Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Uo1B8ZqW8ahN3n4iMgkQ9E5NMA8.roa
File: Uo1B8ZqW8ahN3n4iMgkQ9E5NMA8.roa (raw, json)
Hash identifier: jK+oCYMLPr8WRuiPIxuvKDK2N1EAkUXmk9TrZ4+llQU=
Subject key identifier: 52:8D:41:F1:9A:96:F1:A8:4D:DE:7E:22:32:09:10:F4:4E:4D:30:0F
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019F172983250E49D0EDD88C28098D718186
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Uo1B8ZqW8ahN3n4iMgkQ9E5NMA8.roa
Signing time: Tue 30 Jun 2026 06:13:44 +0000
ROA not before: Tue 30 Jun 2026 06:13:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18978
IP address blocks: 2a10:a9c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Jul 2026 06:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:29:83:25:0e:49:d0:ed:d8:8c:28:09:8d:71:81:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jun 30 06:13:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=528d41f19a96f1a84dde7e22320910f44e4d300f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:31:f1:d8:2b:dd:cf:c9:9e:84:e6:05:03:bf:
65:7c:34:57:b0:ca:98:42:1f:40:91:57:45:cc:23:
47:be:c3:19:1a:f0:17:1f:04:41:9f:8c:2d:ec:80:
14:c5:95:c9:3d:22:f9:94:9b:97:f4:bb:bc:4b:a6:
f9:18:f3:e7:5a:74:d7:5b:18:73:d6:57:fe:88:11:
f1:6b:5e:97:3d:9d:c8:80:aa:69:7f:dc:54:7b:5b:
ac:30:4a:cf:94:73:b6:8d:ca:c9:b0:1c:67:9b:80:
e0:b5:c4:cd:71:06:51:0b:a4:09:d7:8f:a2:4d:4d:
95:7f:14:a8:24:d4:19:97:5e:09:aa:c6:3d:33:f8:
84:a9:d9:7d:15:b5:31:b1:27:25:61:90:92:07:4d:
4e:83:ef:33:61:f1:60:7b:d8:1d:73:f9:83:04:c9:
10:29:97:4c:47:bf:c0:8b:80:c2:21:cf:b3:c4:24:
24:f0:1d:1a:0c:b5:26:4a:8d:cc:51:7e:7a:dc:dd:
85:58:16:7d:13:8c:d3:25:30:9b:c3:0b:cd:cf:34:
a3:6c:f1:be:25:66:4c:14:c1:e1:87:85:aa:bd:d8:
96:23:03:7d:91:ea:74:15:4b:a4:c8:19:af:ba:13:
25:f5:16:5e:20:3c:09:3b:34:82:98:16:5c:72:7b:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8D:41:F1:9A:96:F1:A8:4D:DE:7E:22:32:09:10:F4:4E:4D:30:0F
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Uo1B8ZqW8ahN3n4iMgkQ9E5NMA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:a9c0::/29
Signature Algorithm: sha256WithRSAEncryption
ca:41:4b:b4:01:7f:2e:29:2d:d6:d7:b1:e9:c9:15:86:6d:57:
29:30:95:09:22:c4:12:69:c9:76:5f:46:54:b6:fd:ee:e7:41:
53:28:ba:fa:53:aa:79:67:07:94:c5:e9:c6:f3:f7:85:00:e6:
76:d5:d4:00:c9:85:e8:a1:5c:09:71:2c:80:2c:41:e9:50:ff:
aa:05:dd:14:7b:36:b5:2e:e0:f5:f8:ab:b7:78:50:b4:38:88:
62:a7:5d:8e:4d:a2:07:c2:64:1c:db:96:82:0f:72:10:59:1b:
43:39:02:1c:4d:48:8d:f5:c8:58:90:a8:4b:64:68:1a:30:d3:
b8:98:c1:ad:0d:79:b7:c4:ed:97:17:af:bb:64:f3:56:25:b0:
65:83:b2:f4:14:74:64:f7:cf:f8:da:10:50:87:0d:34:12:5d:
e5:04:1a:e7:a1:87:ec:bb:29:06:6b:c2:84:9a:31:00:a0:c2:
8e:60:80:ab:ef:e7:0c:46:bd:3a:c6:eb:05:d7:d4:40:0d:1d:
6b:fa:49:ce:da:d8:cd:03:6a:ea:70:6b:59:7e:42:bd:70:74:
31:ba:bf:bb:42:e6:0f:d8:0b:0c:fc:78:b0:3a:18:d2:f4:8a:
f1:f0:50:5e:5c:d4:fd:9a:06:20:55:09:3d:54:46:a5:41:c4:
7b:a1:60:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 12:15:35 2026 by rpki-client