Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/P28NAR-gwo3DWhrCfUDsje3yy5M.roa
File: P28NAR-gwo3DWhrCfUDsje3yy5M.roa (raw, json)
Hash identifier: Rg/sbFjmtTahpzYygmbXRtVR2XC/RUmlzbY7QG8k+LY=
Subject key identifier: 3F:6F:0D:01:1F:A0:C2:8D:C3:5A:1A:C2:7D:40:EC:8D:ED:F2:CB:93
Certificate issuer: /CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Certificate serial: 019F6516D8D15876619BA70794F958DF74B2
Authority key identifier: CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/P28NAR-gwo3DWhrCfUDsje3yy5M.roa
Signing time: Wed 15 Jul 2026 09:23:43 +0000
ROA not before: Wed 15 Jul 2026 09:23:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402699
IP address blocks: 2a12:1340::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:16:d8:d1:58:76:61:9b:a7:07:94:f9:58:df:74:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Validity
Not Before: Jul 15 09:23:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f6f0d011fa0c28dc35a1ac27d40ec8dedf2cb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b4:90:6c:c5:d6:9e:bb:92:cf:6c:67:50:88:
65:5d:fe:97:dd:ac:18:9d:b9:7c:f9:06:1f:2f:80:
0e:3c:ce:a0:2a:21:e2:09:07:b9:ff:5c:fa:9b:fa:
10:d7:82:6e:6e:ee:4c:83:0a:dd:bb:c8:8f:2b:c4:
b3:01:66:bb:7c:d5:39:77:31:43:38:d8:a9:c6:70:
fc:71:a7:d4:50:5f:17:bc:5b:5a:6e:ef:7c:fb:4c:
80:2b:75:79:06:f0:2c:be:a9:1c:42:1f:10:56:27:
1d:bf:1c:ee:47:c3:a3:73:13:4d:9d:03:21:72:c1:
fa:98:bc:e1:e7:bb:cc:b8:28:59:4b:c2:66:36:31:
77:b1:b2:1f:c7:8d:61:c8:84:84:89:3a:d5:a3:27:
7e:e1:2c:10:ca:46:b5:04:1b:d6:24:54:c6:4e:56:
c6:fb:65:9f:f2:39:a4:d9:6b:06:da:aa:95:62:98:
46:c1:72:8c:57:3f:16:69:c0:6b:80:f4:6c:69:88:
81:e4:51:aa:d8:cb:f1:c7:5b:bc:ce:c6:84:ad:b3:
ea:cc:87:10:08:4e:68:21:6a:9b:a6:21:cf:b0:4a:
ae:b8:68:7d:bc:7b:33:de:e8:9f:b2:8a:3f:2e:84:
f5:ec:76:3e:28:dc:f6:7a:d8:01:29:9f:76:02:4d:
83:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6F:0D:01:1F:A0:C2:8D:C3:5A:1A:C2:7D:40:EC:8D:ED:F2:CB:93
X509v3 Authority Key Identifier:
keyid:CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/P28NAR-gwo3DWhrCfUDsje3yy5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1340::/29
Signature Algorithm: sha256WithRSAEncryption
69:24:c6:11:8b:6f:8d:fb:73:9b:b7:58:2b:d9:ac:60:8c:d0:
91:2d:e1:65:29:37:64:75:73:c7:28:5c:98:ff:57:29:84:ba:
8e:6b:29:21:98:5b:4e:59:fc:86:a6:e3:96:02:50:2f:01:66:
03:8e:82:cd:d5:63:98:78:71:eb:26:83:a7:c9:4b:fd:5f:0f:
32:73:04:72:68:c4:a3:37:1a:8c:f5:5d:81:8e:33:96:b5:bd:
75:23:b4:e9:b7:8a:f4:6c:58:12:bf:81:aa:83:dc:1a:ea:11:
16:60:52:4b:b6:5a:74:86:e7:e3:b3:e7:40:95:87:21:f3:49:
7e:8e:cc:41:63:cc:06:1c:61:4f:27:c9:c8:1e:d9:52:8d:df:
65:b6:93:6b:14:76:1b:13:1e:55:67:ac:bd:00:1d:82:0a:c4:
90:18:24:60:32:24:c5:fe:4e:2a:19:b2:f0:ef:ef:18:bc:33:
95:47:58:f8:cb:6a:81:b8:87:0f:42:41:e3:a8:d9:72:be:c9:
5a:f9:ae:63:05:bd:03:fc:c5:27:d3:ac:0a:cb:42:28:9d:4e:
11:23:65:58:15:a8:f4:17:3d:60:80:c4:52:1d:a6:06:aa:d9:
a3:b3:ad:4e:b8:08:1c:63:ad:44:0d:52:37:0f:c6:d0:b8:01:
f0:93:7d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:09 2026 by rpki-client