Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/9hJyXFEGKC0Z765s7hAkXGja76c.roa
File: 9hJyXFEGKC0Z765s7hAkXGja76c.roa (raw, json)
Hash identifier: CcUd52fsDtIvhBw4ZtrUTnehAtW2qFYimX7tcrpnABQ=
Subject key identifier: F6:12:72:5C:51:06:28:2D:19:EF:AE:6C:EE:10:24:5C:68:DA:EF:A7
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01A020AAED1D1EC79E66DC79B83A359EBED7
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/9hJyXFEGKC0Z765s7hAkXGja76c.roa
Signing time: Thu 20 Aug 2026 19:34:27 +0000
ROA not before: Thu 20 Aug 2026 19:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40662
IP address blocks: 2a0b:b480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:aa:ed:1d:1e:c7:9e:66:dc:79:b8:3a:35:9e:be:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Aug 20 19:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f612725c5106282d19efae6cee10245c68daefa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:1a:f3:5e:9f:14:d8:94:be:0a:6e:17:28:
96:60:07:75:95:ff:6a:1a:6b:37:45:fa:1f:f0:30:
c5:d5:8c:5f:45:01:6f:db:0d:0c:71:6b:19:a7:03:
84:4b:b2:93:12:a7:91:8f:57:3d:de:2a:55:9f:e7:
8e:73:c7:c8:40:00:cc:c7:ff:3b:50:75:14:90:f2:
ed:05:27:bc:c0:56:1b:c4:ba:f4:6d:1e:19:05:e3:
85:e5:be:c3:ea:8d:fd:18:f7:1b:08:bf:3c:50:4e:
e3:c4:be:16:58:a5:4e:f0:21:73:5f:12:f5:29:14:
57:b7:59:a3:66:97:56:73:fd:c6:0c:4f:ef:b2:fe:
52:6c:d5:a4:38:c4:26:fc:7e:3f:b3:d4:41:1b:da:
a9:5e:13:e4:b6:0b:f2:f6:5d:65:f2:8a:46:3f:2b:
cb:d9:1f:6c:8e:62:1b:7d:06:e7:81:fa:e9:f5:34:
90:1a:36:7e:92:ab:93:86:d5:14:e9:ef:6f:7c:e1:
47:48:34:a3:0e:6b:e2:43:c4:4c:e9:7b:e1:50:16:
10:93:1f:4c:2a:c0:88:a5:d1:ed:e7:a0:46:a0:cc:
f5:a7:69:3e:65:43:75:81:d7:e8:f1:27:5d:d8:bb:
40:e6:2c:1b:e6:b4:d5:92:8e:58:76:a0:2e:6b:21:
a2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:12:72:5C:51:06:28:2D:19:EF:AE:6C:EE:10:24:5C:68:DA:EF:A7
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/9hJyXFEGKC0Z765s7hAkXGja76c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b480::/29
Signature Algorithm: sha256WithRSAEncryption
74:21:3e:c5:78:ed:2e:8b:60:71:53:b9:01:56:0d:18:70:1a:
8a:ff:4b:15:7f:a3:05:14:fb:28:a8:96:d8:1e:4a:18:f2:54:
d2:d8:68:bd:cc:5d:5f:15:4e:71:5e:2a:6e:5b:1f:6b:58:92:
60:d1:8b:47:05:e5:4b:64:9b:86:a3:13:41:d5:43:c7:d3:73:
68:61:3a:8b:c9:e6:d2:03:44:48:4c:87:40:ae:e3:2e:ad:df:
8f:c4:e2:c0:d2:cd:7a:0e:f3:a8:8c:51:11:fa:e4:78:a9:42:
94:df:64:73:77:82:86:07:9b:60:70:5d:1d:1b:32:97:bc:af:
97:b1:61:65:4a:69:be:02:ca:d0:2c:1b:96:f2:d4:ed:5b:57:
e8:b9:08:b6:0f:ea:d0:6f:79:1d:ea:36:f8:4c:04:76:ca:68:
e4:95:44:77:94:63:ac:02:d4:70:cb:5f:fc:9d:26:90:0e:53:
3d:9c:f7:de:33:04:28:95:21:80:b6:d6:05:fd:aa:8f:ec:4f:
f3:76:ae:57:d6:34:95:58:4b:cf:c1:1c:0f:e0:4e:96:22:d2:
c8:50:8a:64:dd:02:d6:57:0a:df:d1:a2:c1:99:d2:2c:3c:2a:
05:32:38:f4:3b:24:16:dc:a2:a0:c5:5b:35:a8:11:47:69:c8:
5c:ef:98:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:34:42 2026 by rpki-client