Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/wCxCDwUCOQsdlSNMlK0k4YI2tx4.roa
File: wCxCDwUCOQsdlSNMlK0k4YI2tx4.roa (raw, json)
Hash identifier: rTTIUnsFLtdqF3QLDJSJAUZc2UdnIsqTTuD5CypPI48=
Subject key identifier: C0:2C:42:0F:05:02:39:0B:1D:95:23:4C:94:AD:24:E1:82:36:B7:1E
Certificate issuer: /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial: 019F406BF237B67913608642019ACCD42B83
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/wCxCDwUCOQsdlSNMlK0k4YI2tx4.roa
Signing time: Wed 08 Jul 2026 06:30:43 +0000
ROA not before: Wed 08 Jul 2026 06:30:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219256
IP address blocks: 2001:67c:5b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:6b:f2:37:b6:79:13:60:86:42:01:9a:cc:d4:2b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
Validity
Not Before: Jul 8 06:30:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c02c420f0502390b1d95234c94ad24e18236b71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:05:36:e0:e8:e7:53:81:d0:e1:56:c2:f6:
70:b3:a0:74:bc:ef:2f:0c:98:ff:95:cc:c2:a6:62:
ca:ad:f5:7c:f7:00:57:2c:bf:e1:f4:40:83:ab:ab:
c6:6f:4f:0f:e6:c6:b3:17:1c:30:41:68:78:b2:bf:
3b:69:d8:a3:f0:0c:d0:ac:82:d5:22:f5:6a:8e:e0:
39:c3:18:6f:eb:3a:a3:c7:38:d7:4a:84:ee:2b:9d:
0d:9d:bd:60:50:26:f5:1c:a6:5d:33:67:92:61:4b:
76:d8:ab:b0:2b:af:2c:12:1e:e4:b8:bd:44:44:08:
28:24:f0:8e:a5:14:05:2f:ee:a9:16:7f:5b:4c:a7:
80:a8:c0:97:0f:5d:17:b8:d6:10:58:56:aa:4b:ca:
53:cb:67:65:fe:89:0a:a1:a7:a3:2c:a4:59:b0:50:
ec:70:12:b0:cb:d1:64:95:c1:0c:df:dd:53:44:df:
37:6a:51:db:0c:08:0c:dd:61:54:5c:ed:a5:09:34:
c6:1b:ad:d3:de:2b:a7:96:01:c8:60:20:d8:ad:cc:
f9:22:de:60:c7:c6:54:63:d5:12:65:87:a6:fd:0e:
83:3d:2b:f3:28:99:a1:c9:3d:f4:80:b0:54:f6:27:
f0:8b:33:19:01:1d:ae:9b:f6:f5:20:29:61:9e:0d:
7b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2C:42:0F:05:02:39:0B:1D:95:23:4C:94:AD:24:E1:82:36:B7:1E
X509v3 Authority Key Identifier:
keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/wCxCDwUCOQsdlSNMlK0k4YI2tx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:5b0::/48
Signature Algorithm: sha256WithRSAEncryption
46:e9:10:7c:40:ec:12:24:50:e3:c6:00:01:26:0f:96:89:b9:
1d:bf:b2:e4:b6:69:bc:64:69:68:3b:7f:e5:7b:02:2a:10:a2:
40:a6:f1:a9:76:79:c8:75:da:60:aa:ff:c1:79:df:5d:cc:22:
62:d9:e3:dc:3b:74:86:e1:46:0e:da:42:09:1d:ce:54:02:31:
6b:20:5a:a1:6f:d9:43:f5:46:a1:c5:6a:d1:4f:bc:29:fc:7b:
75:e0:57:a0:d0:fb:d1:ba:08:87:99:f4:d9:f3:a7:94:d2:39:
bd:81:95:8c:31:01:f5:2e:2a:21:6b:a3:e9:26:2c:c9:a1:07:
fd:ee:b5:ca:2a:74:96:99:30:72:2c:5b:0c:38:fd:e6:77:db:
bd:4e:a3:a1:ce:cb:1d:e0:67:0e:ad:03:8a:b6:ee:30:50:ee:
4f:0e:04:f2:db:96:6e:17:a6:59:22:ea:bd:6e:43:65:40:32:
5e:57:c1:4b:35:f5:68:81:55:9e:4e:e8:63:8a:4d:d8:17:fe:
98:9d:77:55:ce:b7:ae:d2:3a:98:be:4c:95:fb:75:c2:c1:1b:
98:c5:df:3d:0b:d8:5f:c8:4c:c4:e2:68:ea:87:c1:62:c5:2d:
4c:3d:e5:3a:b5:af:0a:0b:60:8f:4f:9d:58:dd:6c:22:fa:73:
a3:a1:e2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:42 2026 by rpki-client