Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/ak2Qp1unBPBGGKshocpx5pL8uig.roa
File: ak2Qp1unBPBGGKshocpx5pL8uig.roa (raw, json)
Hash identifier: mOmd1/1RN87KSSOrhLIJgH1FH+upMs+93rOqXUD4go4=
Subject key identifier: 6A:4D:90:A7:5B:A7:04:F0:46:18:AB:21:A1:CA:71:E6:92:FC:BA:28
Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial: 019F23691EAAEBCE5F39019DCE484BDC7C0D
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/ak2Qp1unBPBGGKshocpx5pL8uig.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43443
IP address blocks: 2a03:9c00:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 18:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1e:aa:eb:ce:5f:39:01:9d:ce:48:4b:dc:7c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4d90a75ba704f04618ab21a1ca71e692fcba28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:15:6a:b0:4f:b4:9c:15:fa:aa:a7:80:b7:
74:a2:96:1f:7e:ea:8d:8f:2f:ce:ed:7f:b6:c2:ff:
0c:8f:8b:f1:54:14:f7:3c:bc:0e:99:2d:85:bd:d3:
19:d8:ed:25:f6:34:53:b2:fe:c6:3b:ed:2d:9c:b1:
80:e8:63:25:c6:7a:19:a5:49:74:79:70:14:7a:62:
14:47:35:82:16:81:22:85:13:48:a6:28:e7:89:e4:
a1:19:b7:8b:4c:35:c4:b7:68:27:5b:8d:6f:05:d5:
f0:28:05:63:7e:cf:aa:3c:2f:45:85:33:26:79:85:
94:c4:f0:dd:e8:5e:be:df:57:1e:16:be:a1:88:1a:
63:08:c6:bd:d0:06:c6:4e:61:47:d4:e5:b6:d1:57:
f2:f5:a8:40:76:77:f2:39:a4:8c:01:d4:dc:33:97:
b6:05:27:1b:2e:79:dd:23:72:af:04:55:c9:38:dc:
be:22:80:4c:71:ab:d0:fc:2f:73:b2:36:01:35:13:
dc:a2:22:a3:69:9d:f1:97:9c:9c:db:2d:12:b3:ca:
6c:0c:0e:9f:9e:9b:07:44:c7:fa:86:af:c9:02:1a:
57:48:69:38:21:c3:33:3d:b9:10:7a:75:df:5b:04:
1e:4e:a8:9c:65:aa:f7:9d:a9:35:09:44:90:6e:4b:
c9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4D:90:A7:5B:A7:04:F0:46:18:AB:21:A1:CA:71:E6:92:FC:BA:28
X509v3 Authority Key Identifier:
keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/ak2Qp1unBPBGGKshocpx5pL8uig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:9c00:a::/48
Signature Algorithm: sha256WithRSAEncryption
8f:4b:af:10:ff:0f:8c:ec:12:f2:19:67:60:55:91:33:72:42:
86:0c:8c:49:4a:c9:2d:bf:30:1a:77:56:2b:5a:a6:c5:c0:29:
da:e6:4c:35:01:c7:3c:6f:55:50:6a:a6:93:0e:37:ea:7a:7b:
96:36:e5:31:7d:91:7c:c8:39:7e:23:c9:21:a4:d4:b3:f8:b9:
33:4a:1a:52:69:35:fb:70:17:48:17:0c:86:3a:e8:d9:e9:05:
4d:0c:38:81:30:dc:28:37:b0:01:d4:f1:3a:ac:38:09:26:ea:
05:6a:4b:be:44:3e:27:dc:36:db:57:99:9d:f6:df:f0:3b:6d:
c0:34:2b:bd:36:b8:db:85:00:dc:81:48:1a:b6:65:ec:75:be:
1a:4f:49:8f:64:6c:a1:00:ee:09:1a:c8:e4:91:84:8a:7d:52:
4f:60:6b:53:b9:c8:3b:1d:98:e5:c2:05:8b:88:d9:bf:d4:3d:
2f:3d:b2:96:f8:52:f8:d5:88:09:74:9a:d1:1a:46:3e:71:bc:
76:8c:65:12:ce:03:fb:39:bf:c3:0d:ac:05:a8:0c:fb:ee:84:
36:9b:a2:b7:94:9d:2d:19:3e:f8:79:dd:21:e6:6b:17:8f:cb:
3e:c6:d2:74:c0:05:da:83:b4:ec:06:fa:91:81:cb:4e:b3:3a:
e6:66:02:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:17:46 2026 by rpki-client