Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/t5Us2Vb1_gCddzOcbszZqXCiryQ.roa
File: t5Us2Vb1_gCddzOcbszZqXCiryQ.roa (raw, json)
Hash identifier: inLGSCdl/floj6JmJGfOMeu7odrCEI2N26VONTqKdRU=
Subject key identifier: B7:95:2C:D9:56:F5:FE:00:9D:77:33:9C:6E:CC:D9:A9:70:A2:AF:24
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368F41203E2B7872E30F2777683CBFA
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/t5Us2Vb1_gCddzOcbszZqXCiryQ.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207808
IP address blocks: 2a00:7180:8008::/46 maxlen: 46
2a04:800:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f4:12:03:e2:b7:87:2e:30:f2:77:76:83:cb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7952cd956f5fe009d77339c6eccd9a970a2af24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:32:11:ba:01:f5:84:bd:50:bf:3c:07:ed:1c:
31:b1:3a:41:0b:b0:6e:2b:29:11:78:69:17:6b:b9:
2e:22:28:b7:cb:87:99:06:d4:47:66:75:5b:61:94:
61:4b:ae:4d:e2:43:44:f6:22:65:56:77:d2:25:c5:
50:81:45:3d:22:15:4d:e2:9d:9c:be:19:24:9b:af:
63:0d:22:96:7a:6d:10:30:69:e0:3d:f7:de:45:af:
00:d3:a3:2c:ba:e4:0c:d0:e9:fe:3b:dd:6b:d9:8e:
6a:b6:bf:9f:17:c3:f4:c0:ed:c5:6d:79:73:70:a9:
44:6b:55:1d:67:26:5b:b9:b7:16:10:29:f1:f0:55:
3b:21:ba:5a:93:d4:35:51:1d:e9:46:05:10:12:1b:
fb:c7:a9:01:8a:d5:ab:b3:76:cc:6d:8d:5f:aa:95:
21:9d:60:c2:30:a7:03:6e:87:e8:38:2b:a0:9a:90:
02:d7:23:0b:be:52:fa:3d:fb:c1:00:19:16:e1:aa:
1e:1b:b1:73:6d:10:14:65:09:a6:65:ed:25:8d:c7:
4d:4f:9b:2d:63:f9:6d:c9:0d:21:e7:1d:e9:8b:0d:
c2:cd:ae:09:fb:7c:d8:3d:b1:f0:f7:9d:43:ca:b3:
aa:9d:1b:54:f8:29:8b:30:0a:d5:80:16:9f:55:9b:
a0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:95:2C:D9:56:F5:FE:00:9D:77:33:9C:6E:CC:D9:A9:70:A2:AF:24
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/t5Us2Vb1_gCddzOcbszZqXCiryQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:8008::/46
2a04:800:2000::/36
Signature Algorithm: sha256WithRSAEncryption
7a:17:42:b9:1d:f6:21:07:0f:f2:92:bb:f5:4f:b1:09:aa:d5:
ee:64:23:3b:de:ec:7b:65:52:91:4f:29:89:57:12:b3:ff:4f:
9b:07:9e:fb:c0:27:3f:bd:7e:2a:68:ab:75:e0:f2:95:40:47:
ac:31:1b:c8:cc:d8:12:1b:54:3c:47:45:3d:0f:fe:33:cb:90:
7c:5a:e6:c0:63:35:15:4e:14:0a:27:70:34:06:14:35:39:33:
df:cd:b9:89:5f:91:7f:ee:ed:86:4e:62:a0:6a:54:b2:3d:ae:
4b:0f:93:8a:02:28:0a:d8:5f:d7:b6:66:b1:2a:08:79:fd:16:
0f:6b:96:a5:39:c6:f5:ee:78:09:73:3b:62:92:fd:16:f5:cd:
78:17:78:39:43:09:0e:c9:60:46:ef:64:75:d8:17:44:96:1c:
3f:b0:dd:73:3d:59:6d:a2:4d:6a:ff:4a:c4:c2:39:25:c9:c0:
8b:c5:83:b3:38:91:b1:d0:73:b7:30:fe:e0:58:ea:c8:db:5e:
94:cf:de:39:ff:44:5f:c6:f5:f4:84:7f:30:92:88:2f:a6:0f:
06:15:81:16:57:91:63:4b:63:02:81:07:95:23:e0:5f:6a:50:
bd:fd:a0:aa:09:b8:af:cb:40:e3:a2:36:27:23:d0:80:b0:fa:
90:54:80:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:31 2026 by rpki-client