Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/R2rXfyd0OXaVnfiV3CA9oe0qoxg.roa
File: R2rXfyd0OXaVnfiV3CA9oe0qoxg.roa (raw, json)
Hash identifier: vVj2qBO4foAyQkAfmXKW438nMYRkk8Pl9+S1RCDweeM=
Subject key identifier: 47:6A:D7:7F:27:74:39:76:95:9D:F8:95:DC:20:3D:A1:ED:2A:A3:18
Certificate issuer: /CN=46dc9b828aacec97114ddba6819e3024652c1867
Certificate serial: 019F2369310D4DD61B711FD5ED3293875FDA
Authority key identifier: 46:DC:9B:82:8A:AC:EC:97:11:4D:DB:A6:81:9E:30:24:65:2C:18:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rtybgoqs7JcRTdumgZ4wJGUsGGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/R2rXfyd0OXaVnfiV3CA9oe0qoxg.roa
Signing time: Thu 02 Jul 2026 15:18:44 +0000
ROA not before: Thu 02 Jul 2026 15:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51011
IP address blocks: 2a03:5a00:2e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rtybgoqs7JcRTdumgZ4wJGUsGGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:31:0d:4d:d6:1b:71:1f:d5:ed:32:93:87:5f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46dc9b828aacec97114ddba6819e3024652c1867
Validity
Not Before: Jul 2 15:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=476ad77f27743976959df895dc203da1ed2aa318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dd:00:b2:02:16:49:10:8e:62:c0:d0:d0:d6:
4e:1b:e6:6a:19:ed:1e:e9:12:4f:8e:b5:09:5f:1e:
57:19:40:f6:27:86:10:fc:02:af:d8:01:30:07:4a:
24:ee:bc:08:27:bf:0f:23:56:a0:65:0c:49:42:e5:
08:a6:9d:9e:23:2f:d7:49:7b:ad:57:f0:3b:97:cc:
71:98:64:df:92:1e:ac:e0:7e:3e:3e:a8:b9:ce:e9:
74:3d:64:c6:22:c4:23:7b:86:be:72:9c:cf:69:d7:
6d:69:f8:24:1e:eb:90:79:82:af:a9:dd:73:a6:8e:
1f:db:50:74:8a:8a:eb:d9:5d:a5:93:92:a9:74:ca:
43:87:ec:bc:77:6a:da:28:da:41:e8:fe:89:c3:bc:
16:cd:2f:54:ee:19:53:6e:55:1b:3e:2f:6a:8a:17:
06:39:6d:07:88:bc:23:28:70:8e:69:d1:eb:eb:6c:
19:65:2d:23:97:db:ef:58:fa:2a:4e:71:02:dc:ba:
ba:6d:91:78:72:ec:00:1c:2b:ee:f8:b5:80:29:aa:
d1:42:0a:09:25:54:16:0d:5d:c3:3c:5f:99:0e:82:
2b:76:b5:a4:c4:ea:40:7f:44:df:74:37:61:c1:a6:
05:ad:4c:f9:aa:3c:0a:e5:66:80:a1:72:1d:e4:14:
be:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6A:D7:7F:27:74:39:76:95:9D:F8:95:DC:20:3D:A1:ED:2A:A3:18
X509v3 Authority Key Identifier:
keyid:46:DC:9B:82:8A:AC:EC:97:11:4D:DB:A6:81:9E:30:24:65:2C:18:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rtybgoqs7JcRTdumgZ4wJGUsGGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/R2rXfyd0OXaVnfiV3CA9oe0qoxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5a00:2e::/48
Signature Algorithm: sha256WithRSAEncryption
69:9a:ba:da:5d:53:95:5d:96:8c:a9:73:79:ad:c0:97:5a:8f:
30:c5:47:9b:a3:26:b1:e7:08:ca:56:79:a5:b4:53:54:50:09:
52:2b:98:78:13:55:f2:a0:f6:75:81:13:dd:ad:78:c9:68:fc:
dc:eb:d6:90:cd:ad:af:5d:31:25:f7:4d:ee:71:20:97:e3:d1:
31:5b:cf:fd:21:82:2d:07:0c:b0:71:23:10:03:9f:76:11:3c:
f4:30:c3:e0:5b:59:af:aa:e0:87:45:39:b8:23:52:55:4b:8b:
e7:88:f7:9f:80:df:8b:0c:f1:87:5e:f7:27:35:fb:5b:10:70:
80:03:47:45:41:7b:10:7e:b2:3a:65:86:8c:b8:80:3a:61:fd:
3c:ae:45:11:ce:c9:90:8c:a9:95:7a:a0:5f:22:84:fb:f4:84:
e1:c6:30:75:54:e5:26:7b:d4:fe:96:75:0d:03:ea:63:4c:0d:
1c:a3:86:c2:41:7d:7d:73:e2:22:0e:2d:c9:d3:5b:4e:d0:d6:
df:20:a0:8d:c0:aa:1e:21:0e:a3:bc:f1:cb:d3:88:a1:32:ff:
bb:34:cd:df:0c:92:a6:e3:3e:fb:72:47:20:a4:c6:3e:af:7d:
72:49:26:96:49:ec:75:da:af:97:63:b3:bb:46:14:35:d1:01:
f0:3e:24:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:45:14 2026 by rpki-client