Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/15fjy2AkOpBg_9vyM78z1akZIPk.roa
File: 15fjy2AkOpBg_9vyM78z1akZIPk.roa (raw, json)
Hash identifier: bIlJ1psO6s3xZ1h3VhKbLXUCKK0nIMnTG5BVdZTHZv0=
Subject key identifier: D7:97:E3:CB:60:24:3A:90:60:FF:DB:F2:33:BF:33:D5:A9:19:20:F9
Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Certificate serial: 019F2368417FE7166AF34A8722327C2FA1AD
Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/15fjy2AkOpBg_9vyM78z1akZIPk.roa
Signing time: Thu 02 Jul 2026 15:17:42 +0000
ROA not before: Thu 02 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47764
IP address blocks: 2a00:46e0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:41:7f:e7:16:6a:f3:4a:87:22:32:7c:2f:a1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Validity
Not Before: Jul 2 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d797e3cb60243a9060ffdbf233bf33d5a91920f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:06:16:15:cc:25:de:f0:ef:1c:f9:b9:a9:
f9:c3:e0:38:70:d3:75:17:d3:98:f3:c3:70:a8:3f:
f4:11:58:b0:bb:2a:b7:51:25:d6:90:44:e3:8c:6c:
05:ee:b4:f5:7e:b1:07:ec:74:92:7a:a1:9b:f9:58:
95:b9:68:c2:ac:26:31:22:63:24:7f:c1:41:49:e2:
ed:7c:ca:98:ce:6a:05:eb:c6:90:64:50:07:9b:41:
29:99:96:9e:dd:de:38:8c:4c:f4:f0:04:eb:2b:eb:
90:bd:21:55:4e:8b:44:5c:85:a4:d3:2c:2c:b3:51:
ed:c3:5f:b0:48:b3:76:8f:03:26:57:55:79:be:14:
a5:e3:07:36:c7:da:a8:24:78:b5:c3:fe:bf:12:9d:
79:56:a5:02:8d:f7:cf:d1:e5:50:5f:24:58:0d:d1:
ee:0c:3d:1f:29:39:d8:53:8c:aa:38:54:60:56:d2:
cc:c3:a4:36:3b:26:25:5c:d3:f6:b2:88:42:38:b1:
87:9e:ec:08:df:18:66:1b:75:c5:f2:a3:18:78:ec:
7f:64:fe:e0:55:2d:19:6f:cf:ea:21:29:a0:a4:0e:
22:83:1e:de:af:5d:fe:00:00:8c:55:4d:99:16:41:
ab:6d:4b:14:cd:ef:47:d7:ea:e0:5a:eb:28:26:98:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:97:E3:CB:60:24:3A:90:60:FF:DB:F2:33:BF:33:D5:A9:19:20:F9
X509v3 Authority Key Identifier:
keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/15fjy2AkOpBg_9vyM78z1akZIPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:46e0:2::/48
Signature Algorithm: sha256WithRSAEncryption
8b:76:7c:8c:b1:e2:4c:82:2f:0f:aa:cc:bc:11:f8:18:4d:54:
a4:f7:93:c7:04:12:73:0c:08:ef:e8:e6:be:b8:06:41:4b:d3:
14:7f:aa:3d:7a:38:ef:23:0c:a1:b9:22:9d:d0:8c:d4:fb:0a:
42:b7:54:c3:73:c9:cb:14:8d:ca:db:e6:cf:b6:2e:2b:bd:6b:
16:bb:d0:a9:e2:79:c9:8d:4f:14:5a:9e:af:2b:50:79:b2:d1:
a6:93:a1:57:d5:ed:a0:a0:1c:23:4a:9a:a4:3e:b4:39:00:02:
64:6f:f4:ec:6f:d6:9a:98:e5:6f:9e:23:57:0d:13:1a:c7:aa:
6f:3b:cb:6f:03:c0:96:a7:37:c5:c9:cc:5f:82:c0:cb:30:89:
1c:a1:37:84:1e:33:0b:77:3e:92:50:6c:4b:8e:ec:e1:eb:94:
79:4d:5f:01:9e:7c:9f:84:f8:ac:86:14:5f:40:96:39:89:da:
e7:64:e6:0f:f4:a5:65:be:ef:27:20:42:98:c6:ae:e3:7a:11:
f4:8d:9e:ba:53:10:82:1b:9e:3e:bc:f9:4e:f5:30:1d:7d:60:
8e:2c:c7:07:51:65:3c:92:2a:b6:21:42:df:88:46:41:21:07:
83:dc:53:55:08:bc:59:6c:1d:19:5c:28:78:ec:ca:79:a9:33:
08:78:09:9a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaEF/5xZq80qHIjJ8L6GtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMTMyNzhlYmY0ZjQ5YjQyNGZiZDRhOWM3MDA3ZDI3NDc2
ZWQzMDcwHhcNMjYwNzAyMTUxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzk3ZTNjYjYwMjQzYTkwNjBmZmRiZjIzM2JmMzNkNWE5MTkyMGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXsGFhXMJd7w7xz5uan5w+A4cNN1
F9OY88NwqD/0EViwuyq3USXWkETjjGwF7rT1frEH7HSSeqGb+ViVuWjCrCYxImMk
f8FBSeLtfMqYzmoF68aQZFAHm0EpmZae3d44jEz08ATrK+uQvSFVTotEXIWk0yws
s1Htw1+wSLN2jwMmV1V5vhSl4wc2x9qoJHi1w/6/Ep15VqUCjffP0eVQXyRYDdHu
DD0fKTnYU4yqOFRgVtLMw6Q2OyYlXNP2sohCOLGHnuwI3xhmG3XF8qMYeOx/ZP7g
VS0Zb8/qISmgpA4igx7er13+AACMVU2ZFkGrbUsUze9H1+rgWusoJpiHkwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNeX48tgJDqQYP/b8jO/M9WpGSD5MB8GA1UdIwQY
MBaAFM0TJ46/T0m0JPvUqccAfSdHbtMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt
MmRkNzg5MGRjNjg5LzEvMTVmankyQWtPcEJnXzl2eU03OHoxYWtaSVBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5
LzEvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgBG4AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQCLdnyMseJMgi8Pqsy8EfgYTVSk95PHBBJzDAjv
6Oa+uAZBS9MUf6o9ejjvIwyhuSKd0IzU+wpCt1TDc8nLFI3K2+bPti4rvWsWu9Cp
4nnJjU8UWp6vK1B5stGmk6FX1e2goBwjSpqkPrQ5AAJkb/Tsb9aamOVvniNXDRMa
x6pvO8tvA8CWpzfFycxfgsDLMIkcoTeEHjMLdz6SUGxLjuzh65R5TV8BnnyfhPis
hhRfQJY5idrnZOYP9KVlvu8nIEKYxq7jehH0jZ66UxCCG54+vPlO9TAdfWCOLMcH
UWU8kiq2IULfiEZBIQeD3FNVCLxZbB0ZXCh47Mp5qTMIeAma
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:54 2026 by rpki-client