Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/xfzSJZkuJaEFMZbSPNrdm-vtVgk.roa
File: xfzSJZkuJaEFMZbSPNrdm-vtVgk.roa (raw, json)
Hash identifier: 03aH6k3XO2w/avcqYf5rOTHSew6NN0Bs9faZ8hBNn0U=
Subject key identifier: C5:FC:D2:25:99:2E:25:A1:05:31:96:D2:3C:DA:DD:9B:EB:ED:56:09
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019F47F5E3164C2380A16B7726624E97BDAA
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/xfzSJZkuJaEFMZbSPNrdm-vtVgk.roa
Signing time: Thu 09 Jul 2026 17:38:44 +0000
ROA not before: Thu 09 Jul 2026 17:38:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402604
IP address blocks: 2a12:980::/29 maxlen: 29
2a12:6080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e3:16:4c:23:80:a1:6b:77:26:62:4e:97:bd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jul 9 17:38:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5fcd225992e25a1053196d23cdadd9bebed5609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:78:c7:29:81:8e:e4:83:10:4d:84:31:60:68:
b5:9a:5e:24:d6:65:b8:67:f8:07:3c:c5:3e:f4:b1:
61:68:b4:10:89:aa:14:f6:b3:d5:ee:8b:77:2a:d2:
9d:4e:ad:ec:12:99:f4:08:3c:e9:4d:5d:a3:88:08:
51:8a:c7:3c:ee:97:45:f2:52:22:6f:cd:87:58:40:
05:4f:06:4f:18:5f:d6:2d:02:43:57:12:10:4c:fd:
62:2b:a9:71:b7:9a:1d:f8:83:ae:87:76:b9:e9:3b:
27:f8:48:1a:eb:5e:b3:cf:e5:35:26:65:8f:50:32:
79:c8:04:dc:47:51:11:ae:c8:c0:96:eb:2b:b0:c9:
ac:bf:27:3a:cb:38:a9:a8:8b:68:5b:b1:2f:5d:6e:
8e:3b:ad:f9:e1:30:c0:aa:16:bc:08:0c:3f:8c:77:
c6:52:6f:2a:e4:85:36:b1:88:39:ae:7e:ef:7a:b5:
8a:6d:b0:2d:4e:94:85:b8:36:7c:8c:cd:33:75:9f:
8e:ca:4e:3e:e0:ee:20:f8:cf:dc:97:79:86:b8:f3:
b1:f5:e1:08:b3:b9:11:3a:3c:9e:c4:2e:47:33:76:
9c:b6:55:bd:c2:70:3f:f9:4b:b1:80:96:06:4e:54:
51:59:af:7f:a5:ad:1c:63:c7:b6:05:17:e4:93:38:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FC:D2:25:99:2E:25:A1:05:31:96:D2:3C:DA:DD:9B:EB:ED:56:09
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/xfzSJZkuJaEFMZbSPNrdm-vtVgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:980::/29
2a12:6080::/29
Signature Algorithm: sha256WithRSAEncryption
30:45:a9:e1:4e:59:ee:a0:53:60:f3:f4:53:68:10:c9:89:42:
c7:06:4a:13:44:cc:4f:a2:1c:de:35:68:f4:5f:5f:00:a4:08:
30:31:0d:c9:1c:2f:75:d2:6e:3f:84:92:8f:54:63:8b:3d:26:
c6:ac:fe:0e:16:08:f6:a8:2d:fa:ac:c7:92:bd:51:16:43:f8:
1f:9e:6b:a1:bf:91:10:39:db:f2:48:f5:6e:aa:8f:60:cd:0b:
6a:d8:60:a8:43:7e:a6:e7:c2:cb:9e:09:a4:fb:92:44:35:1f:
48:0c:4b:33:48:54:b2:11:3e:a2:9a:0d:1b:e9:ba:70:5f:26:
64:e9:36:56:67:5e:c1:79:bb:bb:0b:6b:20:0d:58:75:79:3e:
ac:39:f5:7d:c1:a0:48:f0:4d:48:c6:90:67:93:de:67:0d:51:
0c:89:ad:3f:37:99:04:e4:1a:1b:2e:7f:c5:7b:da:da:80:08:
c1:a4:de:a1:4c:89:a9:0e:b8:f7:1e:06:44:70:b2:fa:62:ee:
c2:3e:05:6f:fc:dd:6b:61:2c:e3:d0:7a:03:ce:98:a4:47:fd:
6a:d0:32:d7:be:33:30:94:37:32:93:a9:31:2d:bd:42:e9:9e:
b2:5e:c1:c0:67:3a:7d:6d:5c:d3:28:b3:cd:d4:34:61:8d:a8:
33:3b:79:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:18:59 2026 by rpki-client