Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/IImcDwTRjV5S2hSkvanjJzEZRso.roa
File: IImcDwTRjV5S2hSkvanjJzEZRso.roa (raw, json)
Hash identifier: fYRbrJDX5v1EPJ24DqNbJfkEqogMDvRGvgvScEndNQg=
Subject key identifier: 20:89:9C:0F:04:D1:8D:5E:52:DA:14:A4:BD:A9:E3:27:31:19:46:CA
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 019F37AE358FB8E62CB7299E585E879BCCDF
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/IImcDwTRjV5S2hSkvanjJzEZRso.roa
Signing time: Mon 06 Jul 2026 13:46:31 +0000
ROA not before: Mon 06 Jul 2026 13:46:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402642
IP address blocks: 2a0f:5f00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:ae:35:8f:b8:e6:2c:b7:29:9e:58:5e:87:9b:cc:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Jul 6 13:46:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20899c0f04d18d5e52da14a4bda9e327311946ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:5b:0b:ca:5b:b8:46:db:a0:4f:03:af:01:
b0:c0:66:9d:b4:87:23:63:ff:2e:57:df:7b:d9:9b:
8b:e0:93:54:3c:ba:10:fe:12:d4:a1:3f:b2:d3:84:
31:79:7b:c6:1b:69:02:1d:2a:0b:02:cd:99:4e:ae:
de:19:d5:e5:90:98:13:8b:30:ee:00:23:ca:d0:e1:
8a:74:47:cb:e4:91:8c:60:9f:bd:52:02:52:7b:3a:
9f:79:dc:98:04:b6:2b:79:18:62:9a:17:7d:0a:03:
fc:80:df:6c:9c:e4:58:32:58:87:63:6a:82:61:96:
6d:c4:e8:87:b8:91:ef:91:f4:23:45:49:4a:42:d8:
cd:ff:cb:77:4c:0b:2f:11:14:30:98:b7:16:2c:66:
6c:f5:dd:7f:b8:d4:65:bd:3b:4b:e9:c4:99:b1:00:
14:e3:f6:ba:92:21:b4:9b:62:ee:fb:91:46:0d:0e:
c9:48:17:66:d7:6e:b5:9b:6a:7c:4c:80:53:a3:06:
8b:e0:67:4c:19:67:0a:cb:5f:6c:d6:ef:d1:c1:32:
6f:fe:30:25:68:45:18:c9:1a:52:4e:1c:fb:ff:ed:
40:18:99:8b:63:58:2f:68:d2:e3:02:9f:c4:33:1d:
1a:e1:27:86:68:dc:02:c4:2b:95:bb:b2:5e:e9:4c:
d3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:89:9C:0F:04:D1:8D:5E:52:DA:14:A4:BD:A9:E3:27:31:19:46:CA
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/IImcDwTRjV5S2hSkvanjJzEZRso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5f00::/29
Signature Algorithm: sha256WithRSAEncryption
1a:5a:58:6c:7d:e3:d4:99:59:82:17:a1:81:bb:b1:be:a1:b1:
4b:b6:10:ad:fb:30:f8:4b:53:1f:47:e0:1e:af:40:4f:17:e2:
4d:46:31:17:71:fb:65:ce:3f:52:f7:93:44:2e:88:2c:61:50:
e2:55:b2:43:db:dc:bc:f9:3d:db:10:68:bc:87:24:87:b9:48:
a9:20:d1:5f:32:ef:ad:b9:56:1b:ea:c0:9e:0f:6d:56:69:ad:
26:bd:13:09:03:a5:12:1d:a5:ab:34:fe:87:3a:49:97:24:7b:
98:3a:1d:56:88:ec:9e:f7:7c:d6:b5:5a:c6:14:66:6d:8d:76:
de:ad:87:b7:61:df:51:61:2d:8b:71:eb:df:fe:b8:f1:3b:ff:
3e:cc:89:0a:92:fe:0a:c1:ed:c3:f0:2b:a2:43:65:83:2b:e1:
ce:53:1a:41:76:99:d0:97:10:00:f2:f7:d7:99:c4:ec:4c:fc:
95:45:72:ee:27:11:5e:04:50:83:f5:a1:4e:44:20:a2:a7:2e:
36:18:fd:56:b6:50:bd:3c:d7:8b:ec:1b:3e:e1:ed:61:ac:f3:
ef:d9:cb:6b:08:20:79:86:b1:db:66:50:c8:80:c2:68:4b:95:
f6:9c:5f:ea:92:6c:8b:d4:06:c8:ae:f0:b7:bb:26:3c:7b:f6:
d2:b0:26:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 18:33:18 2026 by rpki-client