Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/phreA32JIBh9EEBki_eHuMSlC7c.roa
File: phreA32JIBh9EEBki_eHuMSlC7c.roa (raw, json)
Hash identifier: oE9AJHyFgj/ewpAvhdqCYOGzG1lWvz6E+SACng5xB9I=
Subject key identifier: A6:1A:DE:03:7D:89:20:18:7D:10:40:64:8B:F7:87:B8:C4:A5:0B:B7
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368F3E751610122B19772065B2CB6A0
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/phreA32JIBh9EEBki_eHuMSlC7c.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207807
IP address blocks: 2a00:7180:800c::/46 maxlen: 46
2a04:800:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f3:e7:51:61:01:22:b1:97:72:06:5b:2c:b6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a61ade037d8920187d1040648bf787b8c4a50bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:39:50:eb:0b:5e:82:89:81:8a:44:a8:2d:f7:
31:fb:ae:f0:68:e1:c3:a6:83:d7:3a:c6:dc:81:52:
54:92:5a:2c:3c:a1:0a:e6:aa:5d:0d:fd:f3:a4:34:
64:ad:c6:8f:41:c9:78:01:af:2d:79:cc:d0:a2:75:
3c:db:d6:20:e8:86:fd:ba:d2:9b:ba:53:d8:32:b5:
4f:36:56:33:71:9f:0c:cf:5b:c1:9f:05:52:a9:63:
66:e2:58:46:d6:9e:8c:4f:18:5d:9b:71:12:69:74:
65:28:a5:f3:14:f7:16:4e:64:7e:83:0f:83:e4:0f:
03:0a:72:12:2a:1a:b7:0a:14:bc:fa:99:61:23:e5:
08:c0:95:07:cb:11:69:f9:5c:4f:2f:7d:79:4c:c6:
cd:c4:84:f6:c1:90:d3:c5:da:a8:d6:b3:34:8f:aa:
37:ad:1b:4d:75:f7:fe:b3:91:a3:c9:83:cf:2b:b3:
1c:4f:a8:b6:e1:df:04:95:22:4b:cf:1e:18:c4:4f:
3f:06:b9:be:34:c2:d0:01:91:7b:b6:d5:9e:fb:be:
3c:86:58:48:11:56:38:bc:ac:1d:06:d9:80:40:a1:
17:52:e2:5c:96:44:6e:a9:50:83:52:08:a4:4c:fb:
be:52:2d:d5:cf:02:a0:9d:79:a4:e4:12:84:8f:4e:
1b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1A:DE:03:7D:89:20:18:7D:10:40:64:8B:F7:87:B8:C4:A5:0B:B7
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/phreA32JIBh9EEBki_eHuMSlC7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:800c::/46
2a04:800:8000::/36
Signature Algorithm: sha256WithRSAEncryption
40:26:b5:a5:ad:68:f7:aa:fe:2d:2d:b9:ac:f0:9a:8e:08:ba:
61:4e:08:ef:12:0b:9f:69:7b:a3:2c:15:13:08:ec:f3:78:9d:
88:b1:aa:4e:a1:0c:30:2a:47:42:57:9b:92:ce:1b:23:9a:0d:
b2:3b:e0:35:1a:c9:9e:a5:da:6a:5c:13:99:da:b5:60:7d:7c:
c9:ef:87:ae:72:43:44:78:13:b1:63:46:48:35:a4:ea:7d:90:
55:3b:3e:04:0f:bf:11:c4:4c:cd:32:2e:c3:6a:ce:c7:79:71:
89:26:0c:c0:ac:1f:5b:c1:8e:00:98:ea:87:22:5d:f2:ad:05:
88:f3:bd:3c:71:b3:97:69:f5:60:1b:15:e4:34:c6:74:b8:35:
49:8f:98:8e:48:24:9f:29:69:8e:1e:bf:29:5f:7b:f0:85:39:
06:64:61:09:44:28:ec:d5:11:4a:ec:fb:fd:0b:33:17:a3:cc:
0b:d7:7b:7c:c1:54:f9:fd:e4:e9:f3:3b:08:49:36:ef:86:06:
00:70:c9:da:a5:c2:24:86:be:96:87:5c:89:8f:f0:ac:0e:4a:
2e:94:e7:7a:a2:3d:1a:ca:f0:25:1d:0a:50:db:d4:3a:10:99:
bf:11:24:3a:9e:11:d6:23:4a:9f:e7:db:e5:3f:5f:7d:a5:b9:
d7:af:22:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:39 2026 by rpki-client