8:f5:cf:96:c3:d0:ce:e4:ca:e9:87:13:85:2a:41:
3f:0c:b7:c3:7b:33:d8:69:5b:75:26:82:c7:c9:9f:
e4:3a:7e:df:35:cd:52:b1:42:c3:87:f2:ce:c4:aa:
d5:67:a9:90:b1:ed:a2:19:dd:8b:e6:d2:0b:91:32:
1d:fc:5c:db:87:a9:db:66:85:d4:53:ff:98:09:ea:
9e:d1:c6:24:69:28:e9:78:ed:69:6f:dc:24:99:d3:
f5:3b:f9:78:ba:bb:aa:1c:bb:c5:31:79:e1:30:72:
6d:1f:dd:1b:83:bd:58:0d:0b:88:7e:1a:df:48:bc:
b5:2e:0b:a0:f3:98:bc:40:61:79:ab:10:ce:0f:a3:
2b:03:7e:c8:0c:bc:56:67:5c:5c:86:52:30:d7:dc:
17:15:40:28:16:90:6c:1e:a1:ed:e6:fc:a0:c5:c2:
f0:be:03:38:b6:f6:10:be:99:14:08:78:73:ef:9c:
0d:8c:29:3f:93:d7:77:1f:2e:1c:08:e6:92:9d:57:
e2:9b:d0:91:0a:9c:09:90:01:08:ae:13:05:c9:61:
a3:3b:53:05:05:a8:8a:e4:10:ce:f6:ee:09:92:10:
17:d7:cd:2b:d6:60:06:a2:b9:26:b6:6e:fa:b1:a8:
a3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E1:90:0F:77:48:72:E6:05:3C:75:9F:15:83:7D:5C:DC:E4:B1:6B
X509v3 Authority Key Identifier:
keyid:58:15:A3:E0:95:9D:E2:F2:7B:45:E7:1D:2A:84:FF:53:5F:81:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBWj4JWd4vJ7RecdKoT_U1-BY7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/1084e4-eb93-46bb-a5c4-787678fdc977/1/fuGQD3dIcuYFPHWfFYN9XNzksWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/1084e4-eb93-46bb-a5c4-787678fdc977/1/WBWj4JWd4vJ7RecdKoT_U1-BY7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f80::/32
Signature Algorithm: sha256WithRSAEncryption
39:fc:51:3c:6e:2a:85:92:44:2a:c2:cf:95:2d:c6:c9:90:bc:
96:4a:59:9e:33:32:4a:96:58:ec:34:4a:71:73:20:9d:ce:97:
8f:97:4d:e7:6c:70:fd:b8:70:7c:a4:40:ea:49:13:fa:c0:1d:
68:fe:0c:75:76:43:ac:a3:e4:f4:64:2e:21:fe:36:91:52:6f:
40:16:59:c8:ce:32:5b:8e:93:d2:9b:c9:45:79:0a:05:2c:63:
65:09:17:84:5d:68:0b:4c:32:5d:7b:c7:72:74:ef:40:d6:19:
27:db:33:b5:31:85:c0:f1:5e:8e:c7:9d:a0:b8:9c:b3:df:4e:
8d:c8:38:9d:00:62:66:4d:a1:95:41:30:eb:88:ed:76:41:48:
57:00:5f:41:6a:6d:02:4f:5d:c3:08:70:1d:83:32:ef:86:0f:
8a:8c:c0:a3:4e:62:68:7c:12:9a:15:96:db:1c:82:ba:47:da:
79:ed:43:fb:8e:e1:bb:94:d5:e1:c5:20:1b:43:f1:8e:94:73:
89:f8:77:8f:34:30:c3:24:8d:85:2f:37:3e:7b:9b:20:a8:cc:
bb:6c:43:6b:b2:4f:00:06:2a:a5:71:31:4a:64:55:e7:e6:ac:
ae:b5:d4:fc:5c:7c:8a:b4:46:86:50:fd:8d:f2:7c:55:bd:32:
59:98:93:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:20 2026 by rpki-client