Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/d0oDNFtupKBE5SmEnpPU7kF_d7U.roa
File: d0oDNFtupKBE5SmEnpPU7kF_d7U.roa (raw, json)
Hash identifier: gpjTQDKI3EBYyEaeePohrLuOYHhtc2RoaMFL6AcgShU=
Subject key identifier: 77:4A:03:34:5B:6E:A4:A0:44:E5:29:84:9E:93:D4:EE:41:7F:77:B5
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368F4CEE0A6706DAD37576B634F1C5F
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/d0oDNFtupKBE5SmEnpPU7kF_d7U.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210675
IP address blocks: 2a00:7180:8014::/46 maxlen: 46
2a04:800:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f4:ce:e0:a6:70:6d:ad:37:57:6b:63:4f:1c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=774a03345b6ea4a044e529849e93d4ee417f77b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:74:80:fd:af:4e:02:82:7c:00:e6:b4:3d:
b6:9c:3a:58:d6:c4:73:2e:ea:9c:37:2c:7e:f8:75:
d4:68:15:44:f2:89:6d:ea:77:6e:10:c6:76:bd:15:
13:3e:19:0d:19:79:20:1f:2a:3c:0a:f9:ec:e0:3f:
b8:96:34:d9:e1:a5:a0:41:e7:2d:b8:79:d7:d5:8f:
37:66:7e:c5:c4:d2:0a:d2:d3:b8:d2:29:90:a2:8d:
c0:28:ef:5b:f1:e8:aa:4c:c6:18:2d:2f:17:8c:e3:
e7:e5:5d:0d:1c:64:62:9c:e2:8f:c5:1a:bf:41:ab:
98:45:4a:5b:94:ff:b1:7b:68:47:da:50:a2:55:e2:
ef:ed:3a:ba:79:da:93:63:e7:e6:9b:c0:cf:33:c5:
53:13:50:78:b1:69:31:8e:5a:f0:f1:6a:92:81:91:
10:0d:fc:ea:44:01:1b:a1:4d:37:64:bf:b2:08:e1:
26:10:8d:a0:fd:11:e4:0c:aa:11:9e:9e:87:e2:3b:
1d:9f:71:57:6f:72:ed:2d:76:5b:fb:04:ef:0d:4f:
db:5f:ed:89:4d:54:2f:35:79:54:36:7c:8c:84:22:
3a:24:4e:8c:d7:f0:70:23:e3:cf:41:33:c2:ab:20:
e1:d2:18:79:e0:1e:84:8f:9f:ef:43:b8:ea:ef:1f:
c6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4A:03:34:5B:6E:A4:A0:44:E5:29:84:9E:93:D4:EE:41:7F:77:B5
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/d0oDNFtupKBE5SmEnpPU7kF_d7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:8014::/46
2a04:800:4000::/36
Signature Algorithm: sha256WithRSAEncryption
0f:ee:b1:56:bb:f5:29:e8:ae:4a:40:be:43:09:91:f0:ab:07:
b3:cd:ce:c4:a1:0f:b6:ee:8e:e1:d2:09:7f:e7:2a:09:a9:16:
6d:d6:f2:7a:54:3a:92:34:7d:b3:6d:25:75:03:18:9e:a1:04:
2d:a9:37:86:b4:26:01:b3:23:42:0c:dd:5b:80:2f:e9:58:75:
79:40:b6:f6:70:30:bb:e4:c2:f1:2b:71:c8:ab:24:25:00:fb:
1f:e1:09:0e:4b:30:2e:7b:35:84:54:49:56:cf:03:33:98:ed:
25:36:25:4b:b7:c5:84:15:da:8d:80:87:28:f6:00:63:f2:e7:
25:ea:62:10:70:4a:2b:16:57:5f:9d:e1:a7:8d:71:03:4e:49:
6a:93:31:9a:e9:fb:18:32:1c:b6:72:15:58:da:84:4c:af:d5:
86:50:db:0a:48:b2:1c:e6:bb:92:55:f7:f7:c2:dd:f1:d8:63:
4e:e5:76:c6:00:16:d7:1e:f2:14:ce:b6:af:42:0a:5a:c5:c3:
aa:d0:b6:2c:50:26:d1:d6:4a:01:7a:09:05:db:6e:de:86:ff:
b1:d4:63:4e:c1:7e:3f:89:38:3f:a2:e5:f4:18:07:d5:3f:e3:
98:79:b9:9a:cd:3b:4e:a2:8b:4a:c2:5c:73:94:a6:b4:ca:06:
80:de:50:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:32 2026 by rpki-client