Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/uM425HRBWPQgpIadvih0BG-Jq_g.roa
File: uM425HRBWPQgpIadvih0BG-Jq_g.roa (raw, json)
Hash identifier: N4QS9r/DiPyDlYKJHR7079x4K8bfY51fdeLkoW5YFZs=
Subject key identifier: B8:CE:36:E4:74:41:58:F4:20:A4:86:9D:BE:28:74:04:6F:89:AB:F8
Certificate issuer: /CN=60c5b4165db2d6d6c1e18e395f09f3287407242c
Certificate serial: 019F236916DBD4C0A818CD88C42AAC53C208
Authority key identifier: 60:C5:B4:16:5D:B2:D6:D6:C1:E1:8E:39:5F:09:F3:28:74:07:24:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/uM425HRBWPQgpIadvih0BG-Jq_g.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2a02:fa8:c800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:16:db:d4:c0:a8:18:cd:88:c4:2a:ac:53:c2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c5b4165db2d6d6c1e18e395f09f3287407242c
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8ce36e4744158f420a4869dbe2874046f89abf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:ab:64:1e:bc:15:b8:7c:0e:ec:de:be:01:
78:22:57:09:41:7f:75:8f:85:64:6b:d1:c9:7f:03:
ac:0a:ec:c5:fe:24:d4:ef:56:7b:18:7d:e0:23:2d:
e7:02:fc:ec:ab:5d:8e:d2:43:21:70:d3:c9:ea:db:
85:84:94:c6:09:5f:51:0e:ed:f0:59:18:95:e9:1e:
ec:d8:e6:76:fb:bd:35:d2:19:88:d2:02:63:39:d5:
88:52:58:2a:08:09:7e:e9:2c:8b:5b:97:3a:c2:9f:
d0:d8:40:db:9c:ce:80:41:cf:32:40:fb:d9:60:4f:
40:d8:9c:e0:31:bc:2b:b1:93:f1:0e:23:ae:2c:44:
36:c6:aa:34:d1:fa:0d:6c:04:8d:2f:17:98:df:1b:
6b:3a:3e:cd:27:59:a8:3b:df:06:af:bd:2d:42:90:
26:8d:13:df:d3:74:bb:9c:d1:ef:f7:f7:0c:b4:89:
e0:38:20:a9:09:dc:a1:da:87:61:9a:26:74:54:cd:
7b:1e:6c:05:91:e6:cb:90:cc:f8:2c:d9:d7:a4:81:
3f:82:25:fb:cb:65:26:51:74:ab:f1:07:e7:82:bf:
10:7d:f1:dc:d0:21:0f:b8:38:c7:25:5b:bd:75:0f:
85:8b:02:e9:ec:43:76:b0:15:45:d0:9d:b9:23:ec:
c1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CE:36:E4:74:41:58:F4:20:A4:86:9D:BE:28:74:04:6F:89:AB:F8
X509v3 Authority Key Identifier:
keyid:60:C5:B4:16:5D:B2:D6:D6:C1:E1:8E:39:5F:09:F3:28:74:07:24:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/uM425HRBWPQgpIadvih0BG-Jq_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:fa8:c800::/40
Signature Algorithm: sha256WithRSAEncryption
0f:05:39:66:33:b9:6f:4d:60:9f:45:cb:b8:0e:ec:98:98:f9:
c7:b9:63:2d:2c:3a:63:3e:bc:c5:60:2e:ca:ee:76:f1:d2:6a:
f1:1e:93:9f:09:5b:6b:2b:5b:db:7c:fc:20:55:1a:a9:95:ac:
4e:7a:f4:16:9b:48:c4:08:dd:56:60:e3:9a:83:09:66:b7:00:
7c:74:4b:e7:ca:75:4b:8e:61:16:77:99:0a:1e:3c:20:72:02:
e6:76:f5:3f:13:da:34:e1:be:2d:53:96:6d:77:c7:62:f8:01:
3e:56:25:9b:14:91:2f:4c:75:30:d7:5a:ec:2b:7f:72:51:e4:
8c:36:07:0e:12:26:da:a7:9d:c8:a2:87:02:83:a2:e0:dd:05:
b9:69:f2:3d:0f:f1:2d:a4:36:26:f3:10:b1:63:d3:53:9c:5d:
3c:d2:45:a1:8c:95:83:77:37:b6:af:63:02:7a:c8:bc:c5:22:
01:67:41:38:f1:db:5c:bc:f7:92:4c:c8:45:c4:cf:d2:c6:71:
a8:d3:b4:5e:68:59:94:0d:43:7c:b2:33:6c:98:6a:d3:52:af:
df:a3:98:ce:fe:0a:02:68:60:ec:08:a5:34:41:f3:32:f2:8b:
b9:4e:32:d6:d3:5d:67:d6:97:06:42:b9:1e:34:61:cf:92:f5:
14:27:e0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:49 2026 by rpki-client