Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/U0VlaKKNtdOTOqK2MVcrObf1kHo.roa
File: U0VlaKKNtdOTOqK2MVcrObf1kHo.roa (raw, json)
Hash identifier: aj9GxjWDAWuJEL63II9rLgS5knljvCRB2AV58y//rLo=
Subject key identifier: 53:45:65:68:A2:8D:B5:D3:93:3A:A2:B6:31:57:2B:39:B7:F5:90:7A
Certificate issuer: /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Certificate serial: 019F5C2841444F5C197D12B6CA5C6060F0FE
Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/U0VlaKKNtdOTOqK2MVcrObf1kHo.roa
Signing time: Mon 13 Jul 2026 15:46:09 +0000
ROA not before: Mon 13 Jul 2026 15:46:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a01:f140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:28:41:44:4f:5c:19:7d:12:b6:ca:5c:60:60:f0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Validity
Not Before: Jul 13 15:46:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53456568a28db5d3933aa2b631572b39b7f5907a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:83:b6:8f:87:95:32:1c:2a:51:49:aa:19:e2:
1c:c0:04:f8:9b:cd:bf:68:0e:38:81:a2:cb:cc:f8:
5f:d9:1d:4b:7d:1f:d3:b7:68:e3:db:d7:3b:12:67:
25:73:6d:92:04:ec:13:6e:c3:c4:8b:39:4f:12:fe:
48:8c:36:9b:f2:30:42:9f:10:eb:a3:b9:81:ab:4e:
0f:95:aa:53:f0:9a:70:3a:7c:fd:ed:48:00:90:31:
da:d9:42:b6:31:3c:de:d8:f4:77:61:52:34:f4:78:
54:59:f9:1c:4a:a9:ec:45:c9:ec:51:af:6c:ab:62:
bb:1c:0c:e7:19:3f:cb:54:7c:a6:bd:58:c0:c2:c6:
4a:6f:c5:b3:3f:9e:03:19:48:45:b9:db:e1:fd:7c:
25:a8:50:54:d8:96:be:db:81:4d:29:a7:a2:72:35:
72:11:01:50:a9:e5:88:5f:93:4a:f2:2f:4e:37:13:
19:f4:a9:2b:21:36:e0:3d:c0:80:93:e1:aa:0f:b6:
46:de:e6:92:ea:47:2c:e7:74:21:1c:1e:bd:a3:d9:
e7:35:c9:1c:eb:51:e6:bd:8b:66:09:97:a9:7a:63:
23:20:c6:3b:e8:00:76:74:03:00:18:26:05:a6:32:
95:0d:9a:94:6e:4d:6a:47:26:73:4b:85:67:d9:a5:
96:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:45:65:68:A2:8D:B5:D3:93:3A:A2:B6:31:57:2B:39:B7:F5:90:7A
X509v3 Authority Key Identifier:
keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/U0VlaKKNtdOTOqK2MVcrObf1kHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f140::/29
Signature Algorithm: sha256WithRSAEncryption
39:c8:25:0e:51:93:69:ba:24:f9:70:6e:9e:11:2b:0a:72:2b:
62:e4:e2:b3:79:54:74:db:73:68:8a:30:80:30:75:61:c2:13:
18:25:91:20:dc:5e:36:ef:7e:e5:77:da:61:7c:3a:44:9a:58:
40:e1:1b:7b:a8:84:d3:c9:ad:79:46:9b:b1:3c:51:7d:9c:2e:
58:cb:49:cb:82:dc:ea:d0:a3:20:e5:23:e5:62:60:c4:58:ce:
ff:93:ce:84:79:65:df:eb:a6:8e:de:5c:2c:d9:b6:3e:cf:2c:
58:88:cf:c6:98:5e:9d:9a:43:dc:2c:6a:6a:75:2e:a3:a6:b2:
f6:4b:5c:9c:35:47:64:a8:f1:41:e2:27:b3:85:55:d9:f9:87:
42:8e:54:f9:77:72:d6:e2:bc:6a:10:42:07:05:76:02:91:a9:
7a:cb:b8:39:68:08:36:9c:28:34:ea:bf:df:7d:c7:8b:82:61:
b4:20:de:ec:11:89:b9:bd:fc:b7:f3:b7:0e:7f:d2:75:4a:d5:
0b:5e:39:87:f8:b1:b3:f3:46:ab:d3:dd:bd:10:e3:c1:ac:c1:
da:66:15:f3:0f:8b:d2:b7:e7:08:e5:ad:fc:15:57:93:95:0f:
e1:a8:b3:57:5b:77:b4:5f:aa:a5:28:aa:c6:df:6b:77:e1:f7:
bd:ac:86:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:50 2026 by rpki-client