Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/1-oRoVOrUs_7rZatTo4j-OZO3HAs.roa
File: 1-oRoVOrUs_7rZatTo4j-OZO3HAs.roa (raw, json)
Hash identifier: 4huNpy2/C4obxp39zBCSAb3vdYiOuV1Z2TDu3tCVC7Q=
Subject key identifier: FA:84:68:54:EA:D4:B3:FE:EB:65:AB:53:A3:88:FE:39:93:B7:1C:0B
Certificate issuer: /CN=87785594824d5b1a5b245ff8737e08aeaf47f3e8
Certificate serial: 019F2368A8F6A3A6B81C4F7DCC38138073FC
Authority key identifier: 87:78:55:94:82:4D:5B:1A:5B:24:5F:F8:73:7E:08:AE:AF:47:F3:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3hVlIJNWxpbJF_4c34Irq9H8-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/1-oRoVOrUs_7rZatTo4j-OZO3HAs.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 2a14:f180::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/h3hVlIJNWxpbJF_4c34Irq9H8-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/h3hVlIJNWxpbJF_4c34Irq9H8-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3hVlIJNWxpbJF_4c34Irq9H8-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a8:f6:a3:a6:b8:1c:4f:7d:cc:38:13:80:73:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87785594824d5b1a5b245ff8737e08aeaf47f3e8
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa846854ead4b3feeb65ab53a388fe3993b71c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:49:7d:18:8a:4e:49:dc:aa:a7:4a:2f:37:
23:ba:9a:cb:99:0f:df:c3:f4:ff:61:d6:5d:4c:20:
76:dd:c7:08:42:b8:a8:dd:c4:fa:25:39:cc:f6:b6:
06:7e:0b:46:f0:1f:49:ff:61:8b:81:13:40:a5:92:
3b:03:5f:16:db:d7:9e:47:4f:5a:e7:b1:f9:85:29:
ee:ea:ca:a0:a4:93:da:68:ba:ea:a6:ce:d0:b5:20:
a9:2c:f4:18:25:ef:08:ac:d3:51:6b:f3:13:98:b1:
71:87:bc:86:9a:51:a8:6e:86:8b:f9:a0:0b:01:87:
f4:52:99:89:c7:54:b4:c2:e5:b1:ad:54:22:de:c9:
e2:98:91:ce:6c:77:73:49:a2:79:29:ca:35:ad:48:
83:52:1c:9b:b1:93:81:c1:77:df:a0:06:7d:04:ba:
e8:fc:81:de:b1:29:8e:6b:a3:24:23:61:e8:18:75:
49:28:c8:f8:24:87:a4:ca:fb:ae:ba:23:f1:68:25:
47:17:5a:7e:00:7b:1a:a1:46:73:74:e0:68:8d:67:
89:bc:5d:59:b1:1d:f2:5d:f8:20:2d:5d:a5:59:62:
b0:71:50:6c:e8:dd:95:eb:54:2e:3a:bd:ef:47:e3:
59:3a:71:69:31:15:54:2b:2a:ff:8a:6c:fb:47:a6:
bc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:84:68:54:EA:D4:B3:FE:EB:65:AB:53:A3:88:FE:39:93:B7:1C:0B
X509v3 Authority Key Identifier:
keyid:87:78:55:94:82:4D:5B:1A:5B:24:5F:F8:73:7E:08:AE:AF:47:F3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3hVlIJNWxpbJF_4c34Irq9H8-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/1-oRoVOrUs_7rZatTo4j-OZO3HAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/h3hVlIJNWxpbJF_4c34Irq9H8-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:f180::/29
Signature Algorithm: sha256WithRSAEncryption
a8:f9:a0:d4:fa:05:3b:08:42:85:98:d9:93:bb:06:bd:2b:99:
58:40:bc:40:89:21:88:c1:e5:c5:a6:05:97:18:97:8e:24:1a:
b9:87:02:6f:88:99:52:cb:df:ba:ab:f7:ed:7e:98:f4:6f:ca:
69:7e:68:63:af:09:2b:4e:86:53:14:99:cb:72:a0:00:f9:5f:
64:03:9c:17:b9:fe:f7:a7:d3:d8:54:0e:f1:fe:c6:5f:fe:a0:
d6:7d:de:d5:c9:e7:b8:4d:6d:b8:80:f7:ae:fb:91:50:70:8e:
c9:4b:44:54:a2:46:d8:e4:f9:c4:37:d9:f7:f4:2d:45:34:0f:
b4:33:8f:8d:ea:9b:ff:ef:be:6a:38:95:2f:0d:a5:74:11:a7:
6b:68:9b:ff:9f:15:0f:99:77:6e:4f:67:fa:8d:0b:db:fa:dc:
2a:2c:a9:1c:8f:f5:9b:52:5e:c7:c1:89:57:91:08:21:f2:9c:
26:e2:bd:ee:cb:fe:cc:6d:ad:18:5b:8c:89:15:ab:84:23:51:
4b:42:81:a3:67:4d:4a:2c:1d:f2:58:b5:7f:82:1e:ef:d5:dd:
2e:bc:c5:af:da:5c:44:38:ad:fe:0f:76:ec:58:f3:c6:7b:48:
de:ff:bf:09:2b:19:50:0a:0b:db:39:af:4a:40:05:91:9f:71:
8b:0a:e0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:00:10 2026 by rpki-client