Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/f80qjYnyCwfdNMKj1DsnAZ5cv9c.roa
File: f80qjYnyCwfdNMKj1DsnAZ5cv9c.roa (raw, json)
Hash identifier: zngQrOsaQfFZfvx/BqG2rXEHHOh99MujSkajem83cE4=
Subject key identifier: 7F:CD:2A:8D:89:F2:0B:07:DD:34:C2:A3:D4:3B:27:01:9E:5C:BF:D7
Certificate issuer: /CN=240b32cd6b5797bba8de75710d2263858909f386
Certificate serial: 019ED5E4480F9346D730992289BE25A51486
Authority key identifier: 24:0B:32:CD:6B:57:97:BB:A8:DE:75:71:0D:22:63:85:89:09:F3:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/f80qjYnyCwfdNMKj1DsnAZ5cv9c.roa
Signing time: Wed 17 Jun 2026 14:02:48 +0000
ROA not before: Wed 17 Jun 2026 14:02:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58062
IP address blocks: 2001:678:12ac::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Jun 2026 13:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:e4:48:0f:93:46:d7:30:99:22:89:be:25:a5:14:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240b32cd6b5797bba8de75710d2263858909f386
Validity
Not Before: Jun 17 14:02:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fcd2a8d89f20b07dd34c2a3d43b27019e5cbfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:97:fe:f5:27:50:d2:1a:bf:60:a2:c0:e8:
1c:52:3f:a3:e2:08:46:3d:c6:36:03:1d:5a:f5:2d:
7e:be:39:88:05:6c:a6:46:89:9c:4d:8b:2e:ff:69:
b4:01:de:bc:99:7f:f0:4e:7a:79:b3:50:cb:6e:26:
69:7a:77:b9:7b:e1:2a:28:a3:1c:48:4f:2c:02:99:
f7:27:e7:75:cc:4a:43:12:77:36:2f:58:7b:cf:5f:
ce:1b:5b:b7:0b:14:15:12:0a:c2:8d:aa:c7:07:63:
f9:fb:87:91:56:ad:22:96:c4:7f:5e:b0:e1:5c:25:
be:09:88:f8:db:97:75:d5:46:81:e5:04:a8:95:dc:
88:f7:b9:6e:15:4f:39:b8:0c:0b:ec:2a:18:f1:61:
83:cf:b0:f2:c6:c0:bc:4d:19:34:ac:e7:5e:68:5b:
f2:31:39:0c:57:62:01:37:d8:76:e2:2b:24:a4:bb:
0e:ef:a8:a0:13:58:5f:92:fc:83:9f:f7:23:e4:76:
34:b5:39:51:f9:59:90:d2:d6:0c:7c:15:3d:13:cf:
24:a1:bb:4d:49:46:75:61:a8:b1:b4:87:f2:77:d3:
26:75:4a:04:81:d4:8f:18:7c:74:83:02:14:4f:9d:
53:c3:42:0a:b5:00:e6:30:c8:e0:2b:5a:0e:4c:4f:
42:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CD:2A:8D:89:F2:0B:07:DD:34:C2:A3:D4:3B:27:01:9E:5C:BF:D7
X509v3 Authority Key Identifier:
keyid:24:0B:32:CD:6B:57:97:BB:A8:DE:75:71:0D:22:63:85:89:09:F3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/f80qjYnyCwfdNMKj1DsnAZ5cv9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:12ac::/48
Signature Algorithm: sha256WithRSAEncryption
3d:9f:14:69:4c:55:c0:8c:9d:2b:91:cf:c4:b1:60:c7:24:94:
62:3a:10:74:80:26:7c:69:db:c2:1b:e4:33:ee:b5:f7:aa:b1:
1a:e4:09:b3:06:dd:30:36:02:61:ac:0b:ed:f9:ae:7d:d9:8e:
4c:09:6a:ad:8c:75:d0:be:de:38:54:90:50:42:22:45:89:22:
7a:a0:25:65:8a:70:c9:4c:4c:60:05:45:55:b3:a8:e1:c2:86:
f3:bf:ba:d2:2f:36:1e:31:f2:b6:be:23:57:99:a2:c8:7c:30:
9b:5c:27:33:4a:05:49:fc:da:ad:06:02:26:e9:f5:77:05:ae:
4a:ae:9a:85:29:ce:df:0b:14:de:a5:ca:13:11:f4:a9:0d:b0:
15:1b:51:4a:b5:9c:6e:e1:62:d8:4f:4c:c9:2d:c0:ea:0a:c6:
3f:1c:b9:90:96:0f:dc:82:18:b4:a3:f9:9c:64:29:6a:c6:1b:
a5:d2:41:95:dd:7f:e1:e4:8c:25:2e:32:03:75:4d:fe:c3:92:
00:0b:d8:93:4b:6a:a9:65:f0:7f:2d:c8:3d:a0:68:c9:5b:8d:
c8:24:29:60:9d:e8:f4:af:16:21:07:35:c0:55:ac:93:b7:a5:
95:f6:49:3c:4f:7f:90:f2:15:7e:1a:47:92:fd:dd:95:3e:67:
b6:af:10:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 20:43:30 2026 by rpki-client