Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/48ed79-62e0-459f-905e-c05adf57a10c/1/R6CXQRG_bUGdqF_hURWhPOfO5ig.roa
File: R6CXQRG_bUGdqF_hURWhPOfO5ig.roa (raw, json)
Hash identifier: 9hsfYzdZ3uUYLtNXia0mHBK4KdVl4c+WLR9/NCsDRH0=
Subject key identifier: 47:A0:97:41:11:BF:6D:41:9D:A8:5F:E1:51:15:A1:3C:E7:CE:E6:28
Certificate issuer: /CN=48f57dce4ebc96a31284baeb42ef76cc3d874b05
Certificate serial: 019F83B43A0C92D54C6E4BF3AA6BFDE4247B
Authority key identifier: 48:F5:7D:CE:4E:BC:96:A3:12:84:BA:EB:42:EF:76:CC:3D:87:4B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPV9zk68lqMShLrrQu92zD2HSwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/48ed79-62e0-459f-905e-c05adf57a10c/1/R6CXQRG_bUGdqF_hURWhPOfO5ig.roa
Signing time: Tue 21 Jul 2026 08:04:14 +0000
ROA not before: Tue 21 Jul 2026 08:04:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199920
IP address blocks: 2a13:4d00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/48ed79-62e0-459f-905e-c05adf57a10c/1/SPV9zk68lqMShLrrQu92zD2HSwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/48ed79-62e0-459f-905e-c05adf57a10c/1/SPV9zk68lqMShLrrQu92zD2HSwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPV9zk68lqMShLrrQu92zD2HSwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:b4:3a:0c:92:d5:4c:6e:4b:f3:aa:6b:fd:e4:24:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f57dce4ebc96a31284baeb42ef76cc3d874b05
Validity
Not Before: Jul 21 08:04:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47a0974111bf6d419da85fe15115a13ce7cee628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:16:ac:42:7f:74:75:bb:89:da:ad:52:ef:
ba:22:65:a7:d3:4f:82:1e:c2:0a:a3:2e:76:8d:4a:
8a:c3:07:30:05:b8:74:6c:a3:89:61:6d:79:1f:a7:
bf:b5:6f:00:2b:e0:98:22:28:53:73:8d:08:7b:32:
87:5a:5f:31:e6:ea:f3:60:b9:98:a6:05:d4:2a:98:
cc:52:62:8c:2e:1a:97:eb:9f:f5:30:ef:aa:4c:68:
b7:1c:64:1e:51:a2:71:69:74:12:d4:37:dd:58:9e:
76:62:ed:3d:bc:ab:a3:b8:9a:b1:1b:60:dc:7a:ad:
46:fa:f3:17:3a:33:f4:4e:02:f4:f8:cb:6f:0b:13:
ce:97:26:d1:7e:6d:94:d4:43:75:ab:d6:01:f3:92:
7a:9a:ca:7b:f6:d0:b4:88:e3:b8:e9:84:f1:89:04:
71:81:92:74:69:6e:75:4b:93:40:6d:d3:d8:98:ee:
54:15:e6:79:bc:65:ca:f7:90:d6:b7:79:e8:73:0c:
6e:86:d5:7b:97:f9:9b:df:2f:95:ea:18:a5:5e:62:
c6:17:51:52:a6:ed:32:69:f1:4d:8d:60:bc:a0:3c:
c8:54:f4:af:52:68:5d:29:1d:1c:34:5e:43:31:b9:
79:0c:53:c2:a8:bc:fb:22:65:72:b5:94:c1:b1:23:
82:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A0:97:41:11:BF:6D:41:9D:A8:5F:E1:51:15:A1:3C:E7:CE:E6:28
X509v3 Authority Key Identifier:
keyid:48:F5:7D:CE:4E:BC:96:A3:12:84:BA:EB:42:EF:76:CC:3D:87:4B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPV9zk68lqMShLrrQu92zD2HSwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/48ed79-62e0-459f-905e-c05adf57a10c/1/R6CXQRG_bUGdqF_hURWhPOfO5ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/48ed79-62e0-459f-905e-c05adf57a10c/1/SPV9zk68lqMShLrrQu92zD2HSwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:4d00::/29
Signature Algorithm: sha256WithRSAEncryption
07:35:17:64:b4:f1:d0:a8:45:2c:f6:7e:39:62:0f:2e:bc:61:
2a:1d:7f:ed:8a:0e:13:5e:2e:74:76:58:83:6a:fd:55:0a:bc:
dc:74:e1:04:f4:bb:85:a5:8c:11:bd:6e:ea:94:33:57:95:98:
31:4f:43:9f:e8:26:bf:f5:1c:dd:59:da:af:72:c6:55:f8:3a:
56:69:1c:e0:d3:dc:d9:bb:b6:ae:a0:68:54:df:23:88:7f:a4:
47:40:26:e1:4e:28:c5:6b:28:55:37:c0:1d:5c:48:a0:8d:a1:
5c:6e:4a:3e:77:11:2c:f2:93:33:c0:0a:78:e1:0d:49:84:3d:
f4:3f:84:a6:4e:79:66:43:48:b2:2a:b2:83:0b:34:37:60:a7:
bb:7e:a1:03:ef:0c:6c:f4:64:28:19:1b:95:0f:1e:95:de:fd:
89:c7:bc:57:1b:ef:c5:49:06:2f:ad:af:1c:a0:6d:8a:07:d2:
a5:8a:d4:39:3a:bd:68:91:97:05:b4:ea:06:2b:56:d8:9e:31:
16:66:86:60:b1:59:63:25:2a:f5:9b:1a:ab:7e:cd:ef:ed:6e:
96:9b:d5:87:46:28:d0:aa:7c:b4:9e:c1:d5:7d:7d:1c:0a:11:
17:aa:9d:11:d1:57:56:f7:b6:d2:ad:b9:4d:45:07:1c:9d:4c:
a7:4a:2a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:18 2026 by rpki-client