Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/1p0RiyBFchvE7NhFhbA51Ectb08.roa
File: 1p0RiyBFchvE7NhFhbA51Ectb08.roa (raw, json)
Hash identifier: 2borQweYI7IpHIVDCEmYv8l+r/XVIWh005RBqdpqevc=
Subject key identifier: D6:9D:11:8B:20:45:72:1B:C4:EC:D8:45:85:B0:39:D4:47:2D:6F:4F
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 019F22FAB22108162ABA2029371397CF7437
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/1p0RiyBFchvE7NhFhbA51Ectb08.roa
Signing time: Thu 02 Jul 2026 13:18:02 +0000
ROA not before: Thu 02 Jul 2026 13:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a00:1cf9::/32 maxlen: 32
2a00:1cfa::/31 maxlen: 31
2a00:1cfc::/30 maxlen: 30
2a00:ace0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:fa:b2:21:08:16:2a:ba:20:29:37:13:97:cf:74:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: Jul 2 13:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d69d118b2045721bc4ecd84585b039d4472d6f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:c6:92:c5:4f:0d:ff:db:71:46:3b:a2:ef:
2f:8a:2e:31:1e:45:1d:eb:fa:57:36:5b:16:14:55:
c9:be:87:f9:26:ab:d0:dd:38:a9:67:b0:38:0a:78:
bf:8f:6d:6e:4d:a8:40:91:db:c7:ae:fb:7a:75:12:
7d:28:61:dd:7b:71:ff:77:50:2b:61:19:82:cc:80:
23:51:ad:38:03:46:1b:a2:cc:06:c9:c6:b5:d9:8d:
15:4c:69:09:c3:bf:04:8b:f9:0b:2f:d0:05:10:1a:
14:34:76:01:ff:57:d9:76:2e:59:a5:cf:ec:e9:82:
dc:9a:5c:c8:a0:bf:74:37:6d:7b:3e:f5:34:d5:16:
f4:8b:1c:a2:c8:0c:9a:8f:7b:a7:14:7d:80:34:b8:
10:e7:31:d4:96:9b:39:7b:5c:16:03:8b:2e:95:08:
4d:4f:39:88:89:18:86:15:5a:3d:5b:58:1d:a9:f4:
ad:46:64:e7:77:1e:44:64:fd:cd:3a:ea:a9:e7:0c:
7c:b8:4c:e9:c0:56:9c:fd:38:7a:76:68:f2:e8:9e:
39:b9:0a:b8:e8:2c:38:1e:50:10:6d:51:81:2e:90:
70:a5:81:da:b7:01:73:a5:89:90:4d:de:34:2c:27:
03:91:b7:cf:09:07:87:67:a1:62:65:f0:93:84:9a:
8d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9D:11:8B:20:45:72:1B:C4:EC:D8:45:85:B0:39:D4:47:2D:6F:4F
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/1p0RiyBFchvE7NhFhbA51Ectb08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1cf9::-2a00:1cff:ffff:ffff:ffff:ffff:ffff:ffff
2a00:ace0::/32
Signature Algorithm: sha256WithRSAEncryption
6e:4f:24:8c:bc:2d:b0:de:c6:b6:e8:52:60:28:23:3d:96:ec:
46:6b:e5:41:f8:00:7e:8f:06:d7:df:ff:fa:5f:f9:43:1e:45:
25:07:df:24:9f:be:cf:e0:ce:16:9a:fa:23:42:d4:24:33:e7:
55:9f:c2:19:ab:63:d2:61:8b:cc:ab:57:6b:87:bb:23:4c:3f:
ca:24:78:fd:38:61:c1:1c:c3:08:31:6e:60:de:d9:2f:95:2c:
39:dc:fd:15:15:46:9d:28:66:d0:f1:93:ce:57:b7:81:8e:64:
e4:c0:e7:d5:cb:f8:61:1c:bf:67:a5:fa:fc:5f:54:20:cf:9b:
fc:96:a7:d1:67:30:ee:1c:d5:d6:4b:2c:c9:67:7d:e6:c5:97:
2d:10:7d:fb:84:8f:34:24:a6:eb:af:70:55:98:b8:47:e8:61:
f1:94:cf:36:b9:bd:70:4d:bd:f1:ea:cd:77:33:ec:53:89:bb:
dc:63:04:01:67:e5:22:c3:0f:66:cc:0e:2a:5c:0c:0b:2d:de:
02:1f:82:b3:75:20:b9:19:9d:cd:ad:19:f1:50:66:b4:a8:97:
1f:c9:e9:cd:5c:e3:16:2f:a1:1e:a8:1b:15:32:9f:28:b8:5c:
6c:8b:b3:eb:4d:29:e7:dc:d3:9e:a2:05:67:9d:be:13:b1:41:
d1:ba:11:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:05 2026 by rpki-client