Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/TXq41OJpiiStce3AQr_RGstn8ZU.roa
File: TXq41OJpiiStce3AQr_RGstn8ZU.roa (raw, json)
Hash identifier: 3P6YdvPURjNL2ftvcv6OGf8HEYCpwGLQS8LFvTEPzI4=
Subject key identifier: 4D:7A:B8:D4:E2:69:8A:24:AD:71:ED:C0:42:BF:D1:1A:CB:67:F1:95
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019F750D504AE39264A5354040E2F60AE271
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/TXq41OJpiiStce3AQr_RGstn8ZU.roa
Signing time: Sat 18 Jul 2026 11:47:14 +0000
ROA not before: Sat 18 Jul 2026 11:47:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204044
IP address blocks: 2a13:be40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:0d:50:4a:e3:92:64:a5:35:40:40:e2:f6:0a:e2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jul 18 11:47:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d7ab8d4e2698a24ad71edc042bfd11acb67f195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:f1:31:ec:b4:7c:a6:4d:ff:dc:13:f5:16:
3c:41:5d:2a:52:81:e2:59:75:2d:3d:9d:e6:15:35:
d7:28:28:7a:78:ea:f6:60:a5:e6:81:bc:aa:75:72:
90:67:33:b4:66:28:72:20:e4:e3:c7:90:25:8e:f9:
a7:36:46:68:2e:14:88:56:e9:c9:6f:44:3d:d7:42:
60:f7:a1:7c:7a:73:72:a5:30:a6:84:98:e8:b5:17:
02:a6:6f:69:66:d4:67:16:ba:53:61:96:ba:23:2e:
b9:4f:e7:b1:3a:43:48:c3:a2:ed:93:68:aa:3d:95:
59:12:c5:4b:90:f2:f9:e8:95:94:b5:0a:3b:45:fa:
aa:ca:22:90:32:f2:63:e8:0e:54:81:06:ca:bd:34:
08:62:37:93:23:ed:ed:73:59:a8:ce:7d:17:ed:65:
35:cd:fd:fd:d8:dd:d9:a0:d5:6e:52:a9:a0:05:6f:
24:7b:87:a5:79:ae:d5:db:e7:4e:c6:e1:cb:d1:95:
56:34:9a:21:b2:1c:3e:53:91:a7:cc:25:08:74:7d:
6b:dd:06:f2:d6:57:26:55:1f:8a:46:8c:a3:a1:98:
c9:f5:d7:f9:2d:39:b2:61:ea:4b:21:0d:b5:23:4f:
47:f8:f2:dc:f5:c8:3e:3f:29:72:15:00:1c:a8:1a:
8b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7A:B8:D4:E2:69:8A:24:AD:71:ED:C0:42:BF:D1:1A:CB:67:F1:95
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/TXq41OJpiiStce3AQr_RGstn8ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:be40::/29
Signature Algorithm: sha256WithRSAEncryption
49:01:09:05:93:78:d1:61:86:42:10:b1:3d:4b:cb:0c:c9:86:
0c:c0:2f:0b:7e:72:0a:ee:ea:20:ba:75:0f:29:0e:03:6c:17:
a3:f1:a6:dc:f8:99:20:33:55:24:b5:e4:e1:80:2b:d0:32:80:
92:c7:67:2a:40:32:71:a1:30:62:fc:fc:1a:95:4c:47:79:0f:
a7:4f:e6:e1:28:b1:93:08:20:f8:9e:f9:ee:24:e3:b7:19:cb:
19:b3:4e:8d:87:0b:ea:19:d3:57:fb:5b:c9:32:77:8a:00:b5:
54:32:a4:8c:25:8a:71:a5:d1:14:79:4c:cf:50:53:a0:a8:b1:
af:eb:a1:4f:7a:94:26:84:68:55:e1:e5:2d:c2:3b:89:29:7a:
ac:6c:64:31:a2:48:f8:6c:76:37:69:82:c8:7f:9a:2d:9e:1b:
2c:83:6e:c7:4b:b5:ca:aa:89:50:b9:81:3d:d6:86:82:33:18:
74:36:52:8e:26:41:6a:87:44:4c:f4:5c:0b:5a:7c:35:32:b8:
73:78:2e:23:cb:fb:43:45:da:1d:2e:91:b3:3d:44:f0:84:4f:
26:f1:f3:a0:68:74:97:4c:9b:29:b3:58:1a:ae:78:5f:c3:2e:
23:34:49:ef:4f:38:cc:19:60:c9:f8:7c:56:98:48:b0:e8:9e:
f8:3c:06:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:18 2026 by rpki-client