Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/W3N7bf0jsGCOnTkTONoGroDyK2U.roa
File: W3N7bf0jsGCOnTkTONoGroDyK2U.roa (raw, json)
Hash identifier: sY/Y6Gi47KSMY0OY1u2USXiGMbJw3faONnoaqLePplY=
Subject key identifier: 5B:73:7B:6D:FD:23:B0:60:8E:9D:39:13:38:DA:06:AE:80:F2:2B:65
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 019F346072FA15F304B58953EAA827007D7A
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/W3N7bf0jsGCOnTkTONoGroDyK2U.roa
Signing time: Sun 05 Jul 2026 22:22:43 +0000
ROA not before: Sun 05 Jul 2026 22:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59993
IP address blocks: 2a0d:2585::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:34:60:72:fa:15:f3:04:b5:89:53:ea:a8:27:00:7d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jul 5 22:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b737b6dfd23b0608e9d391338da06ae80f22b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:99:d4:0d:7c:a9:b3:ea:30:85:81:21:ec:
a2:f2:1d:65:44:b2:5e:6e:c0:d7:4c:23:8e:64:5c:
53:a8:49:cb:66:17:15:7f:5d:33:7c:67:be:4e:55:
b1:b8:50:3b:16:45:5e:00:d7:b7:b8:fc:80:d7:e2:
be:c9:b3:be:d8:f3:0c:58:42:20:37:7b:b7:f7:f6:
99:37:d7:2d:1a:13:6d:32:0a:b0:ec:8c:e4:51:34:
e2:b8:ad:40:ed:61:01:6e:1b:fd:81:8a:3d:3e:54:
84:c6:61:71:43:c3:49:d5:47:fa:e4:e7:94:06:db:
8b:99:3c:31:7f:65:ed:a0:0b:35:b5:ed:9f:32:af:
fd:f4:5c:f1:77:f5:df:03:1b:9d:57:2d:cd:eb:d0:
92:29:8f:82:fd:9f:22:36:3b:c8:7e:8f:32:de:6b:
ff:2d:a9:40:c5:e2:38:81:2c:24:18:b9:ae:d8:36:
8f:ce:90:01:49:7d:40:0e:4e:c5:a5:f4:80:69:c9:
53:2f:9d:96:4d:30:df:cf:ba:88:84:42:a0:8b:d9:
84:c4:1b:e4:6e:de:5f:60:2b:a3:67:55:14:7a:3c:
70:29:46:94:89:52:6a:82:3b:c8:51:74:4c:5d:fa:
92:60:ed:a3:32:36:34:55:f6:a6:b6:92:05:da:05:
51:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:73:7B:6D:FD:23:B0:60:8E:9D:39:13:38:DA:06:AE:80:F2:2B:65
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/W3N7bf0jsGCOnTkTONoGroDyK2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2585::/32
Signature Algorithm: sha256WithRSAEncryption
18:de:25:07:b2:55:28:d1:ab:c8:c7:85:8a:03:7e:75:24:87:
c7:da:e9:12:d4:54:48:c5:8c:1c:39:64:1e:d4:ba:f0:f9:2d:
cb:fb:9d:7e:22:b3:86:02:fc:af:b3:6b:a1:f9:18:47:ca:c9:
b6:15:e7:bb:38:c8:03:ed:b3:55:df:4f:c2:90:cc:0f:99:c0:
cf:58:fd:6c:5f:c5:7d:34:44:98:ff:bd:26:b1:25:b2:02:c7:
7e:67:83:78:70:12:04:79:b8:ce:96:7d:5f:29:57:a2:05:bc:
36:b4:73:10:61:52:9b:72:d7:1b:d4:7f:34:c6:24:6f:1b:87:
b9:51:01:20:79:89:1a:87:87:90:3d:58:31:0d:fc:ab:57:f3:
64:74:5a:e6:68:c2:7e:63:b8:6b:96:9a:45:79:54:f1:7a:97:
b4:42:81:5a:eb:ae:13:02:1a:3b:8e:cf:15:87:7f:de:6e:85:
0c:60:e0:09:f3:3c:33:08:ca:b2:1a:57:d1:7c:40:75:f2:d4:
63:2b:09:da:d8:ee:f1:08:4b:53:c2:7d:a8:5d:d2:50:55:93:
f7:ca:ed:59:43:db:3b:a4:2d:21:01:d7:d9:d6:5f:88:f1:e1:
3d:da:d2:74:c3:bc:c6:4e:06:96:ad:14:9b:00:86:e7:5f:f7:
3e:d0:1a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:31:31 2026 by rpki-client