Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/0vMwcO-prVCBiJ1HH4N8JQBbTFg.roa
File: 0vMwcO-prVCBiJ1HH4N8JQBbTFg.roa (raw, json)
Hash identifier: DDQIEVV7Bq568hIRJt4vCWeNTR0mribCMhLMaet0/Xs=
Subject key identifier: D2:F3:30:70:EF:A9:AD:50:81:88:9D:47:1F:83:7C:25:00:5B:4C:58
Certificate issuer: /CN=3c510e21ba1c9d600589130255a36928f1c8f23b
Certificate serial: 019F2368E2A87FDADA2392E438069348EA56
Authority key identifier: 3C:51:0E:21:BA:1C:9D:60:05:89:13:02:55:A3:69:28:F1:C8:F2:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/0vMwcO-prVCBiJ1HH4N8JQBbTFg.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35052
IP address blocks: 2001:678:1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e2:a8:7f:da:da:23:92:e4:38:06:93:48:ea:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c510e21ba1c9d600589130255a36928f1c8f23b
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2f33070efa9ad5081889d471f837c25005b4c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bd:b8:a2:ea:07:c5:90:04:83:5b:c1:71:68:
83:07:2f:2a:6c:23:a5:31:8e:3d:c8:d4:68:8c:e5:
37:50:b3:7c:bd:cd:4c:ad:eb:7c:0b:3a:f3:f8:4a:
96:48:0c:e4:4c:75:71:05:6c:18:de:71:38:81:dc:
e4:12:80:07:96:74:be:c6:ab:db:75:30:56:b7:61:
fb:ea:4c:24:05:ce:25:00:5e:b5:c2:96:53:86:14:
64:33:48:07:5d:c8:c0:fa:9a:17:99:8c:ab:ed:4a:
ba:7f:3b:1c:3a:15:27:64:e1:9f:fe:c2:ef:78:87:
45:48:0d:6f:97:e0:8f:9b:cd:c9:aa:d2:f6:2d:f6:
e5:3c:80:be:e4:8f:8f:dd:5b:38:06:6d:74:48:63:
b9:e2:5e:9e:4f:33:82:d1:5e:45:21:aa:5d:5c:b0:
7c:10:55:4f:82:c4:3b:f3:79:bb:8e:02:64:3b:e2:
32:b8:82:08:a7:ac:5a:91:e7:75:cb:ef:b4:b0:f2:
03:33:95:3c:32:f5:50:bc:79:31:5f:d7:44:a4:03:
ed:a9:6d:70:1f:d9:3e:10:b3:10:80:d6:e7:42:f6:
e7:d8:28:fe:fe:ef:87:76:0f:90:73:b6:32:cb:3f:
47:21:65:9a:24:d0:47:fe:8f:c2:e3:41:c7:70:08:
de:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F3:30:70:EF:A9:AD:50:81:88:9D:47:1F:83:7C:25:00:5B:4C:58
X509v3 Authority Key Identifier:
keyid:3C:51:0E:21:BA:1C:9D:60:05:89:13:02:55:A3:69:28:F1:C8:F2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/0vMwcO-prVCBiJ1HH4N8JQBbTFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1c::/48
Signature Algorithm: sha256WithRSAEncryption
60:e1:d5:da:a9:e2:f6:1b:83:56:f6:ef:01:00:26:db:67:2b:
ea:03:6f:e1:56:83:37:64:26:40:29:12:a3:97:f8:ef:10:f9:
25:23:86:a1:7a:42:3e:90:42:ea:80:83:e9:82:80:1c:9c:db:
e8:da:56:93:0e:fb:9d:10:3a:1a:11:6a:75:4c:51:c1:1e:34:
bb:e0:e7:f0:74:ec:0c:2b:80:b8:ac:26:ea:b8:27:26:32:ab:
b8:e2:15:cd:1b:41:0e:1c:f7:51:bf:31:3d:fb:86:21:10:19:
f2:ee:90:ec:34:24:ed:c4:88:5a:b4:8c:a7:6c:e4:00:9c:b2:
34:d3:be:10:ef:e8:d3:ee:6f:a2:11:49:90:a0:6b:b9:f2:b4:
5f:30:e8:ee:fd:82:35:5c:43:1b:32:2f:29:2f:ab:63:d8:a6:
b7:9b:a2:8c:3e:6d:40:69:c6:a4:3f:be:af:82:ef:36:69:30:
3c:1b:65:8e:c5:2e:f7:4c:ba:00:34:13:60:a0:cb:e5:07:14:
68:ca:33:78:bf:cd:1c:c9:7b:4a:57:ee:71:a6:2d:80:73:7a:
88:88:cc:1d:be:bd:80:a7:3f:bd:f2:0c:1c:f5:b5:3d:ae:c3:
07:30:0e:cd:11:d2:ce:e6:5b:2a:15:23:d9:70:d5:be:a1:5f:
7f:ad:f1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:06 2026 by rpki-client