Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/F1uLpqJdbm7dQPAjQ2-e5Y28uHc.roa
File: F1uLpqJdbm7dQPAjQ2-e5Y28uHc.roa (raw, json)
Hash identifier: +I3h4rcluq6dbDXLHATQ4Rd7pcUJ0aGabgH0SxDyg78=
Subject key identifier: 17:5B:8B:A6:A2:5D:6E:6E:DD:40:F0:23:43:6F:9E:E5:8D:BC:B8:77
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019F47F5E32C81DCF63013C3BD754D3ACE5B
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/F1uLpqJdbm7dQPAjQ2-e5Y28uHc.roa
Signing time: Thu 09 Jul 2026 17:38:44 +0000
ROA not before: Thu 09 Jul 2026 17:38:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401293
IP address blocks: 2a0e:c180::/29 maxlen: 29
2a0f:32c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e3:2c:81:dc:f6:30:13:c3:bd:75:4d:3a:ce:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 9 17:38:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=175b8ba6a25d6e6edd40f023436f9ee58dbcb877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:25:d0:d6:88:0a:1b:3f:b9:65:4e:3a:3d:
c9:40:d8:eb:e4:fc:0d:39:d7:a8:96:bb:ac:12:59:
15:39:5f:87:02:34:73:99:70:c9:3e:1f:56:4a:6e:
2a:9c:98:ce:6d:75:53:a7:9b:3f:0b:bb:99:13:cb:
2a:01:61:bd:3a:ab:1f:7c:77:7c:10:8e:9e:8b:12:
f1:70:98:a5:fe:16:96:b9:0c:51:32:e2:0c:f3:88:
74:da:2a:bb:37:8c:b3:f9:1f:1f:44:d4:be:09:92:
fd:31:a6:1d:9d:bc:53:2d:26:d8:7c:d4:e5:79:eb:
83:8a:99:be:8d:aa:4a:20:ae:78:69:04:9f:ee:a5:
d2:da:d2:d0:d1:01:7f:e7:a5:1b:4f:00:72:76:62:
48:8a:4f:de:2d:c0:5d:e2:81:68:b1:1c:d9:f1:5e:
6b:be:19:6f:1e:65:8f:ca:39:34:40:5a:b9:eb:c7:
af:30:ec:7a:c2:8a:d1:54:55:6a:8d:42:19:a3:27:
f9:1c:b4:cb:de:77:1d:7c:c2:43:97:d9:7e:66:2e:
53:fe:43:d0:cb:ad:15:24:bc:62:c8:ce:48:8f:a7:
a8:c6:5a:1b:a2:66:18:ef:c3:b1:bb:07:6f:bd:f6:
bb:1f:43:4d:9c:71:7f:5f:2f:8d:99:fc:8c:be:83:
ac:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5B:8B:A6:A2:5D:6E:6E:DD:40:F0:23:43:6F:9E:E5:8D:BC:B8:77
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/F1uLpqJdbm7dQPAjQ2-e5Y28uHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:c180::/29
2a0f:32c0::/29
Signature Algorithm: sha256WithRSAEncryption
c2:c5:f2:db:c9:3a:e1:64:e0:19:8d:22:f6:6a:6a:c8:37:4b:
d7:ac:0a:d6:ff:30:69:d3:15:ac:f8:77:9a:7a:e9:d0:4d:22:
af:3a:0a:a9:46:04:86:fc:de:78:f3:96:f0:75:db:59:8d:40:
34:b9:ea:bb:87:bd:ea:b4:bb:de:95:9d:bd:40:8c:f2:28:f0:
9f:23:74:18:12:81:2a:15:e2:9d:31:ed:f9:c9:f5:e3:a3:bb:
92:3c:e4:2b:9c:0c:df:2d:fa:6b:be:b4:3e:d1:0a:f1:d9:be:
ed:3d:1b:69:b1:d0:b8:97:c0:c6:5c:eb:ea:4f:d8:6d:e8:47:
68:fd:1d:e1:81:0d:f2:c4:45:35:da:1f:4f:f0:09:1c:74:9f:
82:be:a5:df:32:53:79:97:a3:4d:e4:ee:1b:ab:10:a2:ff:65:
18:5a:f0:6c:3b:f5:21:58:b8:b3:71:92:77:68:cc:26:22:3d:
b2:b0:8d:b4:05:f4:bc:f0:87:bd:0e:05:89:96:69:51:5f:e0:
0a:3a:a4:23:c9:61:60:e7:5b:a3:4d:23:86:7b:4b:f4:a3:d7:
f1:73:46:78:42:20:28:1d:0a:ce:a2:14:e6:32:dd:ce:d4:59:
ef:b8:ef:f7:d0:11:9b:70:87:12:eb:f0:a1:19:ad:2a:32:a4:
99:a1:c7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:51 2026 by rpki-client