Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/rPdyzQxFJnnulJi0ML6fAdmRNtI.roa
File: rPdyzQxFJnnulJi0ML6fAdmRNtI.roa (raw, json)
Hash identifier: LZbWgTsmcVMIwM7vNMxOEsSE3fl1iyassordSC5RkPY=
Subject key identifier: AC:F7:72:CD:0C:45:26:79:EE:94:98:B4:30:BE:9F:01:D9:91:36:D2
Certificate issuer: /CN=522a22bccd3de8265afd55f9830ffc01c83af726
Certificate serial: 019ECFA00F619C63B58A2DEFFD9A66F30E75
Authority key identifier: 52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/rPdyzQxFJnnulJi0ML6fAdmRNtI.roa
Signing time: Tue 16 Jun 2026 08:50:33 +0000
ROA not before: Tue 16 Jun 2026 08:50:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 2a05:64c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 07:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:a0:0f:61:9c:63:b5:8a:2d:ef:fd:9a:66:f3:0e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522a22bccd3de8265afd55f9830ffc01c83af726
Validity
Not Before: Jun 16 08:50:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acf772cd0c452679ee9498b430be9f01d99136d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:af:02:de:9d:f1:ba:39:fe:02:c4:70:8a:d0:
78:e1:f4:b8:48:ee:7f:6c:17:ad:9c:a1:66:1f:77:
58:3e:14:33:43:a0:e6:5d:eb:5d:30:e7:24:ac:26:
88:55:ac:59:fd:8e:15:18:1b:2d:26:da:83:d7:51:
5c:c1:c4:56:38:56:09:61:75:c5:d8:c9:6a:5c:e6:
14:ef:f1:be:5f:ab:36:cc:d5:21:7f:d4:89:8e:ba:
6a:9a:61:2f:e5:8f:56:b4:0c:b2:dc:23:db:e3:c9:
a5:67:03:61:69:8c:08:4f:9e:9c:50:c2:3c:4a:c8:
bf:1e:3c:26:92:54:fc:b2:b3:1d:e1:4f:33:de:42:
49:72:59:ef:9a:9e:1e:5d:15:50:42:a2:8f:c6:4a:
a4:38:68:08:43:70:bf:94:eb:41:38:59:95:c4:34:
9c:22:dc:60:36:8e:b9:e5:50:d4:f8:e2:24:4c:f0:
bf:f8:a6:1b:c3:90:44:30:1b:ba:74:92:e3:5a:60:
65:92:ca:dc:a1:9b:88:99:42:2f:c6:8b:bd:c4:91:
93:a5:11:47:47:8b:a2:a3:23:e6:d1:ea:b4:1b:03:
8d:98:e1:be:14:9f:8b:04:d1:a2:b9:60:e4:4c:15:
d8:38:fc:08:dd:cd:81:36:df:84:33:62:fe:c4:c6:
a1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F7:72:CD:0C:45:26:79:EE:94:98:B4:30:BE:9F:01:D9:91:36:D2
X509v3 Authority Key Identifier:
keyid:52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/rPdyzQxFJnnulJi0ML6fAdmRNtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:64c0::/29
Signature Algorithm: sha256WithRSAEncryption
74:63:15:4e:e9:98:03:5d:d0:f2:e8:64:f6:aa:d1:b5:a1:2c:
e3:36:b4:5e:6a:23:0a:89:63:3c:bf:03:b6:37:fe:61:99:f6:
fd:78:22:a7:17:48:b9:ff:b0:00:2c:2b:8f:31:57:f5:92:7a:
e3:ce:d3:71:4b:4d:a8:38:b8:9b:df:f3:44:be:77:ce:df:9a:
0b:dc:a5:c5:f8:fb:40:d3:6e:fc:39:da:76:ac:43:c9:c8:8a:
5a:44:c3:14:62:59:fd:e1:86:f6:96:9f:71:22:a8:56:64:5f:
84:35:ce:e0:75:1b:65:95:e2:d5:5f:ab:6c:7a:92:01:3f:56:
2f:11:20:1a:4b:48:bb:ba:de:a8:66:71:41:c5:05:4f:f9:6e:
e1:a7:0e:26:77:da:0f:36:7e:1f:d8:59:9a:b0:67:72:74:36:
34:99:0c:d4:18:24:3e:96:52:b9:a2:eb:51:c7:4a:7a:ef:79:
20:6c:49:9c:c4:f9:16:28:b6:f1:70:8f:37:13:06:55:ea:ee:
02:72:65:39:90:36:b8:e4:ce:ba:72:81:96:cf:af:88:6f:ac:
c9:07:0e:90:3f:28:6d:7f:7e:75:b9:e3:48:b2:7e:e5:67:34:
b9:3a:ea:e6:13:b1:5d:69:1f:63:8f:9b:e3:88:27:a5:b8:03:
12:b2:0b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 13:02:52 2026 by rpki-client