Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/dX2JizcaXLW2IsyRxOo89A7NFns.roa
File: dX2JizcaXLW2IsyRxOo89A7NFns.roa (raw, json)
Hash identifier: f3Z4U3kuG3YcliozAmgzBcAfzpP6aah5n1ATlkoBtzg=
Subject key identifier: 75:7D:89:8B:37:1A:5C:B5:B6:22:CC:91:C4:EA:3C:F4:0E:CD:16:7B
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019F2AB35922DCF09E2A639450A72D6E39D3
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/dX2JizcaXLW2IsyRxOo89A7NFns.roa
Signing time: Sat 04 Jul 2026 01:17:04 +0000
ROA not before: Sat 04 Jul 2026 01:17:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219412
IP address blocks: 2a12:bec4:12a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2a:b3:59:22:dc:f0:9e:2a:63:94:50:a7:2d:6e:39:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jul 4 01:17:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=757d898b371a5cb5b622cc91c4ea3cf40ecd167b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5e:13:ed:63:78:01:6d:b3:1a:30:3d:67:c7:
cc:df:52:d9:5d:0b:7e:ee:bb:50:52:93:ea:25:6d:
6f:63:23:34:0b:f3:07:29:f7:ee:be:5d:45:34:09:
8f:cf:c0:09:32:c9:0b:40:92:ca:f0:71:c7:15:20:
8f:9d:50:a5:91:03:ae:bc:17:be:ab:0f:bc:05:07:
a6:8f:ef:a3:fa:d9:87:2e:b9:5d:bb:47:f7:07:ae:
f3:ba:d3:e5:e4:ee:ce:43:ab:88:d6:e1:06:46:04:
c6:bb:ed:15:05:b2:49:37:92:e7:7e:7e:da:e8:0e:
1e:d3:10:98:b6:d7:e2:04:bc:e6:55:ff:4b:23:5e:
61:3b:97:f6:1d:9d:16:cb:8b:0d:a5:34:2d:51:87:
ff:da:00:6e:72:8b:e2:ad:95:a7:96:3e:91:da:82:
5e:b8:ad:cc:8b:46:5e:b7:9a:72:3f:85:4b:c0:b0:
f6:8b:a0:4c:59:93:1a:5d:40:cc:45:0f:22:42:b4:
c0:04:03:78:09:bd:64:b2:71:00:ae:07:f3:99:ee:
4a:77:48:59:9c:47:95:dd:e6:2f:53:03:ce:da:7b:
1a:ab:b1:53:12:f3:4b:af:ae:3a:26:5d:90:1c:81:
a5:6a:58:d7:39:2f:bd:07:e7:47:05:9f:f7:9a:e1:
a0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7D:89:8B:37:1A:5C:B5:B6:22:CC:91:C4:EA:3C:F4:0E:CD:16:7B
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/dX2JizcaXLW2IsyRxOo89A7NFns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:12a0::/44
Signature Algorithm: sha256WithRSAEncryption
60:a8:af:cf:e7:1c:67:d1:61:bc:6e:d5:ef:3b:0e:bc:db:f5:
ff:6d:4c:f6:65:e0:26:4c:c5:d9:de:42:33:fd:8f:6d:cd:80:
6d:b7:5f:87:b7:3e:1a:db:4b:1c:84:8d:6b:19:08:df:b0:78:
95:fc:d6:cb:6c:6d:d3:1d:1f:d1:63:44:2a:f8:93:f6:8e:53:
4b:21:22:20:b1:e6:9d:ab:02:77:0b:30:21:47:53:8a:82:17:
c4:1b:2f:a1:66:2d:ff:af:4e:36:ff:24:f4:8c:cd:52:f3:ee:
05:53:ae:b0:e7:c4:d2:b1:5c:39:e1:d0:3d:ab:cb:8d:58:21:
e3:27:4a:6b:9e:a9:1e:bb:49:af:5f:82:92:fb:f0:6e:44:5f:
d7:e8:93:98:bf:8a:88:96:1a:f8:b0:72:96:74:f2:8e:db:c0:
39:8e:04:31:ef:3a:bb:5d:69:ba:d5:af:82:25:91:24:e9:f9:
84:48:9a:b5:25:44:29:3c:22:67:74:e9:6b:0c:e2:45:3e:a6:
98:dc:7e:db:7c:13:08:e6:5c:ab:1b:73:a6:38:b6:d9:73:63:
52:5c:b2:66:3b:f9:75:f8:eb:70:08:e0:d4:a3:89:a8:6e:2f:
f1:aa:80:dd:40:f2:79:46:c9:84:0c:a2:1f:cd:48:44:1b:e8:
8d:2b:fa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:18:48 2026 by rpki-client