Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/rWg34RDLNclyJ8h9Kinq56b8NJk.roa
File: rWg34RDLNclyJ8h9Kinq56b8NJk.roa (raw, json)
Hash identifier: gt1C9E3imgPTL1bHVhUKlCkyG2mLcYb0pVG6jC6JYNM=
Subject key identifier: AD:68:37:E1:10:CB:35:C9:72:27:C8:7D:2A:29:EA:E7:A6:FC:34:99
Certificate issuer: /CN=7c28a627ca31f292622c3ebba39482e34e5d956c
Certificate serial: 019F1DDD33DF1218230274CB722BF4C669F8
Authority key identifier: 7C:28:A6:27:CA:31:F2:92:62:2C:3E:BB:A3:94:82:E3:4E:5D:95:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCimJ8ox8pJiLD67o5SC405dlWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/rWg34RDLNclyJ8h9Kinq56b8NJk.roa
Signing time: Wed 01 Jul 2026 13:27:43 +0000
ROA not before: Wed 01 Jul 2026 13:27:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219300
IP address blocks: 2001:678:970::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/fCimJ8ox8pJiLD67o5SC405dlWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/fCimJ8ox8pJiLD67o5SC405dlWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCimJ8ox8pJiLD67o5SC405dlWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:dd:33:df:12:18:23:02:74:cb:72:2b:f4:c6:69:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c28a627ca31f292622c3ebba39482e34e5d956c
Validity
Not Before: Jul 1 13:27:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad6837e110cb35c97227c87d2a29eae7a6fc3499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:a5:63:91:a5:b6:66:b5:f1:b6:35:0b:bf:
08:56:bb:e2:f5:1a:10:77:e3:48:ce:5e:37:6e:b5:
1d:6c:09:e7:20:c9:9c:ac:6e:82:54:69:90:0d:64:
25:e8:63:d0:21:3a:f8:16:2a:32:69:f9:e3:fa:dc:
56:d1:dc:d3:94:0f:dc:e0:20:8b:58:01:1b:a3:67:
ab:2d:48:9d:fc:0c:10:23:fc:51:70:4a:bb:92:06:
18:0e:2b:5b:29:c0:a5:b1:d5:2d:90:a9:79:a2:3b:
25:12:47:93:31:22:35:92:d7:a7:9b:3f:d2:b5:eb:
11:f2:be:7b:c4:53:82:22:c9:2a:d7:2a:5d:56:13:
cf:fa:c3:fc:15:71:f3:6d:40:c7:82:9d:c4:65:51:
3d:12:14:14:ec:3f:50:c6:3f:41:47:95:af:53:a9:
f6:01:10:ed:e7:42:5d:3d:31:4d:43:69:cd:57:e0:
7b:71:0d:cc:8f:df:3d:0c:66:7a:e2:71:08:62:b8:
7e:e6:dd:33:a3:d2:e8:2b:be:8b:7a:dd:c0:d6:8d:
00:68:e5:0c:49:86:dc:a0:d1:b8:ee:11:7a:96:c4:
66:0f:9a:e6:3a:51:5b:1d:65:a7:99:a2:02:50:8e:
76:a4:6f:eb:7e:c2:4c:bd:07:e4:9f:b1:a3:ea:c2:
52:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:68:37:E1:10:CB:35:C9:72:27:C8:7D:2A:29:EA:E7:A6:FC:34:99
X509v3 Authority Key Identifier:
keyid:7C:28:A6:27:CA:31:F2:92:62:2C:3E:BB:A3:94:82:E3:4E:5D:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCimJ8ox8pJiLD67o5SC405dlWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/rWg34RDLNclyJ8h9Kinq56b8NJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/fCimJ8ox8pJiLD67o5SC405dlWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:970::/48
Signature Algorithm: sha256WithRSAEncryption
5c:f7:ef:2d:04:2b:33:90:73:5b:c2:8d:43:3c:64:1d:8b:a8:
37:37:08:4e:17:f0:d6:86:a5:1b:bb:e6:70:4d:b9:cd:de:9f:
99:45:31:f4:c5:ea:bb:19:1b:ea:3c:39:c8:f1:80:28:ad:07:
44:0a:d4:c6:67:ae:9c:72:24:6e:3a:34:f8:ed:9b:06:fd:38:
54:51:76:69:47:cc:8b:0a:89:d3:c0:1b:cb:86:13:57:c3:96:
e7:df:70:c2:3d:50:50:ef:0b:54:92:6a:5f:13:3d:77:63:2d:
8a:e9:a2:ec:5d:9a:07:ee:29:21:cc:5c:17:7c:60:75:c9:c3:
6b:f1:84:8a:73:80:41:b2:a0:c4:90:d8:f8:27:c1:21:8e:73:
98:e0:b8:d8:26:5e:f5:a4:fb:5b:16:8f:c9:e3:e8:fe:3c:b7:
e4:aa:19:a8:90:f7:69:df:97:0d:b1:90:48:66:90:73:14:e8:
07:83:8e:cf:f3:c5:df:1e:76:7d:06:e9:ae:e4:19:5e:cc:e9:
43:20:b2:04:c7:fc:8e:ee:e2:60:00:ad:c9:f4:1a:c9:8d:99:
6d:83:9e:90:67:64:f7:29:0a:c2:5a:a1:f0:e3:61:c8:58:71:
d3:9b:89:d8:4a:d4:e5:00:39:0e:cd:5f:b2:7b:b4:73:d7:bd:
1d:e8:5c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:40 2026 by rpki-client