Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/r42oR0C5g5SuflKWJ6GIOiVUO0U.roa
File: r42oR0C5g5SuflKWJ6GIOiVUO0U.roa (raw, json)
Hash identifier: Cm2S/1eJoWgRD00HMcE5iW9xvFGpF376Bo3aWrPUtvk=
Subject key identifier: AF:8D:A8:47:40:B9:83:94:AE:7E:52:96:27:A1:88:3A:25:54:3B:45
Certificate issuer: /CN=f0cd59335979fc360e7cbe3c277cbf998fa93610
Certificate serial: 019F478BEE460547044D754CD618DD7CE956
Authority key identifier: F0:CD:59:33:59:79:FC:36:0E:7C:BE:3C:27:7C:BF:99:8F:A9:36:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M1ZM1l5_DYOfL48J3y_mY-pNhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/r42oR0C5g5SuflKWJ6GIOiVUO0U.roa
Signing time: Thu 09 Jul 2026 15:43:00 +0000
ROA not before: Thu 09 Jul 2026 15:43:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43284
IP address blocks: 2001:67c:15dc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M1ZM1l5_DYOfL48J3y_mY-pNhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:8b:ee:46:05:47:04:4d:75:4c:d6:18:dd:7c:e9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cd59335979fc360e7cbe3c277cbf998fa93610
Validity
Not Before: Jul 9 15:43:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af8da84740b98394ae7e529627a1883a25543b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:7f:66:08:a9:34:8e:cf:4e:fd:da:08:60:
17:b5:27:82:38:4b:c3:27:ac:22:33:da:90:5a:e6:
1a:1a:87:0a:7f:e9:d5:59:d1:70:cf:a9:a9:e9:78:
40:02:7a:f3:d8:84:41:bd:5d:da:8b:c9:d3:c8:0c:
ae:64:7a:46:8b:87:20:25:3a:00:14:fa:08:1e:4d:
ff:4a:89:e5:1a:e9:2c:fd:c4:35:f5:1f:90:7a:a9:
4b:9b:86:ba:a3:e6:d7:93:be:cf:0e:53:82:10:59:
24:94:b3:d7:b3:d9:a4:83:4d:9e:9a:b6:fd:03:8d:
f7:01:f3:2d:a8:b0:fe:d4:78:7e:c8:a5:8c:ad:6f:
b9:e3:c4:e3:02:cc:e3:34:ca:15:c5:4d:80:fc:32:
4d:10:c6:c4:dd:dc:40:bd:cf:9d:aa:87:32:cf:1e:
b9:c1:e6:31:e1:49:86:03:0b:fb:2f:48:dd:df:18:
66:a3:0a:d8:21:f5:f3:02:4a:76:74:06:43:9e:9c:
0b:85:76:be:da:6a:8a:b4:ec:f9:0d:96:bd:c1:18:
15:eb:6b:98:6e:6c:0c:3b:26:44:a9:b7:4e:42:0c:
73:a3:03:7d:5b:62:26:76:27:ed:51:24:17:7e:0f:
a0:f4:38:e0:19:7a:eb:e2:4d:ec:1b:e9:ef:05:c8:
fa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8D:A8:47:40:B9:83:94:AE:7E:52:96:27:A1:88:3A:25:54:3B:45
X509v3 Authority Key Identifier:
keyid:F0:CD:59:33:59:79:FC:36:0E:7C:BE:3C:27:7C:BF:99:8F:A9:36:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M1ZM1l5_DYOfL48J3y_mY-pNhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/r42oR0C5g5SuflKWJ6GIOiVUO0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:15dc::/48
Signature Algorithm: sha256WithRSAEncryption
98:47:29:cf:14:45:6f:20:f6:36:7a:42:a8:16:c5:f3:b0:36:
f5:02:54:9e:d2:59:f9:e9:bd:99:6b:b5:7a:99:06:fe:2c:7a:
95:42:54:3e:98:98:31:07:c6:07:74:76:77:91:e9:a1:f9:46:
40:2c:47:09:3c:1f:35:b4:93:0d:eb:4a:e5:80:47:22:25:d7:
b6:9e:65:7d:4a:69:fe:33:e9:25:31:95:b6:12:c5:41:6a:28:
9d:9f:24:c5:25:be:f4:46:c7:72:07:62:93:68:99:19:8a:a7:
fc:e3:70:ab:2e:95:0d:75:05:f4:ea:1b:09:e5:37:61:b1:c1:
88:bb:b7:9c:30:05:11:0a:cf:17:ed:db:ff:fb:8e:7d:43:fa:
ce:0f:c1:a2:e7:4f:c3:70:d6:19:80:6c:35:47:c1:5b:0c:bc:
1c:09:6a:24:86:30:1c:22:07:0d:49:d2:14:05:c6:d0:7e:d5:
0b:d6:dc:2d:d4:e3:dd:42:44:f4:9e:df:83:76:60:0a:91:73:
08:bc:73:d4:86:9e:1f:4f:5f:98:6c:ec:54:6c:3e:b1:3f:19:
6e:45:ba:89:0d:a7:f4:9c:e2:9e:80:51:10:28:d3:e2:8b:76:
88:39:b3:22:cf:cc:d3:5c:93:5e:c1:d6:4b:8c:7f:ff:19:f1:
8c:5b:7e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:48:13 2026 by rpki-client