Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/RvRvHV0x6ysxbxULvf_1qstGWqs.roa
File: RvRvHV0x6ysxbxULvf_1qstGWqs.roa (raw, json)
Hash identifier: s2EDZjdZarn3X1PV3ipDQ4y//AUVQJ/pruUyN3ZV/wo=
Subject key identifier: 46:F4:6F:1D:5D:31:EB:2B:31:6F:15:0B:BD:FF:F5:AA:CB:46:5A:AB
Certificate issuer: /CN=fd1b8d3d0507666f3bb03c9a58657dc529757d97
Certificate serial: 019FB8C57253D4985FDE8C4A9A87DD7CE59C
Authority key identifier: FD:1B:8D:3D:05:07:66:6F:3B:B0:3C:9A:58:65:7D:C5:29:75:7D:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RuNPQUHZm87sDyaWGV9xSl1fZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/RvRvHV0x6ysxbxULvf_1qstGWqs.roa
Signing time: Fri 31 Jul 2026 15:22:55 +0000
ROA not before: Fri 31 Jul 2026 15:22:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219090
IP address blocks: 2001:678:12d8::/48 maxlen: 48
2001:678:12dc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RuNPQUHZm87sDyaWGV9xSl1fZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b8:c5:72:53:d4:98:5f:de:8c:4a:9a:87:dd:7c:e5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1b8d3d0507666f3bb03c9a58657dc529757d97
Validity
Not Before: Jul 31 15:22:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46f46f1d5d31eb2b316f150bbdfff5aacb465aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:14:da:3f:46:1a:09:a5:fd:22:39:b1:af:
71:27:5d:30:22:ff:b8:c8:31:06:58:ea:f6:c3:ba:
2b:13:7f:bd:8b:7d:f8:b3:c8:1b:28:75:03:df:24:
fe:c1:27:78:b2:7c:6e:c6:98:88:20:3a:ba:d5:88:
1f:26:93:8e:8a:6e:b9:da:92:c6:a8:3f:69:05:61:
09:25:15:94:4b:14:7b:7f:e9:4f:a5:fb:6e:23:db:
c1:b3:0c:04:51:dd:d1:85:c6:4e:8b:6a:9d:87:b0:
46:99:46:81:ee:f5:3e:31:5b:3b:4c:a0:3b:4c:42:
69:c8:95:a7:09:58:ef:b5:ca:a7:51:ec:57:8a:e9:
f5:89:a4:21:35:cc:66:92:0a:e0:21:db:f5:28:b7:
f2:37:ec:74:75:e2:90:e2:16:6a:28:bc:f7:02:f4:
1c:f2:79:65:9d:cc:94:b3:f7:59:24:51:1d:a1:b5:
09:ae:d5:7f:0b:92:a9:b1:9f:cd:9f:51:fb:2f:7a:
84:5f:3e:49:4e:bd:d4:f4:d5:c4:ef:20:90:df:b1:
33:94:56:e5:90:a5:c3:b8:ec:a3:a9:aa:96:ea:ef:
2b:d2:e7:67:51:fa:a3:52:e4:c2:73:83:9f:5c:bc:
40:cd:66:6b:21:5a:d0:a6:87:ad:78:51:18:58:10:
16:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F4:6F:1D:5D:31:EB:2B:31:6F:15:0B:BD:FF:F5:AA:CB:46:5A:AB
X509v3 Authority Key Identifier:
keyid:FD:1B:8D:3D:05:07:66:6F:3B:B0:3C:9A:58:65:7D:C5:29:75:7D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RuNPQUHZm87sDyaWGV9xSl1fZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/RvRvHV0x6ysxbxULvf_1qstGWqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:12d8::/48
2001:678:12dc::/48
Signature Algorithm: sha256WithRSAEncryption
a6:97:a5:dc:a2:06:1d:80:72:b7:52:2c:63:a4:6e:33:aa:f5:
a4:93:d0:a1:9c:e2:ae:43:53:0a:b3:d9:c0:d1:95:5e:1a:59:
87:af:42:3d:4b:0e:88:f8:0c:58:75:85:7e:20:21:ae:76:3f:
e2:96:37:ac:05:04:4f:99:b8:db:4b:67:a0:0a:92:e1:da:19:
43:de:77:7d:ba:47:7d:bf:87:34:05:40:fe:d9:01:de:0e:48:
21:d6:4e:9c:5d:59:2b:0f:08:97:6c:24:38:71:91:cf:a5:b1:
23:ac:b7:aa:12:30:30:68:64:0a:80:df:da:e0:d5:3d:08:8d:
4c:96:8d:3a:e8:c9:1e:6e:b7:a3:f4:96:91:0e:d2:0f:66:c6:
07:ca:db:92:68:10:21:77:f9:d0:7a:14:5e:d8:ff:f6:77:f9:
63:53:e3:3a:25:d9:f0:34:cd:b4:ce:fa:04:7d:16:cc:e2:35:
8a:82:1f:50:76:c5:ab:a9:17:9e:ec:86:3a:a8:7e:ec:61:84:
a0:b6:c8:ba:00:26:a8:40:fc:4e:cd:1b:19:ab:33:38:88:87:
8f:17:00:39:ea:fa:8b:6f:ac:f6:08:1b:e9:23:6d:2e:80:36:
17:d4:1a:03:84:93:05:62:54:8f:7d:a9:dc:b9:54:c9:36:2d:
10:92:df:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:47:27 2026 by rpki-client