Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/I4AgYPx6q-AXqCOLfyv2qdwV6wU.roa
File: I4AgYPx6q-AXqCOLfyv2qdwV6wU.roa (raw, json)
Hash identifier: 8y1qmodCTXEdWfudBIOg5DrmRpEF6FezAaUs7Ropbsg=
Subject key identifier: 23:80:20:60:FC:7A:AB:E0:17:A8:23:8B:7F:2B:F6:A9:DC:15:EB:05
Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial: 019F23691E41550E5A19C5246FB402ADBC1C
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/I4AgYPx6q-AXqCOLfyv2qdwV6wU.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41732
IP address blocks: 2a03:9c00:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 18:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1e:41:55:0e:5a:19:c5:24:6f:b4:02:ad:bc:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23802060fc7aabe017a8238b7f2bf6a9dc15eb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:37:5e:f9:37:1e:5a:63:73:86:78:64:19:f1:
27:ed:7c:74:38:1d:6d:71:3b:85:50:0b:31:03:39:
97:5f:b0:37:a7:84:ba:8e:29:cc:23:1c:bc:66:62:
aa:0b:09:6a:c5:b3:65:36:4e:63:42:95:7d:13:af:
d4:ac:7f:f4:d1:2d:17:d5:35:c5:7d:c8:72:81:a6:
57:cd:67:7a:91:2a:13:af:67:83:31:28:f4:75:7d:
e1:95:a8:40:0a:6c:c5:83:d4:88:ca:3d:e6:71:0b:
c0:67:30:d5:af:64:24:40:60:d3:f8:f3:79:72:26:
1f:6a:98:b2:f7:0f:9d:60:e1:c2:81:c3:e1:da:ba:
20:66:50:0c:6b:db:f2:a3:b3:64:fa:7b:e8:22:f2:
02:22:24:61:52:c4:71:d9:52:dd:be:ab:81:cd:8b:
71:a9:81:67:0a:0a:7a:a9:79:86:b1:81:15:31:f9:
55:95:69:64:e7:4f:65:54:04:f0:80:f6:9f:fc:8c:
73:27:3c:ec:f3:05:aa:dc:74:5c:be:13:e9:93:ed:
af:4d:3d:70:99:64:3d:fa:0f:6f:50:e3:61:09:d5:
57:33:1d:7d:91:46:ba:8e:e5:7f:d8:83:e4:41:d1:
1e:c5:4c:4f:84:81:e4:14:30:ef:f6:d0:a7:36:23:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:80:20:60:FC:7A:AB:E0:17:A8:23:8B:7F:2B:F6:A9:DC:15:EB:05
X509v3 Authority Key Identifier:
keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/I4AgYPx6q-AXqCOLfyv2qdwV6wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:9c00:d::/48
Signature Algorithm: sha256WithRSAEncryption
17:b9:f0:a2:61:f4:1c:79:4d:e9:ea:84:fc:74:66:e6:15:f3:
75:70:ae:d6:89:97:d5:7a:85:b9:7b:1b:6b:82:8a:58:60:5a:
4e:94:a6:58:e9:ec:33:03:80:f2:db:44:02:26:ae:39:46:5d:
e0:89:48:a6:fd:44:82:24:04:e0:83:f9:79:60:72:16:ed:c7:
1d:03:5b:b0:ba:5d:d2:55:7e:7e:f6:df:be:92:c4:4b:5a:81:
06:6e:12:5d:11:3d:13:cd:6c:98:a7:48:59:5f:2e:61:f3:f0:
f6:61:c2:a8:a8:ea:13:99:a9:b0:e8:92:c8:02:28:31:2f:4f:
35:3a:b4:71:0a:53:0f:e0:e7:11:d1:73:6f:bc:e1:19:7e:94:
d0:b8:ee:74:18:43:dc:61:94:76:95:86:e5:e1:3a:a3:da:49:
79:97:14:e9:ba:2b:bf:70:33:69:38:37:07:9c:48:77:3d:14:
19:e9:ab:c8:1d:a2:9a:37:9a:97:6c:3a:b1:fd:ac:d3:4a:3f:
43:b6:a9:56:2f:50:68:d6:00:ae:1d:68:53:77:58:4a:ce:29:
3a:35:01:3b:2f:69:ea:46:89:d6:f9:9f:41:0d:49:0d:f0:db:
b3:a4:31:3b:5b:6e:79:c9:f8:f9:5d:ea:24:6b:7f:30:7d:17:
82:ca:75:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:17:45 2026 by rpki-client