Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/wQOSAw7jJ1TAs5XBH4hj3XxrGvM.roa
File: wQOSAw7jJ1TAs5XBH4hj3XxrGvM.roa (raw, json)
Hash identifier: rw2xIPWw6m4cXi1grWMT/sHatYGUNfGWHacbMATZykM=
Subject key identifier: C1:03:92:03:0E:E3:27:54:C0:B3:95:C1:1F:88:63:DD:7C:6B:1A:F3
Certificate issuer: /CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Certificate serial: 019EF2B0D3DEE6ABC11E24DADEA3D138CB6B
Authority key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/wQOSAw7jJ1TAs5XBH4hj3XxrGvM.roa
Signing time: Tue 23 Jun 2026 04:15:35 +0000
ROA not before: Tue 23 Jun 2026 04:15:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40792
IP address blocks: 2a13:edc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 04:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f2:b0:d3:de:e6:ab:c1:1e:24:da:de:a3:d1:38:cb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Validity
Not Before: Jun 23 04:15:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c10392030ee32754c0b395c11f8863dd7c6b1af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:07:c9:bd:cc:b3:6e:68:b8:a0:dc:89:ee:
77:9a:2d:cf:81:46:7c:d7:8f:73:01:45:32:18:22:
3d:19:92:b3:56:65:e8:13:ec:17:66:47:89:bc:7f:
8e:cb:78:d1:b7:30:cf:2d:89:03:19:26:86:dd:f8:
e6:05:02:d0:a5:80:54:69:2f:ee:4d:72:b1:93:50:
d1:e5:94:aa:27:79:9d:29:4b:80:f5:2c:01:c4:05:
0a:0f:81:6d:4f:c2:e3:a9:cc:79:7a:05:1f:f2:ab:
6c:e6:b1:92:c1:f6:e3:0a:b6:6b:27:8f:72:e8:33:
a1:30:32:76:f0:93:61:43:5a:65:3e:4b:3e:0c:fd:
b6:03:c3:c2:4e:e9:69:97:27:77:91:52:bd:61:8d:
7a:d9:b9:89:76:39:75:70:29:37:11:8b:92:f2:f3:
ac:3a:2c:ff:f1:29:17:6e:11:21:7f:e1:02:e5:84:
17:c7:59:6e:63:9e:fe:76:79:1d:57:83:55:0a:19:
d0:f1:01:e5:ca:8b:a1:45:fb:48:dc:86:f8:8d:99:
95:72:b5:2f:1f:53:4b:dc:e0:65:bc:09:fc:68:3a:
3b:e4:aa:22:8c:17:16:13:56:a5:cc:53:58:24:46:
f5:ac:e3:e6:97:df:49:cf:d2:df:ab:cd:d5:8e:03:
0f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:03:92:03:0E:E3:27:54:C0:B3:95:C1:1F:88:63:DD:7C:6B:1A:F3
X509v3 Authority Key Identifier:
keyid:F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/wQOSAw7jJ1TAs5XBH4hj3XxrGvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:edc0::/29
Signature Algorithm: sha256WithRSAEncryption
98:63:ff:4c:30:71:fd:e5:ad:76:98:c8:88:47:b2:c0:81:97:
8a:9b:bf:7a:a0:35:d5:0d:ff:17:c3:79:ab:2e:3e:86:48:d8:
77:67:8e:8f:7d:87:a3:2c:fe:24:51:ff:85:24:75:a2:cc:bd:
75:99:2a:91:e8:b2:f5:dc:0c:cc:56:55:07:7d:89:9c:e8:be:
19:1e:12:f3:01:7a:c6:8b:c0:68:87:cc:5a:32:13:05:80:d9:
90:45:f2:d4:22:d3:cf:9c:86:f1:c1:71:48:cf:ed:a7:99:a7:
bb:c1:90:97:e9:3d:68:8c:41:d3:4c:0f:b5:a6:46:cf:2c:57:
a9:a6:c7:37:e0:6a:ec:dc:bd:32:0d:7c:06:de:13:de:76:bc:
1c:c6:7b:2d:16:5c:3a:42:12:65:aa:37:a0:62:f0:71:44:55:
cb:d7:2a:46:66:c6:e8:55:75:57:6f:7c:7d:20:b3:3f:f8:18:
77:8f:7b:96:63:b4:ce:20:00:38:6c:94:f1:f1:4d:13:b6:1a:
33:3f:c4:5a:80:85:56:95:a7:98:75:43:47:e9:5b:e5:d7:a4:
29:75:96:8d:ae:e7:51:72:15:e6:3d:84:ec:0a:b5:5e:16:f9:
88:8d:a5:db:aa:cb:a8:05:c7:5e:53:e9:5f:c5:8b:ac:b1:78:
1d:c0:30:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:26:17 2026 by rpki-client