Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/iSGD7Yd3EYidBfBKdlJD8ax-oyQ.roa
File: iSGD7Yd3EYidBfBKdlJD8ax-oyQ.roa (raw, json)
Hash identifier: KH96g93vL+2pp/9qLDPcj4+bRqGTak1g9rArLQUe3k8=
Subject key identifier: 89:21:83:ED:87:77:11:88:9D:05:F0:4A:76:52:43:F1:AC:7E:A3:24
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368E8B492FA0AE01E5512056F7ACE10
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/iSGD7Yd3EYidBfBKdlJD8ax-oyQ.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34860
IP address blocks: 2a00:ec82::/32 maxlen: 32
2a04:800::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e8:b4:92:fa:0a:e0:1e:55:12:05:6f:7a:ce:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=892183ed877711889d05f04a765243f1ac7ea324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:06:bc:64:57:85:63:e4:9f:82:bb:91:c6:
f4:1f:ea:83:7b:81:57:5a:2f:69:05:aa:49:e7:fc:
4a:ce:8c:94:37:8a:56:46:aa:bc:51:1b:74:4c:6a:
b4:a7:fa:7b:a0:03:03:07:82:a7:1c:17:87:d7:4d:
23:f4:c0:44:22:41:d6:8e:4f:e7:b5:40:83:ba:c1:
cd:66:16:7e:11:12:88:e7:3e:4d:ff:3c:de:70:bb:
80:89:60:80:e7:54:83:95:be:d1:fa:ac:08:e6:ba:
be:dc:66:2e:1d:99:15:7f:b4:bc:40:08:bf:02:ba:
4b:84:3b:4c:aa:d6:43:81:4d:84:40:f5:78:45:bc:
9f:b8:13:5d:96:62:89:de:38:0f:fe:c4:ed:00:b1:
f3:e0:50:ed:32:6e:85:7c:92:81:e2:e1:d7:39:19:
7e:0b:44:6c:78:b9:88:a5:7d:39:c0:1c:44:c3:39:
52:45:17:33:07:96:3d:db:1c:0e:9b:98:ed:f6:f7:
ce:e5:e3:28:3a:3d:d1:0d:27:18:60:93:8f:75:8a:
44:9a:fe:9b:4d:f4:2d:4b:c9:2c:13:39:21:6b:46:
5d:bd:85:b9:56:84:a0:d4:ce:e2:eb:d5:d1:dc:a1:
ff:b7:72:77:94:eb:e4:ed:32:36:83:da:4a:b3:b6:
a9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:21:83:ED:87:77:11:88:9D:05:F0:4A:76:52:43:F1:AC:7E:A3:24
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/iSGD7Yd3EYidBfBKdlJD8ax-oyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ec82::/32
2a04:800::/36
Signature Algorithm: sha256WithRSAEncryption
02:b5:ac:4a:1b:b9:6c:f7:61:a9:25:05:3a:0b:56:85:86:9c:
f4:04:24:75:b3:92:b7:65:b7:af:fb:df:35:34:a9:3b:a5:15:
af:e0:2f:b4:d5:ad:79:ce:d5:5b:1e:98:1e:e4:16:44:82:1d:
a9:9c:ac:eb:6d:a0:2a:7a:d0:32:2c:3c:bb:ca:38:4c:11:da:
8e:63:56:c6:7e:e2:09:d2:68:17:4b:e9:f2:88:3c:7f:14:39:
62:f8:b5:7d:a9:59:79:90:b0:9b:a8:8d:e0:3c:4b:80:0b:79:
77:63:c9:8c:07:e4:51:b0:6f:3a:e3:63:45:5b:23:a8:0a:be:
79:6a:55:8b:13:fc:c5:93:d0:e4:7f:1f:d6:54:f5:81:cd:cb:
b7:af:ae:07:e8:f4:41:a8:bd:7c:82:31:30:13:c7:d3:b3:36:
43:27:98:13:ec:62:2c:09:8b:f2:59:68:cb:7d:89:87:26:85:
7c:26:c2:f4:90:92:fb:dd:f2:78:78:51:95:22:1c:f6:83:fe:
6b:24:8d:d1:6c:f3:3e:27:af:44:dd:4c:ba:cb:b9:cc:ff:5d:
a8:86:31:b1:ad:ee:94:91:a1:6e:87:a0:07:da:84:19:99:be:
a0:b5:19:95:d6:f8:3d:af:d3:24:05:79:d3:4e:99:20:b6:98:
e5:a3:5e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:34 2026 by rpki-client