Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/PIgUPxi7GaHoTA2H6HevNvDWy3o.roa
File: PIgUPxi7GaHoTA2H6HevNvDWy3o.roa (raw, json)
Hash identifier: M5GWr7SAUmVX904a5g1oxNLpt0yF4PMPyRfvanFYdSs=
Subject key identifier: 3C:88:14:3F:18:BB:19:A1:E8:4C:0D:87:E8:77:AF:36:F0:D6:CB:7A
Certificate issuer: /CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Certificate serial: 019EF22A3EDAB9AEABC83BF5D7A5029FEED8
Authority key identifier: 2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/PIgUPxi7GaHoTA2H6HevNvDWy3o.roa
Signing time: Tue 23 Jun 2026 01:48:35 +0000
ROA not before: Tue 23 Jun 2026 01:48:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197261
IP address blocks: 2a11:1fc0:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f2:2a:3e:da:b9:ae:ab:c8:3b:f5:d7:a5:02:9f:ee:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Validity
Not Before: Jun 23 01:48:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c88143f18bb19a1e84c0d87e877af36f0d6cb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:08:b0:a6:c3:65:ac:27:2c:1e:83:d2:3e:
74:16:b6:5b:ea:cb:0d:0a:46:e6:f0:42:a4:d2:77:
ca:4f:97:90:07:47:9c:68:7b:95:cc:53:2e:99:78:
57:04:b7:32:4c:31:59:69:ac:73:f4:a8:c8:8d:9d:
0e:03:d4:8c:7f:0a:b3:07:a2:e0:2c:e6:2b:4b:58:
ee:31:13:00:0d:d4:14:a3:0f:3c:f4:35:8b:7d:e7:
54:96:20:8d:c9:0c:cc:3f:fc:5f:f5:29:94:f3:46:
ca:75:75:eb:bf:2c:d9:d2:c9:80:aa:fd:9d:95:ab:
32:f1:22:2d:69:56:c0:d5:fd:73:ce:a2:90:15:5b:
3e:34:8e:11:1d:c1:5b:89:da:49:04:cc:d3:c2:9d:
45:a0:96:08:5e:04:79:28:24:30:81:f9:87:5d:bc:
4d:08:91:ce:9c:70:44:3b:d7:2b:b7:52:51:7c:20:
20:ce:65:33:2a:0e:cb:6e:86:d2:c9:94:32:e8:77:
38:57:1f:64:d3:c5:e7:32:2c:02:2d:48:f9:33:ec:
42:9b:69:cf:cc:4e:e5:46:fb:be:e2:aa:71:15:eb:
16:16:11:44:9a:03:a8:86:e2:6c:17:9f:24:9c:15:
50:c5:d5:46:a6:34:b3:81:60:a1:d8:d3:8c:56:98:
80:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:88:14:3F:18:BB:19:A1:E8:4C:0D:87:E8:77:AF:36:F0:D6:CB:7A
X509v3 Authority Key Identifier:
keyid:2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/PIgUPxi7GaHoTA2H6HevNvDWy3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1fc0:10::/48
Signature Algorithm: sha256WithRSAEncryption
1a:5f:40:cf:b4:1d:9a:66:82:e8:6e:a1:c2:f1:97:35:65:6a:
54:35:6e:3f:3b:7d:df:68:91:c6:51:55:33:73:45:e4:e7:8a:
08:29:1f:7a:ee:88:79:f0:af:08:42:24:02:d5:f2:3f:4b:04:
c8:d1:85:24:43:09:b3:df:19:94:73:76:03:d3:0a:59:05:b6:
b2:74:18:98:f7:a7:3a:89:d5:99:1a:4c:7a:7c:fa:d1:8b:ed:
22:f1:1e:b3:69:63:22:80:8d:22:ba:be:50:0e:d1:62:08:71:
e2:36:4f:53:f1:52:a6:ce:3e:37:99:5b:ad:99:d4:cc:8d:d5:
87:81:f7:fe:22:c8:17:fd:72:81:09:5b:9f:b5:c6:af:e7:96:
2c:ed:be:47:7c:bb:92:10:02:ec:1d:48:01:49:fe:52:a4:f9:
f6:c4:17:67:15:ba:8e:41:62:d0:e6:01:26:cb:cf:bf:ba:57:
ac:dc:91:42:20:6e:6d:37:f2:de:b0:02:98:a9:e3:8f:fb:03:
6a:51:9c:db:59:9c:17:5e:a7:d8:6f:ff:ac:4b:3f:46:90:7d:
96:2d:63:f7:38:93:d9:0c:d8:d1:10:f0:05:ae:57:cf:ce:53:
ea:dc:83:b1:73:bd:dd:ba:8f:32:3b:a2:d7:1e:03:19:89:b4:
58:74:bb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:12:13 2026 by rpki-client