Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/sFOU4J6G7f8bb8tQb6zHbVorZC0.roa
File: sFOU4J6G7f8bb8tQb6zHbVorZC0.roa (raw, json)
Hash identifier: rg6UFAng9V//tNkBw2WXQqdjewrPo6dIE9fDaq+wzM8=
Subject key identifier: B0:53:94:E0:9E:86:ED:FF:1B:6F:CB:50:6F:AC:C7:6D:5A:2B:64:2D
Certificate issuer: /CN=3af4fded7e10bbeaf4b4300b0403f0cec252c95e
Certificate serial: 019FC81FCE3908E1A01D573C93A67F0D89F9
Authority key identifier: 3A:F4:FD:ED:7E:10:BB:EA:F4:B4:30:0B:04:03:F0:CE:C2:52:C9:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvT97X4Qu-r0tDALBAPwzsJSyV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/sFOU4J6G7f8bb8tQb6zHbVorZC0.roa
Signing time: Mon 03 Aug 2026 14:55:55 +0000
ROA not before: Mon 03 Aug 2026 14:55:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2a0a:7a80:10::/48 maxlen: 48
2a0a:7a80:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvT97X4Qu-r0tDALBAPwzsJSyV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:1f:ce:39:08:e1:a0:1d:57:3c:93:a6:7f:0d:89:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af4fded7e10bbeaf4b4300b0403f0cec252c95e
Validity
Not Before: Aug 3 14:55:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b05394e09e86edff1b6fcb506facc76d5a2b642d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:00:6b:ae:d2:f7:94:d8:34:48:e8:39:34:69:
9c:5e:54:79:f4:63:04:a2:8c:cc:53:ee:92:b0:98:
bd:8d:f6:3a:a3:3e:ae:c0:f9:f9:72:f3:e3:4c:db:
09:0a:a1:d6:3f:6b:8e:4d:a9:94:c0:7e:dc:6f:21:
7c:f5:17:1c:9b:74:62:29:75:f4:68:a4:02:85:51:
84:9e:0c:bd:8a:05:0c:0b:00:a6:42:81:48:ff:cc:
92:08:47:e2:31:4e:4a:60:9f:5c:0f:f0:89:d7:77:
50:02:c6:c1:76:4c:bc:bb:50:66:2f:1e:8a:d1:47:
20:76:0d:2a:8d:d4:76:cc:66:b6:d6:51:6a:36:1d:
92:5d:32:6d:c4:05:f6:55:14:e4:2c:97:15:94:f2:
c6:7b:9c:f9:17:4e:de:7b:64:b1:e3:82:5b:e9:e4:
5d:de:7d:08:60:94:0b:19:87:3d:e9:5f:da:cc:7a:
44:3e:42:38:7e:23:b1:6d:33:70:bf:74:82:f7:e9:
77:d2:b0:51:fb:61:65:01:a5:34:65:b8:2a:c2:3b:
e5:3d:86:b0:47:79:ea:62:4f:f4:57:1f:2c:df:33:
b3:51:82:9a:5d:cb:dc:bd:bc:c2:be:8a:ad:e7:ce:
66:31:56:a2:91:65:b3:a4:17:59:dd:7c:ae:2f:8e:
bd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:53:94:E0:9E:86:ED:FF:1B:6F:CB:50:6F:AC:C7:6D:5A:2B:64:2D
X509v3 Authority Key Identifier:
keyid:3A:F4:FD:ED:7E:10:BB:EA:F4:B4:30:0B:04:03:F0:CE:C2:52:C9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvT97X4Qu-r0tDALBAPwzsJSyV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/sFOU4J6G7f8bb8tQb6zHbVorZC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:7a80:10::/47
Signature Algorithm: sha256WithRSAEncryption
0a:f7:b9:38:25:44:01:18:01:8b:84:bb:27:00:99:86:36:c3:
ab:48:9c:ca:7e:3d:21:7b:76:9d:1a:b3:7f:1e:d2:3a:3c:5b:
b5:7a:57:28:32:11:a5:a4:0c:28:7f:81:87:64:76:9f:2c:37:
f1:80:dd:c0:e2:02:c9:46:cc:f9:df:97:6a:c1:c1:f9:c4:2e:
7d:11:07:f0:3f:6a:12:f1:15:88:14:1e:24:c9:53:49:84:c3:
44:fb:45:06:4d:15:60:3f:be:6b:b8:20:04:b9:8d:7c:7a:a5:
ca:e1:a1:b8:48:58:3b:5d:c3:0a:b6:00:1e:4c:40:bd:68:8c:
c4:6a:ee:af:b3:c6:7f:d2:28:e3:2c:90:5c:be:aa:84:68:91:
e2:1a:85:71:82:00:b2:5c:59:09:a7:cb:8e:3f:35:39:0a:65:
94:df:0c:52:bf:b1:45:76:db:6a:f6:00:c1:6b:12:03:2f:04:
c1:5e:75:d6:98:03:ed:78:9f:18:62:bc:27:1f:2f:ae:7b:64:
84:cd:b0:76:d8:ad:93:4f:88:db:26:90:e6:54:16:4b:23:6d:
77:94:c4:83:dd:0e:e2:f5:a9:b2:c7:df:ba:3c:7a:ff:fe:f7:
1d:ec:16:58:aa:dc:af:a7:34:af:93:36:d7:6d:c3:71:4c:aa:
00:7b:0e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:05 2026 by rpki-client