Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/tUrsaNa33j2yXgG-FZsY3hEdfaI.roa
File: tUrsaNa33j2yXgG-FZsY3hEdfaI.roa (raw, json)
Hash identifier: l4UceptsEKwsvCLPu+33b+OpLanlxsexxDKiUWOBXpE=
Subject key identifier: B5:4A:EC:68:D6:B7:DE:3D:B2:5E:01:BE:15:9B:18:DE:11:1D:7D:A2
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 019F8F4336E27B0BDA3C5AC28D7CF83408D5
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/tUrsaNa33j2yXgG-FZsY3hEdfaI.roa
Signing time: Thu 23 Jul 2026 13:56:14 +0000
ROA not before: Thu 23 Jul 2026 13:56:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 2a0e:aa06:450::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:56:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:43:36:e2:7b:0b:da:3c:5a:c2:8d:7c:f8:34:08:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jul 23 13:56:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b54aec68d6b7de3db25e01be159b18de111d7da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c8:5e:c4:ea:65:dc:cd:c9:98:23:a1:d5:bb:
7f:ac:5a:8f:0d:0c:ce:24:ec:55:61:9f:6e:65:d8:
c8:a2:fd:d1:13:ab:4c:cc:56:28:9b:6d:04:4c:b9:
b0:e3:ea:ff:6b:18:25:d2:52:26:5e:e0:a5:86:3d:
cd:ca:86:0a:36:f0:f9:a5:55:a3:f0:1f:21:9b:23:
09:f4:83:23:d6:1c:c6:82:fc:24:5d:fb:b7:fa:ff:
ab:a0:9f:89:02:b2:66:a2:5b:b0:6d:3b:4b:b1:cf:
04:36:53:9c:b7:c0:68:85:73:ee:23:da:5e:76:c6:
ef:ea:a9:ad:c8:10:f6:5f:85:4f:67:1b:de:41:1c:
f2:e1:5a:5b:73:2b:5c:65:14:7b:ae:35:4e:8e:34:
72:e5:5a:04:7e:3c:aa:79:25:d0:08:69:59:11:b0:
6b:14:6c:2b:34:19:0f:12:70:4c:a0:d4:a2:48:5d:
cb:16:52:52:88:5b:39:84:d9:92:ea:e6:97:83:17:
cd:de:3c:4b:ea:e2:d7:75:5b:bf:c5:26:1d:1a:9e:
33:3f:47:46:a3:fc:b9:bf:8e:55:51:4b:a0:a9:7e:
0d:4e:c4:99:06:0a:e2:28:bf:97:8c:1e:00:3a:74:
fe:7c:0f:41:d2:7d:92:7e:2c:0d:59:6b:0f:06:5c:
2d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4A:EC:68:D6:B7:DE:3D:B2:5E:01:BE:15:9B:18:DE:11:1D:7D:A2
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/tUrsaNa33j2yXgG-FZsY3hEdfaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa06:450::/44
Signature Algorithm: sha256WithRSAEncryption
b4:79:11:e6:9c:2f:4d:5f:f5:b5:0e:ca:f7:09:b3:1c:1d:27:
87:ba:f4:cc:cb:13:32:bf:30:bf:bd:d6:c5:92:ba:30:be:a2:
35:d1:58:dd:5c:86:da:4c:66:67:d7:b2:cf:e5:fc:40:b9:05:
62:a0:3f:a1:24:4f:37:3c:4c:3b:d4:94:11:2e:54:cd:c1:b4:
d7:a7:f7:50:a5:23:38:5b:59:4e:cf:30:48:b0:a9:d1:cf:6c:
06:8b:54:33:fb:fc:75:88:30:cc:06:9c:f0:76:fa:06:f7:e6:
2b:7a:85:b7:12:0a:33:97:6d:4c:32:e1:62:16:de:fd:5c:3c:
b4:65:99:53:41:37:79:84:53:d2:a0:33:65:04:08:12:63:23:
9f:16:4e:4b:28:f8:60:55:f9:23:10:49:b7:91:ba:99:23:30:
db:d4:e4:6a:85:0a:2e:9e:9c:14:93:66:44:bc:9f:78:26:6e:
2a:45:84:a7:fc:db:ea:e7:3e:88:00:a4:2f:ed:d9:47:ee:0f:
43:70:a0:9e:d9:26:38:b0:08:b9:f4:ed:e0:14:f6:55:79:34:
cb:38:de:76:e0:66:b2:05:a7:48:84:1b:97:32:c0:1b:84:23:
a6:67:e9:33:a6:dc:d1:54:cd:17:4e:b7:ea:88:52:6e:b4:49:
2c:60:41:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:18:05 2026 by rpki-client