Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/uk1Y2nsqcAQAPbF4Rqj6o4xigmo.roa
File: uk1Y2nsqcAQAPbF4Rqj6o4xigmo.roa (raw, json)
Hash identifier: 1NA2pR8RjrXHi26eaAADYnGs7wQ6Gg7yZ7zlsXvQcnY=
Subject key identifier: BA:4D:58:DA:7B:2A:70:04:00:3D:B1:78:46:A8:FA:A3:8C:62:82:6A
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368C49B54F40F73D81A55645B7B44B8
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/uk1Y2nsqcAQAPbF4Rqj6o4xigmo.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62282
IP address blocks: 2a0f:7b80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c4:9b:54:f4:0f:73:d8:1a:55:64:5b:7b:44:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba4d58da7b2a7004003db17846a8faa38c62826a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:67:fc:ae:1a:b2:5b:9a:bd:6e:1d:3e:74:95:
e4:cd:e6:fa:7e:9c:77:90:33:88:6e:70:f2:a4:f3:
c9:fc:62:ad:0e:e0:af:37:74:98:d3:fb:6c:a7:09:
22:6a:ce:59:25:8a:fa:dc:98:b8:a0:3f:d1:73:03:
ca:6d:87:de:63:9b:76:e0:a8:f4:77:66:0c:9e:ef:
47:87:a0:b1:06:b0:20:6d:70:d8:0e:c6:9f:b4:9b:
dd:d6:00:76:7f:d1:01:cf:ea:be:a8:5d:23:a9:c4:
58:91:60:d6:9e:26:1d:23:03:6f:9b:af:86:3f:0b:
bf:5d:7a:58:65:e3:46:c7:39:1f:2a:8e:de:ad:77:
36:05:9f:c1:6d:9b:c6:c4:51:e9:07:78:19:39:e4:
06:6a:be:63:3d:eb:c2:c4:89:ae:0a:3f:6f:ee:0a:
fe:bd:78:b3:a6:de:f0:03:e5:97:63:6c:85:7f:a8:
11:83:a9:a1:d9:19:0c:d7:18:ac:7e:18:5f:9e:39:
e9:10:84:84:1b:fa:7d:38:be:51:04:e2:79:f3:b3:
da:fe:45:a4:08:f7:1d:6c:da:2e:a6:65:40:bb:30:
fa:1e:87:f6:cb:6b:6b:bf:f8:d8:55:71:a4:55:73:
52:67:b2:39:21:0b:32:66:1c:3f:a6:70:8f:a3:14:
ea:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4D:58:DA:7B:2A:70:04:00:3D:B1:78:46:A8:FA:A3:8C:62:82:6A
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/uk1Y2nsqcAQAPbF4Rqj6o4xigmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7b80::/48
Signature Algorithm: sha256WithRSAEncryption
57:ff:52:f6:59:f5:79:ca:50:6f:62:65:f0:3f:73:3a:c0:68:
3d:35:59:4a:da:a2:39:2c:87:e0:9b:73:2d:13:17:e8:1d:c0:
74:74:0e:ee:1d:be:6e:41:0a:c5:7e:f6:26:6f:9c:ad:20:88:
2d:dc:04:e7:86:72:9f:91:ca:62:48:f8:cb:a4:f7:0a:59:91:
5f:7a:9b:1c:ae:5a:2a:92:e0:ec:96:f8:1d:d5:95:00:12:7e:
64:5a:13:57:6e:26:ef:bb:8d:60:16:41:1e:01:73:39:db:02:
69:cd:ab:4a:23:cc:65:3b:04:d7:7f:e7:4b:ec:fa:2a:f6:0b:
b7:96:24:9e:b1:a9:13:45:94:b3:19:86:89:23:3b:f8:98:8c:
ec:f1:cb:96:f9:66:6a:e3:6c:04:eb:fe:9d:fd:8a:69:e7:e3:
98:d9:98:82:2b:13:8a:97:ad:e3:c9:49:c8:38:fe:26:aa:d3:
72:6f:77:7c:40:05:cb:89:98:2c:81:3f:a2:03:02:e5:10:83:
37:ea:2c:1e:63:43:aa:5f:b5:c6:88:0d:5e:f9:08:7f:89:3f:
5f:0a:03:d6:a9:91:2a:40:d7:1c:f0:c3:30:50:7f:fc:f0:29:
c7:8a:dd:7c:45:98:0f:82:9d:bd:1c:ea:40:26:34:e9:d6:be:
b2:df:49:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:55 2026 by rpki-client