Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/4RkhyiKyr-ddBlynedwnRuBTqE4.roa
File: 4RkhyiKyr-ddBlynedwnRuBTqE4.roa (raw, json)
Hash identifier: 7f3yZOBGA793R4wXdKp9xDJddrEK9ethSJW1flFi7UU=
Subject key identifier: E1:19:21:CA:22:B2:AF:E7:5D:06:5C:A7:79:DC:27:46:E0:53:A8:4E
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 019F346072125F4EDC96AEA32167E45E00EA
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/4RkhyiKyr-ddBlynedwnRuBTqE4.roa
Signing time: Sun 05 Jul 2026 22:22:43 +0000
ROA not before: Sun 05 Jul 2026 22:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6540
IP address blocks: 2a0d:2585::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:34:60:72:12:5f:4e:dc:96:ae:a3:21:67:e4:5e:00:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jul 5 22:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e11921ca22b2afe75d065ca779dc2746e053a84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:5b:45:dc:ee:79:32:c9:8d:d9:c2:29:9d:
11:01:20:2b:1f:f2:d3:bf:fc:b9:b0:5a:39:be:db:
1c:21:be:47:8c:d8:b7:92:33:23:1a:90:f1:bb:09:
87:e0:4c:58:2b:40:1b:1d:93:e6:55:b8:fd:4d:2f:
1b:e1:96:f1:5e:d5:73:85:40:50:83:e9:f1:83:c2:
a7:fe:73:c0:17:03:6e:ad:e5:fd:ba:7c:ba:03:08:
87:f3:a3:ee:28:7c:62:a3:3e:1b:80:74:5a:cd:10:
d4:0d:0e:41:f3:0e:ae:fc:f2:48:ad:f1:d0:38:0f:
eb:c6:ac:f5:b8:27:41:92:6e:2c:70:80:af:0e:04:
1e:12:4c:dd:78:1d:84:8f:46:3b:9e:99:d2:81:26:
6b:43:44:1e:3e:66:6c:c7:ff:db:dc:63:ac:19:a4:
6b:8e:28:5b:67:8e:d2:e4:80:11:13:f3:d2:5b:85:
1a:a7:76:d3:3e:e6:c7:e0:00:ed:0e:50:53:aa:f2:
99:09:ad:7d:86:91:84:57:cb:f4:0e:41:21:17:72:
e3:fa:1c:01:1e:10:65:7a:e5:a1:a3:01:39:ee:58:
c4:18:12:76:7c:37:be:79:dc:eb:c0:e6:4f:d5:00:
05:5b:dd:c7:82:da:27:26:9d:29:22:7c:67:13:ed:
18:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:19:21:CA:22:B2:AF:E7:5D:06:5C:A7:79:DC:27:46:E0:53:A8:4E
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/4RkhyiKyr-ddBlynedwnRuBTqE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2585::/32
Signature Algorithm: sha256WithRSAEncryption
0d:57:82:6f:e9:9b:ee:f6:2a:04:00:c5:14:d6:c4:7b:6b:6b:
b5:0e:65:ba:a0:ef:93:4e:e3:50:30:7d:9d:9c:cd:d1:ea:a9:
bf:bb:ea:bf:7e:51:52:d3:11:b7:c4:03:c3:6a:d5:3d:d6:58:
81:9d:bd:60:60:dc:87:87:6d:bc:ce:be:e5:f3:f7:7a:5c:4b:
31:fe:f3:72:27:97:f7:b6:ef:e5:eb:b6:2f:4d:bc:5b:95:55:
35:7a:da:a7:26:ab:d9:63:14:0f:ff:bd:4f:39:2b:7b:12:ab:
e7:cd:d7:67:bb:a5:a3:7e:99:91:bb:f4:65:ee:e1:fd:f1:b1:
e5:8c:01:cb:0e:e6:3a:c1:fe:87:8c:07:ca:96:74:1b:32:d6:
47:94:d9:32:bb:35:0a:aa:e7:95:ed:f9:8f:06:50:b8:85:17:
5f:bc:cc:ae:d4:8f:b9:77:a2:46:49:4e:46:6f:75:6a:1f:9f:
d1:3c:5d:c7:19:77:16:a0:4c:ff:51:0a:7c:cc:45:5c:48:34:
37:e0:00:5d:55:dd:9d:c3:e4:a1:8c:6f:ca:fc:81:e7:df:59:
04:83:80:8e:21:a3:c5:29:52:ce:79:06:a0:7f:a2:f9:1a:d8:
31:9d:e7:56:79:6a:0d:7f:17:d3:b7:0a:52:43:4c:d8:36:2e:
89:35:c8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 04:32:58 2026 by rpki-client