Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/tP4qHEtDUQvjf36iOnLV45cOf2o.roa
File: tP4qHEtDUQvjf36iOnLV45cOf2o.roa (raw, json)
Hash identifier: 5UJ1b7p3+0n6ZdGAJbovENFOUwGoBnRF0QiPojOFI5o=
Subject key identifier: B4:FE:2A:1C:4B:43:51:0B:E3:7F:7E:A2:3A:72:D5:E3:97:0E:7F:6A
Certificate issuer: /CN=cc78da5b265eb56a646a7841d1e762a6819d198e
Certificate serial: 019FDE317609D64F2617FEE9B5D1B0ACAF7F
Authority key identifier: CC:78:DA:5B:26:5E:B5:6A:64:6A:78:41:D1:E7:62:A6:81:9D:19:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHjaWyZetWpkanhB0edipoGdGY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/tP4qHEtDUQvjf36iOnLV45cOf2o.roa
Signing time: Fri 07 Aug 2026 21:46:51 +0000
ROA not before: Fri 07 Aug 2026 21:46:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200279
IP address blocks: 2001:678:d84::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHjaWyZetWpkanhB0edipoGdGY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:de:31:76:09:d6:4f:26:17:fe:e9:b5:d1:b0:ac:af:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc78da5b265eb56a646a7841d1e762a6819d198e
Validity
Not Before: Aug 7 21:46:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4fe2a1c4b43510be37f7ea23a72d5e3970e7f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:70:8b:fa:47:5d:09:3f:16:16:f4:6f:f0:
a9:52:bd:0b:37:4d:2b:02:38:2c:29:36:82:79:f2:
8e:f8:f8:e4:df:63:5f:76:f1:0d:d2:22:ec:27:d9:
61:72:58:85:28:83:9a:2e:eb:4f:ff:90:e0:82:5b:
d7:f1:b8:e5:e3:17:b6:b2:30:e2:e0:58:0d:81:5f:
52:73:cb:d0:30:1f:87:24:b6:d3:be:5c:bb:8c:00:
70:55:0e:0c:79:f3:ee:dc:40:e6:70:2b:c9:ff:0f:
b3:26:ed:dd:7b:8b:36:cb:75:30:70:da:05:17:b5:
fc:28:db:24:87:e4:37:c9:df:47:56:46:ac:aa:b1:
f4:0c:a4:8a:68:ce:dd:31:8f:49:ba:79:21:0c:de:
8b:98:ad:ef:36:9c:6f:f0:85:04:a3:78:a6:a3:1b:
df:8a:0d:f7:10:ba:f7:15:3e:c8:81:f9:bf:85:d6:
e8:a5:db:c7:02:1f:13:6a:1c:b6:dc:6c:34:e4:7f:
ea:1a:14:5e:4f:9b:5b:d6:78:41:fc:ab:2e:4b:a1:
b1:eb:3b:52:f5:9a:65:5c:57:9e:d5:29:fe:05:d4:
c2:c3:b5:b6:4b:75:42:24:33:16:b2:a4:a7:9c:29:
35:22:9b:76:29:10:01:ea:ab:55:42:a8:9a:bb:96:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FE:2A:1C:4B:43:51:0B:E3:7F:7E:A2:3A:72:D5:E3:97:0E:7F:6A
X509v3 Authority Key Identifier:
keyid:CC:78:DA:5B:26:5E:B5:6A:64:6A:78:41:D1:E7:62:A6:81:9D:19:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHjaWyZetWpkanhB0edipoGdGY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/tP4qHEtDUQvjf36iOnLV45cOf2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d84::/48
Signature Algorithm: sha256WithRSAEncryption
53:8a:a3:d2:fd:05:40:0d:4d:74:74:6d:e0:90:4c:a1:18:dd:
d8:10:f0:be:76:41:48:36:18:d9:d2:32:7c:ab:f0:b7:87:cb:
37:4e:a0:2a:49:c9:95:62:02:6d:3a:27:00:97:3d:15:09:37:
0c:24:bc:63:60:87:8f:7c:0a:61:9e:b6:36:f7:87:fa:71:0a:
b4:ae:2f:c0:89:27:f1:97:2f:c1:23:b6:46:73:3a:e1:58:c0:
9a:59:1d:89:48:10:48:fe:4a:61:30:4f:9d:5a:6c:b8:05:d7:
de:05:47:6b:29:de:04:6c:7e:04:47:98:71:79:40:df:3e:a2:
74:81:7b:bb:1b:4f:1f:22:39:8e:24:cd:44:2c:4b:65:bc:0a:
af:65:f6:cc:91:7e:5c:66:64:74:a8:24:ab:52:89:25:cc:cf:
c2:e2:10:52:a6:cf:45:7b:16:c9:54:12:a5:55:5c:ba:64:46:
1c:b3:28:fc:19:72:f9:98:ff:c1:b1:88:03:02:08:6e:8f:de:
1d:a2:b7:12:d3:1e:49:08:38:07:e6:c3:49:a6:82:28:5c:80:
5f:f5:af:5d:7f:8e:98:a3:09:38:f3:b7:17:6d:df:29:ee:06:
f8:48:94:cb:cb:85:2f:e2:69:12:6b:2f:aa:cf:0e:d9:91:d7:
d1:ce:15:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:26:52 2026 by rpki-client