Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/467d54-5050-49db-9154-35928683f67b/1/7o-LAygpPsH8kjhW0FQceQY9tWg.roa
File: 7o-LAygpPsH8kjhW0FQceQY9tWg.roa (raw, json)
Hash identifier: BBD6wZRfYwRF5hVYqF35L5OLVJ+7UEg6AKmLxvRoNiw=
Subject key identifier: EE:8F:8B:03:28:29:3E:C1:FC:92:38:56:D0:54:1C:79:06:3D:B5:68
Certificate issuer: /CN=bc9959b91c9569d8c5adad1ac0b613999abed9c9
Certificate serial: 01A00AD89A71383F745388294669AB0531DE
Authority key identifier: BC:99:59:B9:1C:95:69:D8:C5:AD:AD:1A:C0:B6:13:99:9A:BE:D9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJlZuRyVadjFra0awLYTmZq-2ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/467d54-5050-49db-9154-35928683f67b/1/7o-LAygpPsH8kjhW0FQceQY9tWg.roa
Signing time: Sun 16 Aug 2026 13:52:42 +0000
ROA not before: Sun 16 Aug 2026 13:52:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198092
IP address blocks: 2001:678:1264::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/467d54-5050-49db-9154-35928683f67b/1/vJlZuRyVadjFra0awLYTmZq-2ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/467d54-5050-49db-9154-35928683f67b/1/vJlZuRyVadjFra0awLYTmZq-2ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJlZuRyVadjFra0awLYTmZq-2ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0a:d8:9a:71:38:3f:74:53:88:29:46:69:ab:05:31:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9959b91c9569d8c5adad1ac0b613999abed9c9
Validity
Not Before: Aug 16 13:52:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee8f8b0328293ec1fc923856d0541c79063db568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:6c:30:22:0c:8b:36:b4:58:82:92:69:9d:
b8:63:3f:de:d2:51:c8:5c:2d:f2:05:fc:6e:65:0b:
db:96:38:51:79:8d:ed:a5:40:0e:1d:e5:5b:41:7f:
03:62:34:65:5a:b0:fc:a4:24:90:95:fe:86:c7:90:
6c:0f:2a:a9:d9:5c:4f:de:16:5c:e0:3f:fe:5f:b3:
f1:91:17:b9:f2:dc:9e:20:31:98:1d:ec:c0:76:67:
1b:af:07:2f:20:36:31:cb:28:af:38:82:81:c2:48:
88:da:70:b2:29:d6:1c:fc:0f:bf:92:c4:37:d3:d1:
64:84:cf:10:3a:33:8b:46:5c:7c:a2:37:a0:db:43:
71:d8:84:8d:37:48:2a:f0:07:8a:5a:66:7b:f8:34:
1c:5c:19:47:a0:43:4b:2d:c5:f2:91:ac:1f:f2:e5:
81:7e:9d:5b:d6:4d:1e:17:b9:2e:4e:57:de:29:bd:
11:10:1f:dc:32:3d:4c:5f:78:84:f0:63:e5:77:99:
24:92:78:3a:36:99:af:51:86:60:24:77:1b:19:e0:
ea:ec:de:21:99:d4:dc:b8:37:77:b6:9e:48:31:64:
24:57:18:50:63:4a:1a:2a:48:dd:f0:b9:e9:49:8c:
c2:02:91:db:fa:aa:33:c8:f2:e6:24:c4:86:2a:ac:
b3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8F:8B:03:28:29:3E:C1:FC:92:38:56:D0:54:1C:79:06:3D:B5:68
X509v3 Authority Key Identifier:
keyid:BC:99:59:B9:1C:95:69:D8:C5:AD:AD:1A:C0:B6:13:99:9A:BE:D9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJlZuRyVadjFra0awLYTmZq-2ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/467d54-5050-49db-9154-35928683f67b/1/7o-LAygpPsH8kjhW0FQceQY9tWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/467d54-5050-49db-9154-35928683f67b/1/vJlZuRyVadjFra0awLYTmZq-2ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1264::/48
Signature Algorithm: sha256WithRSAEncryption
02:54:14:81:a7:fd:d2:f6:93:16:84:c6:7f:6e:fa:8f:6e:bb:
db:0b:74:83:d2:86:dd:59:2d:ef:a3:3b:6c:3a:fa:32:d6:58:
1e:af:f3:2f:da:4f:05:7f:43:66:1c:70:5f:33:c8:a1:a5:0a:
68:dc:80:75:29:bb:35:e6:b8:1f:3a:f6:88:bb:b3:be:9c:53:
81:51:de:37:e2:cf:8c:0c:5a:de:28:a8:e9:03:8e:21:5e:27:
85:a3:af:c9:5b:bf:f0:f9:ad:e3:94:36:ad:cf:32:18:9d:d8:
67:b9:d8:96:80:c7:a4:81:8f:3e:6d:30:20:44:6c:6a:e2:21:
bb:df:b4:6b:7b:f9:08:1d:b5:98:14:a5:58:c0:ff:a4:f2:cc:
2c:88:5c:ea:56:a8:42:98:28:f2:b8:80:39:cf:61:c7:ef:41:
d7:e8:73:b9:da:d4:54:ef:be:82:51:f0:45:40:53:5f:51:52:
e3:e6:da:20:48:09:81:0b:5f:6b:9d:53:95:f5:0a:2d:54:02:
6d:16:63:3d:6e:99:92:2a:d6:5f:60:da:f3:3d:c3:90:46:e5:
ae:ad:34:b1:6f:61:6b:03:c2:9f:0b:03:c6:cf:81:6f:df:8c:
32:60:ec:83:b2:03:c4:0d:a1:30:b9:81:05:d5:07:88:0b:ef:
97:3c:9e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:47 2026 by rpki-client