Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/7cTjsLRiYYSxjEiyyxvrM7VcUoM.roa
File: 7cTjsLRiYYSxjEiyyxvrM7VcUoM.roa (raw, json)
Hash identifier: 9oRDcj/n0yIWrTx9daAB6UyBKfL+1eMjORwY8HvJ18Y=
Subject key identifier: ED:C4:E3:B0:B4:62:61:84:B1:8C:48:B2:CB:1B:EB:33:B5:5C:52:83
Certificate issuer: /CN=63cb81a7af136d96f0c76051da6e4d05d1ff633d
Certificate serial: 019F23687E7BEC0CBE40BDD92E6F664A0BFB
Authority key identifier: 63:CB:81:A7:AF:13:6D:96:F0:C7:60:51:DA:6E:4D:05:D1:FF:63:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/7cTjsLRiYYSxjEiyyxvrM7VcUoM.roa
Signing time: Thu 02 Jul 2026 15:17:58 +0000
ROA not before: Thu 02 Jul 2026 15:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18622
IP address blocks: 2a02:e38:4100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7e:7b:ec:0c:be:40:bd:d9:2e:6f:66:4a:0b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63cb81a7af136d96f0c76051da6e4d05d1ff633d
Validity
Not Before: Jul 2 15:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edc4e3b0b4626184b18c48b2cb1beb33b55c5283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ab:cc:f7:0f:c8:f4:40:bc:ed:5d:d4:b7:b5:
90:3e:86:93:88:5f:da:05:ca:3e:da:fb:bb:15:a4:
77:9b:54:49:2e:43:e0:f7:64:5c:a9:0c:bc:cf:01:
48:fc:86:65:22:e0:c9:65:c1:96:de:c8:6a:f5:d8:
21:1d:b8:81:3b:6b:44:47:41:17:ba:81:2a:3a:67:
7d:92:54:f4:8b:2f:98:b0:14:5e:74:3f:32:d5:b4:
3b:18:da:8a:7d:c0:5e:ea:48:8d:19:ba:34:32:74:
1b:88:ca:49:ab:64:eb:58:52:a4:10:31:fd:c4:86:
cd:a3:05:c5:92:09:42:f1:a5:f5:bb:f7:1b:cb:8d:
99:da:8c:45:77:0d:79:50:89:cb:ad:1a:62:84:25:
e3:c5:dc:b8:8d:a2:6a:6a:10:7e:a8:6f:bc:e2:08:
67:1a:72:2d:2b:e5:c9:59:f9:be:62:a7:4d:bc:8a:
ac:15:20:e5:54:9a:cb:a1:f4:4f:70:75:5f:7b:10:
0d:9f:26:8c:5a:76:ae:78:d4:bb:e5:81:7e:db:98:
38:c7:08:bb:43:a0:d2:66:9d:16:fe:af:f5:41:13:
99:84:63:26:e0:49:c4:6c:e0:cc:4a:f4:d2:42:ff:
3f:a7:f5:a3:93:a2:e8:1b:f8:73:f9:91:11:1e:82:
1c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C4:E3:B0:B4:62:61:84:B1:8C:48:B2:CB:1B:EB:33:B5:5C:52:83
X509v3 Authority Key Identifier:
keyid:63:CB:81:A7:AF:13:6D:96:F0:C7:60:51:DA:6E:4D:05:D1:FF:63:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/7cTjsLRiYYSxjEiyyxvrM7VcUoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:e38:4100::/40
Signature Algorithm: sha256WithRSAEncryption
60:f4:80:bf:86:05:a3:3f:6b:a1:13:89:f9:ba:d7:e6:34:9b:
fe:af:ff:3d:1a:33:2e:22:2d:95:72:64:41:5b:78:fc:e6:fa:
0c:3c:6d:d3:cd:f3:aa:f4:ed:40:38:c7:67:74:bc:58:4e:2a:
65:8d:91:9e:36:13:f1:99:8a:38:5e:65:43:2b:6e:d9:86:c8:
0e:db:e8:e5:b1:2a:a1:6a:9a:1c:ae:a0:4f:36:75:31:c6:bd:
2e:c9:1e:11:55:06:f6:fa:88:f7:6a:8d:d2:12:40:41:cb:2d:
0a:8e:7f:b3:60:9f:8b:c9:6f:f1:7e:76:81:68:ec:66:7f:30:
31:f1:32:ca:04:40:a4:78:f2:7a:e4:e1:ed:ab:97:4a:03:f6:
41:ec:47:11:0f:b7:3e:5e:8d:68:1b:fc:af:a7:75:07:3d:31:
7a:66:62:0e:a4:c2:c1:35:65:35:65:81:f4:4d:ce:46:ce:66:
36:ee:c4:04:45:b0:bf:11:13:8c:3b:f8:0a:f1:e2:fb:aa:41:
85:ae:0c:54:e7:10:2f:96:3b:79:29:a7:77:de:ee:f6:ac:ab:
91:e5:75:a8:87:15:65:a6:52:d0:bc:dd:32:1d:97:a4:cc:e2:
fa:f4:7d:7c:8b:f6:23:c3:ad:3c:6b:a0:4a:94:ab:45:cc:c4:
ec:01:33:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:45:24 2026 by rpki-client