Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/_ACz8CA-TXwzIJE_d_RTaefJ03k.roa
File: _ACz8CA-TXwzIJE_d_RTaefJ03k.roa (raw, json)
Hash identifier: pXwd5dPhtVqhSSdIzOj+L8V8XokZaPGH3lcBSuKJrK4=
Subject key identifier: FC:00:B3:F0:20:3E:4D:7C:33:20:91:3F:77:F4:53:69:E7:C9:D3:79
Certificate issuer: /CN=c2919334ad2ad53616c34fece96ce29230f86349
Certificate serial: 019F855120976672C95AB02ADF34E9C72788
Authority key identifier: C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/_ACz8CA-TXwzIJE_d_RTaefJ03k.roa
Signing time: Tue 21 Jul 2026 15:35:14 +0000
ROA not before: Tue 21 Jul 2026 15:35:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14315
IP address blocks: 2a01:f040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:51:20:97:66:72:c9:5a:b0:2a:df:34:e9:c7:27:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2919334ad2ad53616c34fece96ce29230f86349
Validity
Not Before: Jul 21 15:35:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc00b3f0203e4d7c3320913f77f45369e7c9d379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:93:43:76:d8:03:70:dc:28:23:e7:33:35:
cf:3e:30:cd:4d:3f:4d:f7:c8:b7:d1:e2:e4:bc:ee:
de:69:38:62:a8:1b:00:de:64:aa:76:7b:2a:76:5e:
3c:13:f5:16:71:35:78:2c:fe:d9:1d:f3:58:92:76:
b7:71:44:eb:0b:21:03:4f:3e:a1:e9:f3:b2:e1:69:
7a:46:e9:ac:07:39:53:46:b2:35:80:18:c8:5c:29:
7f:78:e1:cb:b3:c9:23:4a:6f:26:52:14:a3:63:63:
9c:85:bc:4b:c0:87:d8:35:ea:cd:b4:4a:2a:01:28:
3b:8f:29:49:71:26:80:03:d5:55:be:85:37:a7:76:
09:fe:d7:ef:ca:80:68:b5:dd:2c:8a:fc:69:39:60:
98:2f:65:8d:de:10:53:09:f8:01:d9:ed:60:d2:7d:
26:da:ad:a2:f0:b7:83:48:d4:6c:9c:ea:b8:48:e6:
5e:54:ca:74:dd:e7:e2:b0:87:44:c0:74:4e:19:79:
5f:5d:82:11:c6:95:17:43:b0:84:4a:1e:2b:67:ef:
6a:b0:de:c2:3a:9a:8b:46:dd:81:cd:a1:2f:03:b1:
06:43:05:b4:aa:04:15:9a:09:60:88:4a:26:ef:51:
44:22:b3:b0:94:31:2a:4a:6b:1c:46:2e:58:fe:32:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:00:B3:F0:20:3E:4D:7C:33:20:91:3F:77:F4:53:69:E7:C9:D3:79
X509v3 Authority Key Identifier:
keyid:C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/_ACz8CA-TXwzIJE_d_RTaefJ03k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f040::/29
Signature Algorithm: sha256WithRSAEncryption
41:04:5e:ac:54:8d:7c:91:50:f9:ec:f5:2c:f0:5f:72:47:89:
78:70:6b:61:30:96:7b:bd:18:47:21:1f:d0:68:22:00:46:f2:
cc:e5:e8:48:63:fb:59:cc:ed:33:61:4c:56:0c:a3:94:82:ca:
f0:68:5b:26:2b:0f:6d:8d:a6:e1:02:50:c9:42:05:77:f0:8a:
4a:f3:07:16:5c:e1:4b:80:99:d0:36:b6:16:4e:2d:5c:29:61:
1f:68:a9:d0:7d:c3:bc:90:f8:0d:77:55:b7:a3:7a:8c:f4:fb:
2e:0f:79:3b:09:7f:78:22:6b:69:64:fa:ef:32:66:80:0e:71:
6e:f8:a2:61:1e:a7:29:ce:d7:90:76:3d:9e:5c:fe:9a:f0:55:
43:13:d0:73:94:4f:b5:f3:f2:4a:9d:83:f0:cb:94:20:ed:eb:
d5:fb:57:70:ab:ab:ab:1e:72:03:49:70:b2:81:d2:9e:7a:7a:
62:95:2d:be:39:65:14:24:4c:4f:84:f4:06:87:f1:98:9d:9b:
2f:3d:2f:6c:9a:aa:06:f5:02:8e:b7:38:06:ac:ee:cc:8e:ad:
86:41:75:42:0a:2b:50:41:e6:8b:07:60:77:67:e3:64:9f:c7:
fb:b9:4b:ee:65:67:43:76:fc:48:9c:37:d9:41:e6:6c:11:42:
3e:01:d4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:08:05 2026 by rpki-client