Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/2yNwmvbqMchs1q4pkief0nwvGR8.roa
File: 2yNwmvbqMchs1q4pkief0nwvGR8.roa (raw, json)
Hash identifier: tvLGnui5pS+faHWcJMRGakQwssA9AXe+S7FVGhrU7l4=
Subject key identifier: DB:23:70:9A:F6:EA:31:C8:6C:D6:AE:29:92:27:9F:D2:7C:2F:19:1F
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01A014C5E3060967FEBCC16D44A83B587318
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/2yNwmvbqMchs1q4pkief0nwvGR8.roa
Signing time: Tue 18 Aug 2026 12:08:28 +0000
ROA not before: Tue 18 Aug 2026 12:08:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218932
IP address blocks: 2a03:5840:15d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:c5:e3:06:09:67:fe:bc:c1:6d:44:a8:3b:58:73:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Aug 18 12:08:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db23709af6ea31c86cd6ae2992279fd27c2f191f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2c:38:01:2d:b9:f7:73:46:0a:8c:43:94:bd:
c5:19:f5:47:70:a5:e1:06:57:75:31:45:6c:03:27:
5e:bb:ac:8f:7a:cc:06:44:04:46:78:31:4b:e0:58:
91:b8:12:51:be:31:e4:d2:a1:6f:8c:63:f5:e7:b4:
39:42:0e:4d:c4:e5:87:f1:b9:7b:6f:27:97:dd:9f:
60:da:b0:e1:d8:35:b6:01:48:03:b1:01:42:ca:a8:
f0:36:f3:16:15:e6:5e:a4:f7:26:bc:e9:ca:89:8e:
50:c2:5f:2b:4f:6b:a8:0f:7a:6f:ea:d1:98:47:66:
c2:33:15:5f:70:f5:e1:16:4c:cf:b0:4a:d7:fa:61:
d7:a7:2b:7c:5c:f2:b7:7d:7d:98:cc:2e:ed:0d:4d:
e2:87:1a:f1:b8:6a:b4:bc:04:d5:6c:ce:84:20:70:
16:79:4e:6e:d0:f2:39:7c:c2:d1:7f:39:77:64:90:
53:d9:64:db:1d:ce:48:7f:3f:38:60:36:d7:45:ad:
e8:d1:a5:6e:83:ea:71:65:4c:5d:ce:61:87:3d:2d:
88:9a:e1:b9:23:d1:62:fd:f9:c4:7c:cf:79:c1:03:
48:f2:f0:da:eb:bc:2b:56:81:fd:a1:89:28:ce:93:
10:51:f5:92:90:2f:b0:58:6c:57:49:91:db:dc:cf:
00:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:23:70:9A:F6:EA:31:C8:6C:D6:AE:29:92:27:9F:D2:7C:2F:19:1F
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/2yNwmvbqMchs1q4pkief0nwvGR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:15d::/48
Signature Algorithm: sha256WithRSAEncryption
3a:79:a2:b5:98:7c:41:c0:ee:41:3f:ac:70:c7:3d:da:43:6b:
a9:38:b8:b6:8e:a1:ab:de:a1:5b:c1:4b:59:1b:98:fc:ae:73:
3f:af:97:ad:18:51:be:69:bb:ac:d2:1b:33:24:b6:27:cb:de:
51:65:cc:54:d6:a9:ef:74:60:80:1e:44:33:e0:ee:57:3d:ad:
3d:8f:18:ac:a4:73:2a:4c:e3:90:4c:57:da:4e:d2:17:62:63:
9d:bc:be:59:1c:0f:8e:30:03:0a:c6:f1:24:00:83:a9:d2:f5:
3d:f0:00:2c:e4:b6:ee:b0:f2:c4:67:57:d4:93:d0:d5:c4:c6:
fe:16:18:63:d6:a9:4d:0e:32:fb:61:84:48:a8:96:4e:ed:1a:
c1:12:e5:59:0b:91:6e:fb:77:c2:bf:dc:0b:82:f5:36:f6:c1:
e4:06:84:9c:ea:28:cf:eb:c3:8e:d0:14:63:02:a7:5a:e0:07:
67:b8:c9:32:b1:5f:3f:cf:e0:9a:4c:ac:31:16:7e:5f:51:52:
00:4b:7b:94:c5:90:81:8f:42:3e:e1:e8:75:1b:b5:bc:17:94:
f0:f7:08:a7:07:c8:f2:bb:cb:1c:b8:05:2b:f1:48:f2:09:db:
3e:37:95:b7:f3:32:07:fb:b0:c7:12:27:22:25:13:53:8b:f5:
90:25:8b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:49:27 2026 by rpki-client