Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/cD5duzhZorV7sGTXKEWhbKwuVYY.roa
File: cD5duzhZorV7sGTXKEWhbKwuVYY.roa (raw, json)
Hash identifier: e60aVCWV/l2nwGz4ojZ6p/+XalF5imKWW/rYltcl8rw=
Subject key identifier: 70:3E:5D:BB:38:59:A2:B5:7B:B0:64:D7:28:45:A1:6C:AC:2E:55:86
Certificate issuer: /CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Certificate serial: 019FB19155B112F229C9E9B23B2CC59EF8A6
Authority key identifier: 40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/cD5duzhZorV7sGTXKEWhbKwuVYY.roa
Signing time: Thu 30 Jul 2026 05:48:39 +0000
ROA not before: Thu 30 Jul 2026 05:48:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14114
IP address blocks: 2001:678:f88::/48 maxlen: 48
2a10:afc0:10::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b1:91:55:b1:12:f2:29:c9:e9:b2:3b:2c:c5:9e:f8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Validity
Not Before: Jul 30 05:48:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=703e5dbb3859a2b57bb064d72845a16cac2e5586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:be:0f:8b:95:5a:78:41:85:24:55:d6:be:
31:cf:88:f0:28:a3:eb:76:23:53:4a:97:4c:ff:5c:
a0:df:a1:f5:22:70:78:89:60:7e:ad:1b:a5:3b:0e:
22:bf:d5:4a:a9:d9:89:7e:38:48:93:34:a1:df:d1:
5f:49:be:d3:9c:1d:a6:78:4a:8a:2b:f9:71:43:12:
dc:d6:54:d0:08:3f:9b:1b:46:08:08:4c:d9:39:57:
c4:35:a8:e1:9b:ae:b9:1d:bc:20:c0:86:67:df:22:
f1:7f:f5:19:78:46:d5:7d:71:60:e0:a5:de:6c:ea:
a0:d1:70:d5:67:2e:fd:c7:29:a4:67:9e:04:8a:9a:
3d:05:8d:51:5e:56:f2:3e:63:54:00:f4:a5:a9:b9:
3e:2f:e7:85:4f:18:44:fd:7b:f6:68:7a:bc:19:c2:
cb:2e:e3:c5:1f:84:50:48:dd:31:57:d7:92:f0:3c:
0d:77:31:49:50:b1:70:33:51:36:67:0b:c6:77:69:
e2:65:ac:48:f9:cc:5a:09:75:c1:7c:bc:32:83:e3:
7e:5d:59:43:22:66:bd:30:c0:b8:c6:70:49:6e:a9:
9d:88:32:fd:1d:e5:ca:d8:69:0d:f8:44:d3:36:19:
aa:10:b0:88:a1:26:a9:d3:4b:6c:9a:03:16:ea:dc:
dc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3E:5D:BB:38:59:A2:B5:7B:B0:64:D7:28:45:A1:6C:AC:2E:55:86
X509v3 Authority Key Identifier:
keyid:40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/cD5duzhZorV7sGTXKEWhbKwuVYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f88::/48
2a10:afc0:10::/47
Signature Algorithm: sha256WithRSAEncryption
46:bb:89:5d:4f:2a:41:93:ca:33:b6:ce:61:6c:a7:21:eb:90:
24:c1:61:28:f4:6c:62:11:d7:f1:80:15:93:c4:26:aa:1b:4d:
e6:e4:fc:0b:12:38:fe:70:86:6e:17:84:7a:03:4e:00:24:4d:
9a:d0:77:ae:12:30:dd:33:c3:a8:a0:c2:dd:7c:5e:a2:57:1e:
39:fc:94:a2:6d:cf:e2:c1:04:c3:55:c1:69:9f:eb:97:86:c4:
54:91:9f:71:e1:db:50:bd:19:c4:db:8e:4b:6c:fe:51:f3:e6:
c5:8e:38:21:b2:3a:b6:17:20:16:56:84:31:2e:b9:ca:50:4e:
21:a7:22:4b:0c:0d:7b:e7:0c:8f:8b:7f:3f:cd:db:20:6f:c5:
a6:6a:dd:d3:d8:ed:3f:66:2d:c5:3f:fd:c1:0b:8d:5e:89:39:
2f:66:b3:1e:68:ce:61:83:ed:1f:48:9f:0e:1b:10:f3:3f:80:
bc:96:9a:ea:d0:b2:d5:80:6c:21:d4:fb:4f:b2:0f:e2:e6:58:
b1:ae:e4:ab:48:4b:29:20:ed:5a:f8:7f:41:fe:a5:e6:f4:fb:
e2:8d:95:8f:58:94:e6:98:8a:92:38:82:9d:27:19:03:10:c9:
37:3a:0a:3b:4a:aa:14:f7:b7:05:15:9e:de:7d:59:36:8a:c3:
8a:bb:d1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 17:31:36 2026 by rpki-client