Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/V88hvrM1OqJ4ySOm9ZElF9DQY8U.roa
File: V88hvrM1OqJ4ySOm9ZElF9DQY8U.roa (raw, json)
Hash identifier: uvjzr0fPA/WgA4L6OGVD2MJXyWFXrj5Vq0k/Yrsnvbs=
Subject key identifier: 57:CF:21:BE:B3:35:3A:A2:78:C9:23:A6:F5:91:25:17:D0:D0:63:C5
Certificate issuer: /CN=3dab56e1ea31d4608034b9ff74f1ee11ecacfb9a
Certificate serial: 019F2368EF35BD07A64CA6191EA50CBC3CB8
Authority key identifier: 3D:AB:56:E1:EA:31:D4:60:80:34:B9:FF:74:F1:EE:11:EC:AC:FB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PatW4eox1GCANLn_dPHuEeys-5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/V88hvrM1OqJ4ySOm9ZElF9DQY8U.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20570
IP address blocks: 2001:67c:d70::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/PatW4eox1GCANLn_dPHuEeys-5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/PatW4eox1GCANLn_dPHuEeys-5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/PatW4eox1GCANLn_dPHuEeys-5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ef:35:bd:07:a6:4c:a6:19:1e:a5:0c:bc:3c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dab56e1ea31d4608034b9ff74f1ee11ecacfb9a
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57cf21beb3353aa278c923a6f5912517d0d063c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:88:0e:e7:09:76:d8:ff:a6:af:96:f2:a2:
87:f6:33:87:d0:02:64:bc:53:5a:16:52:5c:7c:7c:
c2:8a:e2:7f:0e:c4:6e:6f:f9:e4:07:b9:a8:e8:5c:
22:78:13:8d:38:e5:95:0d:ac:60:f1:ab:3a:81:0d:
70:92:7b:e8:ca:6f:10:b6:1e:fa:e3:52:ef:a4:96:
97:26:ec:f7:87:d0:0d:76:15:50:ae:da:8a:30:79:
30:22:f7:51:51:94:8c:e4:11:69:15:64:5a:8e:9e:
cd:2b:1b:2b:8c:f3:41:0d:a8:fa:46:d0:60:41:c2:
aa:02:ef:2e:c6:ef:e0:85:99:96:e5:0a:2d:56:82:
e0:92:e4:cc:a1:ae:84:01:db:b9:f6:10:38:ee:6f:
28:5f:04:48:46:3b:38:80:b1:38:11:c9:30:c3:12:
2d:4b:63:c4:47:09:d5:af:8a:fc:b5:2b:1d:47:9b:
c0:3a:21:5b:e6:97:05:bd:ac:26:8c:6b:4c:c6:bd:
6e:dc:5a:6c:12:e3:23:38:16:26:68:64:97:fc:82:
5f:cd:87:9f:a6:f0:cb:0a:5d:8c:a0:2e:d1:6b:4e:
f8:7a:29:2a:da:35:45:2a:04:12:9d:0c:1b:b2:4d:
fb:1c:85:8a:32:56:66:b8:86:3e:1a:72:c9:9b:33:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CF:21:BE:B3:35:3A:A2:78:C9:23:A6:F5:91:25:17:D0:D0:63:C5
X509v3 Authority Key Identifier:
keyid:3D:AB:56:E1:EA:31:D4:60:80:34:B9:FF:74:F1:EE:11:EC:AC:FB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PatW4eox1GCANLn_dPHuEeys-5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/V88hvrM1OqJ4ySOm9ZElF9DQY8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/PatW4eox1GCANLn_dPHuEeys-5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d70::/48
Signature Algorithm: sha256WithRSAEncryption
3a:ed:6d:46:6e:b4:b2:c1:66:e6:d8:20:e8:fb:ee:a5:de:25:
4b:51:ab:78:1e:e1:46:5d:7b:f7:b3:9b:00:a0:3a:79:f9:a2:
d1:f5:79:38:60:8f:1f:f8:02:e1:85:64:ef:72:9c:75:dd:b5:
b4:a4:3b:4e:a2:bc:3f:44:cd:f1:e7:da:c6:53:f6:c6:99:0b:
f6:13:1f:3a:42:18:7f:77:a3:5f:25:b6:46:e2:a9:de:fc:0f:
6b:97:e4:3c:af:54:c5:d8:56:78:f5:92:e9:c8:80:dc:29:b5:
c8:6c:74:b2:9f:81:8e:65:26:fa:be:7d:86:d8:2b:2e:8e:d0:
09:d5:0b:1b:b9:be:e4:62:4e:51:1f:5c:b3:96:50:b6:a0:21:
47:a6:67:ce:eb:01:54:de:58:ca:47:0e:28:fc:5e:3c:46:58:
1b:bb:fe:9e:98:7a:95:e2:80:46:2d:72:11:9e:f8:06:4e:6c:
e8:17:eb:dd:f9:92:fa:d9:96:92:f3:42:41:84:58:38:8a:25:
c5:7d:3c:d7:9d:b7:40:8b:c5:33:d7:a3:f6:f6:e0:66:1f:2f:
09:49:01:96:6a:83:3d:50:ea:f2:03:f6:11:51:21:86:1b:b7:
53:17:67:d6:dd:40:43:19:5f:c4:ae:8c:dd:ac:1c:25:80:4a:
eb:9b:c7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:58:24 2026 by rpki-client