Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/1CjpuaS4rw8ge0-ltXV4l2OX60Q.roa
File: 1CjpuaS4rw8ge0-ltXV4l2OX60Q.roa (raw, json)
Hash identifier: xS3Tyjiosi2JKWLFjDH1G3QDY2JB3RAWfG149pE1I9U=
Subject key identifier: D4:28:E9:B9:A4:B8:AF:0F:20:7B:4F:A5:B5:75:78:97:63:97:EB:44
Certificate issuer: /CN=bc1f4ace719908e5db67d5c87ef054aa1676928d
Certificate serial: 019F23692791FC4D168F4BC7186C58E2AF6E
Authority key identifier: BC:1F:4A:CE:71:99:08:E5:DB:67:D5:C8:7E:F0:54:AA:16:76:92:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/1CjpuaS4rw8ge0-ltXV4l2OX60Q.roa
Signing time: Thu 02 Jul 2026 15:18:41 +0000
ROA not before: Thu 02 Jul 2026 15:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205574
IP address blocks: 2001:67c:1890::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:27:91:fc:4d:16:8f:4b:c7:18:6c:58:e2:af:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1f4ace719908e5db67d5c87ef054aa1676928d
Validity
Not Before: Jul 2 15:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d428e9b9a4b8af0f207b4fa5b57578976397eb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1f:00:73:fb:31:8a:88:0e:1e:33:5d:89:2f:
03:d5:98:52:9c:64:0f:9f:ad:eb:43:69:52:91:2b:
e0:c6:0d:50:d7:20:39:f8:5d:da:97:e1:06:72:60:
89:af:7d:aa:1c:23:d5:f7:0c:2a:62:91:1b:9b:67:
ae:50:02:f8:de:99:5e:41:db:d3:27:7e:11:d0:47:
c3:ed:b4:fb:cf:13:50:72:11:d8:c8:68:3a:d5:cd:
15:a2:ac:d2:97:2b:08:16:17:30:c2:e1:c8:a0:ac:
e5:d0:6d:c8:ca:d3:14:8f:94:ad:52:eb:a8:2d:7b:
ed:dd:86:7b:58:c5:ca:3b:28:b3:06:32:fe:e6:cd:
bd:99:dd:fd:6f:f4:ed:00:12:01:80:69:bc:28:23:
15:6d:f8:f3:53:be:34:28:dd:8f:87:51:88:53:15:
30:b9:a7:3e:06:f9:70:7b:51:23:e5:e1:9b:33:e3:
06:bf:f7:32:f2:3e:01:70:67:7c:7c:47:6f:98:63:
cf:92:4a:46:e8:ba:0c:49:ce:75:54:21:b1:a0:0a:
91:98:6e:ab:0c:47:d0:23:8d:53:7d:5a:7e:6e:ef:
d6:13:41:24:98:72:82:32:5c:bb:c0:0c:31:10:12:
ab:53:be:f9:a4:32:fe:6c:0a:8d:61:e1:ad:0c:ec:
c2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:28:E9:B9:A4:B8:AF:0F:20:7B:4F:A5:B5:75:78:97:63:97:EB:44
X509v3 Authority Key Identifier:
keyid:BC:1F:4A:CE:71:99:08:E5:DB:67:D5:C8:7E:F0:54:AA:16:76:92:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/1CjpuaS4rw8ge0-ltXV4l2OX60Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1890::/48
Signature Algorithm: sha256WithRSAEncryption
6c:cb:97:08:c7:28:10:63:e5:b8:c1:fb:8c:83:fc:b5:07:61:
22:b9:4d:be:db:23:93:eb:a7:87:71:28:a6:77:89:ba:da:d1:
7b:cc:f8:17:01:3b:c0:8b:b3:ed:bd:3e:ed:56:34:41:d0:2d:
e8:a6:36:c1:40:65:7b:e9:1b:2d:96:42:dc:e0:1b:dc:f1:79:
f9:ca:98:66:d9:b3:36:1f:b2:7e:c8:6d:75:98:fe:31:b6:0d:
fb:7b:21:f0:f4:2d:d0:05:66:c4:09:53:d1:13:1c:f8:8f:89:
5f:51:45:51:0b:b1:37:64:91:ca:10:0a:bb:46:60:2a:19:54:
00:b4:d2:a1:5b:92:2a:98:2b:a6:d4:5b:b0:83:47:16:a1:51:
69:c9:b6:8c:dc:1e:af:d7:43:0b:24:68:33:30:c9:13:82:36:
c5:77:e2:b7:b5:f3:e3:15:25:87:80:44:e9:51:3d:45:ad:0a:
84:1c:9c:5b:da:66:e7:08:bd:45:49:af:34:b4:06:e5:cb:05:
67:fd:5d:c3:df:9c:e7:7f:5c:a0:0e:ab:c5:dc:65:8e:99:47:
d9:a7:ec:80:99:68:6a:b9:0a:a3:05:be:83:e0:15:01:c7:59:
24:49:83:cc:e8:55:22:7a:03:b5:57:aa:d7:82:21:da:af:74:
4b:5b:fb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:27:32 2026 by rpki-client