Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/1-zwljBcmo4NDi07rago_7rc2pec.roa
File: 1-zwljBcmo4NDi07rago_7rc2pec.roa (raw, json)
Hash identifier: l68IVzTP/9PRhUk8ZjRXqcX9IcTNaz7KL344a8LvlbA=
Subject key identifier: FB:3C:25:8C:17:26:A3:83:43:8B:4E:EB:6A:0A:3F:EE:B7:36:A5:E7
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01A01939B7F92830ADDC691013E35E6F4CE6
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/1-zwljBcmo4NDi07rago_7rc2pec.roa
Signing time: Wed 19 Aug 2026 08:53:28 +0000
ROA not before: Wed 19 Aug 2026 08:53:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218925
IP address blocks: 2a03:5840:15e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:39:b7:f9:28:30:ad:dc:69:10:13:e3:5e:6f:4c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Aug 19 08:53:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb3c258c1726a383438b4eeb6a0a3feeb736a5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c8:af:e6:dc:c3:2e:51:87:36:55:20:90:ad:
45:a4:29:29:f9:cb:7b:dc:b8:a2:13:aa:54:ae:fd:
a9:87:b3:7e:43:ed:e9:07:15:fe:8c:36:ac:2d:84:
e0:6a:98:15:c3:f3:f6:72:ba:d1:18:5f:5c:4d:83:
68:e9:ae:38:4f:fa:0c:de:b6:d2:3a:2f:32:ef:44:
31:75:1e:0c:63:b7:6b:73:34:7d:ad:33:88:e6:09:
84:9e:df:29:bd:9b:43:c5:7c:d0:d5:58:ac:de:a2:
1a:51:84:b0:7d:72:fa:7c:be:85:8f:a4:ed:32:2e:
eb:2f:95:e5:87:b3:eb:ea:2f:66:48:e1:59:b0:d8:
77:5f:c5:12:c5:3a:14:7e:b0:cd:fc:e6:2f:10:e7:
2d:e5:65:e2:6b:f5:93:63:b7:bf:c0:07:99:d1:53:
cd:be:d4:b7:61:a9:e8:88:ff:22:79:9a:08:09:49:
a3:10:a1:37:c4:b7:1f:cb:4b:c6:fa:29:70:7c:d6:
0c:d6:f1:f0:6b:43:a0:22:28:2c:b2:4b:fa:20:fa:
8e:7e:27:8c:da:d3:8e:f3:71:9a:6b:50:c8:24:82:
30:88:cf:a4:b2:e7:aa:7c:45:99:51:11:a5:80:4e:
16:b4:38:28:86:8e:31:a1:b7:19:d3:02:f2:b8:e2:
3f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3C:25:8C:17:26:A3:83:43:8B:4E:EB:6A:0A:3F:EE:B7:36:A5:E7
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/1-zwljBcmo4NDi07rago_7rc2pec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:15e::/48
Signature Algorithm: sha256WithRSAEncryption
7d:e0:06:05:05:aa:d1:67:3a:32:b3:a8:6f:bf:ea:0f:60:82:
7e:30:c2:64:b2:81:e3:bf:75:13:82:be:7c:e7:ec:bd:5b:71:
50:64:29:86:72:58:c2:58:6f:dd:24:f4:35:1d:f9:3e:20:09:
69:bf:0f:dc:5b:5f:8d:82:97:88:ae:3d:5e:8a:dc:cd:72:20:
48:72:e1:21:4a:dd:be:19:af:0d:c6:af:cc:e0:d1:49:4c:80:
5b:5d:7a:a9:3b:71:a9:9c:29:ca:32:14:e0:74:7c:81:18:3d:
c1:10:18:0d:b1:ca:29:66:cc:70:a6:20:87:a8:13:ef:2d:7b:
d1:d8:0f:91:a8:14:fc:4e:e0:19:07:85:75:d1:01:c1:c3:48:
8d:92:16:a8:c8:7e:d4:fb:93:00:79:ae:33:e5:76:a8:14:a8:
ff:71:86:c4:cc:14:84:31:4e:a3:56:95:8c:b0:a9:92:19:41:
e1:23:ad:3a:bc:81:8d:a2:26:54:66:08:88:af:6e:ab:1b:48:
ab:52:0d:de:b1:64:39:09:db:9c:44:07:a8:1e:9e:0f:cc:19:
4f:7c:e3:33:da:82:fd:5f:00:d3:47:fc:58:bd:f7:eb:11:be:
a2:cb:27:d6:e8:51:e7:37:3e:95:62:c1:ef:0d:de:d5:26:3d:
cf:4d:3a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:54:26 2026 by rpki-client