Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/dWX59-IgymwSWp5lVJHTizv1LNg.roa
File: dWX59-IgymwSWp5lVJHTizv1LNg.roa (raw, json)
Hash identifier: 7OpM1Q/nHvN11x8BC9ZSmIDVqJ0iu0AQ8UlElrKQjM4=
Subject key identifier: 75:65:F9:F7:E2:20:CA:6C:12:5A:9E:65:54:91:D3:8B:3B:F5:2C:D8
Certificate issuer: /CN=62edf62a818862a6d20f7d7bf1d2f31f92920c3f
Certificate serial: 019F23684696DB91E84452A46D53BD1E9BC4
Authority key identifier: 62:ED:F6:2A:81:88:62:A6:D2:0F:7D:7B:F1:D2:F3:1F:92:92:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yu32KoGIYqbSD3178dLzH5KSDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/dWX59-IgymwSWp5lVJHTizv1LNg.roa
Signing time: Thu 02 Jul 2026 15:17:44 +0000
ROA not before: Thu 02 Jul 2026 15:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215692
IP address blocks: 2001:678:10d4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/Yu32KoGIYqbSD3178dLzH5KSDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/Yu32KoGIYqbSD3178dLzH5KSDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yu32KoGIYqbSD3178dLzH5KSDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:46:96:db:91:e8:44:52:a4:6d:53:bd:1e:9b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62edf62a818862a6d20f7d7bf1d2f31f92920c3f
Validity
Not Before: Jul 2 15:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7565f9f7e220ca6c125a9e655491d38b3bf52cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:58:3a:9b:6e:ee:4b:c7:33:91:37:5c:d3:67:
d2:7f:5f:95:5a:eb:17:38:c8:8c:98:4a:73:6b:3f:
e7:62:72:e0:f0:ba:19:dc:b2:9d:fa:c8:17:cd:4b:
ef:59:cd:cd:67:04:b4:6b:e9:12:02:e4:38:f8:fa:
88:ce:ba:89:f3:e6:13:18:2f:e0:ac:57:0e:37:bc:
56:e7:3c:0b:b6:34:3c:54:4d:07:b1:dd:cc:0b:c8:
60:13:1c:97:ef:8d:d3:e9:31:6b:25:df:5b:ae:d0:
8b:d6:2a:78:db:93:ac:92:25:d2:ab:c9:09:57:28:
9f:51:a3:c8:94:7b:53:9a:86:ea:9a:85:6d:ca:3b:
17:c9:81:49:10:f3:51:b5:66:64:1c:c6:5a:2f:de:
40:40:14:63:a7:41:06:ca:23:72:ed:41:11:17:2c:
e2:6a:e1:2c:36:32:b7:42:f2:b3:ad:e4:0c:29:da:
26:39:22:a4:ea:67:82:cd:eb:3b:56:77:bc:70:ce:
b0:89:7f:c4:16:5c:11:0b:0f:2a:7b:19:fc:0c:fb:
af:0e:bb:80:5f:36:a3:44:93:26:ee:6a:4e:78:12:
97:64:ab:29:f3:cf:f3:b9:31:32:d1:50:24:6d:3b:
f6:2d:81:97:4a:bf:ec:3c:1e:cb:37:32:13:ad:42:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:65:F9:F7:E2:20:CA:6C:12:5A:9E:65:54:91:D3:8B:3B:F5:2C:D8
X509v3 Authority Key Identifier:
keyid:62:ED:F6:2A:81:88:62:A6:D2:0F:7D:7B:F1:D2:F3:1F:92:92:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yu32KoGIYqbSD3178dLzH5KSDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/dWX59-IgymwSWp5lVJHTizv1LNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/Yu32KoGIYqbSD3178dLzH5KSDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:10d4::/48
Signature Algorithm: sha256WithRSAEncryption
0d:c5:10:d0:69:8d:05:17:2e:ad:a6:6c:8f:8a:36:77:d0:c7:
13:bd:f0:d0:b8:10:00:3e:4b:33:09:71:4e:69:40:ca:a8:8d:
12:46:53:2e:39:16:2c:ca:b6:6b:b6:44:0d:f3:5d:71:2e:47:
d9:b8:d2:5d:b0:bc:70:e8:c6:83:a1:42:5d:ba:33:75:e0:aa:
ea:86:51:02:a2:f2:e2:30:b4:f0:1a:c9:3a:ad:e8:41:3b:b9:
3d:40:78:7d:11:ec:7b:9a:de:4d:38:a9:af:2d:e4:ff:9d:56:
f1:f2:47:6b:c3:6b:c4:07:d3:8d:a1:cd:61:54:4d:b9:f3:7b:
28:67:d4:73:a7:a6:5e:b7:dc:9a:c0:96:26:e4:f6:16:0f:96:
36:7b:9f:47:df:10:31:c1:7d:e2:16:bd:63:d2:b2:92:ee:15:
ea:d2:e6:74:9b:f9:cc:b8:59:59:3d:0d:2c:54:b6:3e:90:76:
96:d2:0a:88:51:38:fe:b4:3b:19:fd:3c:4b:c1:37:58:f2:7d:
41:0e:d4:d2:d6:3c:28:56:ba:4f:1c:62:ed:ce:89:55:3b:67:
3b:13:56:c7:71:6c:71:c3:2b:2a:78:d4:78:e2:1d:f5:63:e3:
02:57:9e:ab:48:a8:6a:78:71:a8:63:da:5a:94:e2:81:e5:4d:
34:4e:e9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:57:55 2026 by rpki-client