Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/aZqL4PQIRKXk-Nf9g8MWjRBJYWY.roa
File: aZqL4PQIRKXk-Nf9g8MWjRBJYWY.roa (raw, json)
Hash identifier: oswi/PqLXiY69b2lF56784lBrhIisxDRepTm/CrpEY8=
Subject key identifier: 69:9A:8B:E0:F4:08:44:A5:E4:F8:D7:FD:83:C3:16:8D:10:49:61:66
Certificate issuer: /CN=a4537cbedad356819cbc77ae3fca17d65431c280
Certificate serial: 019F2368FD5A0A8FA73AB4DB5FF7FAAE8A45
Authority key identifier: A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/aZqL4PQIRKXk-Nf9g8MWjRBJYWY.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15169
IP address blocks: 2a00:79e0::/31 maxlen: 48
2a00:79e1:380::/42 maxlen: 48
2a00:79e1:f00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fd:5a:0a:8f:a7:3a:b4:db:5f:f7:fa:ae:8a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4537cbedad356819cbc77ae3fca17d65431c280
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=699a8be0f40844a5e4f8d7fd83c3168d10496166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5e:ca:7b:d4:2e:ce:57:72:c3:8c:eb:9c:38:
80:97:6c:7a:f9:a2:39:9a:95:fe:16:dc:33:8a:50:
b3:e6:b7:06:41:cd:2a:06:d2:66:f9:37:f8:e4:f9:
df:2b:0c:93:e9:a3:94:bb:c7:7c:ea:df:aa:c6:4d:
0f:25:a8:71:f0:74:23:08:75:ae:e8:c9:b5:2e:9d:
02:11:d9:b0:65:43:d7:dd:aa:5e:d7:74:ef:95:73:
3b:68:4d:4a:ed:26:11:95:ed:86:c1:e2:9c:66:15:
ea:2e:56:97:af:24:7f:72:21:cb:66:18:e0:c4:74:
8e:0a:ee:2b:f5:07:b5:0b:ee:07:13:46:68:a1:ca:
5d:ee:73:76:e6:3b:d0:75:d9:7a:57:aa:94:46:e6:
a3:fc:fe:d1:5a:f4:de:4b:fc:66:b5:94:39:59:cf:
19:b7:22:dd:38:4e:d3:7c:3b:c0:6c:cc:77:34:fe:
2f:82:ef:42:a3:5d:d1:3d:97:a0:a0:56:b3:32:44:
b7:b7:11:52:2e:58:0e:77:b1:1c:51:3a:f7:bb:7b:
92:2e:6b:9e:4c:9d:f2:6b:53:1c:db:af:a0:1a:78:
d9:d8:39:a3:50:83:4a:a4:84:57:ce:4d:54:d9:cb:
0c:13:a3:25:6c:7f:89:54:87:77:8e:46:9d:3c:ba:
46:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9A:8B:E0:F4:08:44:A5:E4:F8:D7:FD:83:C3:16:8D:10:49:61:66
X509v3 Authority Key Identifier:
keyid:A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/aZqL4PQIRKXk-Nf9g8MWjRBJYWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:79e0::/31
Signature Algorithm: sha256WithRSAEncryption
6c:56:f8:0f:28:12:97:6f:6b:60:49:e6:12:b1:bd:c6:1c:59:
6d:52:0c:6e:2b:78:63:e9:bd:fc:a2:6e:4d:28:c6:45:3e:59:
dd:2e:0e:ba:9a:7c:1b:13:8f:8e:9d:27:3d:8c:d1:bd:b9:80:
4b:30:28:a4:c8:d9:ca:e6:a4:ad:3c:4e:1e:8f:fb:e0:f7:cb:
5d:95:4a:66:c1:33:f5:25:1f:fb:69:63:d4:b3:fd:f8:07:df:
24:18:48:f5:a4:59:c4:ff:f9:35:40:13:f8:a2:ad:bb:0c:dd:
40:ba:41:06:45:a8:26:4f:53:a9:98:89:35:47:e9:61:4f:aa:
29:df:7d:56:9c:dd:b2:b7:3f:69:4e:65:51:ab:b1:ae:4a:5d:
5a:48:bc:08:5e:b7:b6:94:bf:c6:4a:4c:b5:54:8c:15:b8:bd:
bc:d2:df:28:b4:f8:9e:e8:f8:5b:dc:f4:28:f6:4d:46:60:06:
1d:eb:78:0b:bc:3d:b4:e2:04:0f:54:d9:ad:71:a9:a5:e4:05:
05:a9:28:61:25:85:8d:0a:c3:44:46:44:49:13:5d:b4:4f:db:
8f:5b:61:94:3d:a1:38:a9:60:74:70:14:a2:21:fd:45:54:62:
f7:6e:1e:c5:97:0b:59:a9:5e:cc:04:77:42:91:e7:f9:5c:5d:
b5:69:3c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:41:00 2026 by rpki-client