Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/ctAXjj0Li_yon5mxcrFJF9P0J9c.roa
File: ctAXjj0Li_yon5mxcrFJF9P0J9c.roa (raw, json)
Hash identifier: 61WBzGlddF31EQO7Rkzar1M7/fMyfdBYeN6+LONTBvs=
Subject key identifier: 72:D0:17:8E:3D:0B:8B:FC:A8:9F:99:B1:72:B1:49:17:D3:F4:27:D7
Certificate issuer: /CN=c6a4ceab7bd7a4e6318e8564bc191fef22455dda
Certificate serial: 019F2368EA8DF216E12DC2E5415BB30DCC63
Authority key identifier: C6:A4:CE:AB:7B:D7:A4:E6:31:8E:85:64:BC:19:1F:EF:22:45:5D:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqTOq3vXpOYxjoVkvBkf7yJFXdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/ctAXjj0Li_yon5mxcrFJF9P0J9c.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15474
IP address blocks: 130.208.0.0/16 maxlen: 16
2a00:c88::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/xqTOq3vXpOYxjoVkvBkf7yJFXdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/xqTOq3vXpOYxjoVkvBkf7yJFXdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqTOq3vXpOYxjoVkvBkf7yJFXdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ea:8d:f2:16:e1:2d:c2:e5:41:5b:b3:0d:cc:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a4ceab7bd7a4e6318e8564bc191fef22455dda
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72d0178e3d0b8bfca89f99b172b14917d3f427d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ed:58:65:57:fd:35:26:3a:1e:cc:d3:77:70:
63:47:56:8e:7b:b0:3f:7d:8e:fa:85:91:c9:95:67:
f4:24:2c:2d:f9:f4:b0:79:7d:ae:da:55:6f:1b:c7:
f8:99:14:2f:6c:28:d2:66:e1:44:95:84:de:83:56:
06:7b:48:d2:36:99:fd:e5:ac:79:78:b7:b1:b0:c7:
1e:74:70:71:59:6f:ad:92:31:15:84:ee:80:4d:b9:
b9:f4:c9:d2:1d:0c:d5:2a:23:38:57:c2:1d:20:bc:
9a:a6:3d:1d:d1:eb:08:2d:02:4f:62:29:c0:24:9e:
87:2e:c1:da:3b:fb:8c:5b:d1:4d:5f:6b:d2:67:95:
95:47:e0:f9:55:f2:6a:be:96:4c:c5:dc:7c:08:09:
58:93:92:f4:c3:31:5e:7d:6a:33:48:da:fd:06:eb:
27:31:55:54:9a:a4:0f:17:0f:c3:2b:e0:e7:a9:15:
76:d5:ab:64:39:38:90:a5:c4:58:05:8a:fa:45:d4:
3f:fd:c4:2f:2d:85:4d:a3:a5:4c:19:3c:a5:0c:ed:
65:fa:a6:45:2e:df:83:89:a4:8a:ed:e2:91:58:18:
13:05:15:75:c4:e7:f7:1d:5a:6a:d0:66:3d:e7:bd:
c9:cf:aa:d8:34:c7:70:86:4d:71:1b:22:21:39:fd:
cf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D0:17:8E:3D:0B:8B:FC:A8:9F:99:B1:72:B1:49:17:D3:F4:27:D7
X509v3 Authority Key Identifier:
keyid:C6:A4:CE:AB:7B:D7:A4:E6:31:8E:85:64:BC:19:1F:EF:22:45:5D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqTOq3vXpOYxjoVkvBkf7yJFXdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/ctAXjj0Li_yon5mxcrFJF9P0J9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/xqTOq3vXpOYxjoVkvBkf7yJFXdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.208.0.0/16
IPv6:
2a00:c88::/32
Signature Algorithm: sha256WithRSAEncryption
72:2a:ae:59:94:18:fb:7d:3d:6f:c8:3e:9a:4d:7d:6d:9e:ab:
64:c0:52:06:47:95:ca:1c:79:fc:80:9a:93:01:d0:d3:88:26:
7a:14:49:b4:ff:8b:7c:bc:f8:d5:a7:98:7b:97:03:9e:04:20:
cf:af:2e:d3:e6:83:91:b7:1e:34:6e:b2:34:ca:27:c2:7d:82:
68:d4:13:7b:b2:97:14:ca:cf:a9:7c:25:1c:8b:14:0e:d0:01:
94:bd:11:2e:2d:24:97:1e:b6:d4:cb:07:a3:93:ff:fe:62:32:
4d:28:63:b9:99:18:6d:f5:7c:2d:5a:80:e4:df:41:e6:91:9c:
3a:00:29:72:1d:4a:39:a5:5f:02:0c:6c:06:8f:16:19:dc:33:
25:11:8e:a3:ff:3e:0d:3e:b1:06:96:5b:aa:18:68:d1:59:0e:
ae:33:cc:7b:86:cc:5a:b2:81:f3:e7:e7:3d:1c:28:f8:28:12:
1b:ae:18:d9:ce:5e:68:00:fe:74:4c:61:85:f1:0c:64:de:55:
68:c6:2b:c0:74:e9:40:bf:d6:b5:5e:32:29:29:ff:98:95:27:
d6:4a:3e:f9:66:81:21:41:6d:bd:8b:03:39:2a:7f:59:07:a3:
2b:c9:1d:9b:a4:34:df:a4:aa:2d:6c:46:c9:a6:c8:ef:a5:a0:
b0:37:8d:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:03:44 2026 by rpki-client