Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/_1XA-zGhunQskoFgaH5i_CNH3QM.roa
File: _1XA-zGhunQskoFgaH5i_CNH3QM.roa (raw, json)
Hash identifier: aDAq0r1V2CMlH+33MV0g/lOXU2G0EZV9dWmlzoDT1lY=
Subject key identifier: FF:55:C0:FB:31:A1:BA:74:2C:92:81:60:68:7E:62:FC:23:47:DD:03
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019F216C26E858C6547F4FC1E6303B78028E
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/_1XA-zGhunQskoFgaH5i_CNH3QM.roa
Signing time: Thu 02 Jul 2026 06:02:43 +0000
ROA not before: Thu 02 Jul 2026 06:02:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197959
IP address blocks: 2a10:fa80:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:6c:26:e8:58:c6:54:7f:4f:c1:e6:30:3b:78:02:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jul 2 06:02:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff55c0fb31a1ba742c928160687e62fc2347dd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:62:93:4b:5c:f3:85:17:b0:9a:2e:b1:b6:44:
c2:cb:87:be:1d:99:45:e1:9e:94:6c:51:ae:13:1b:
8f:c4:8f:1f:35:a5:68:92:44:bc:97:09:ac:1d:8e:
6c:44:94:a5:0e:e3:26:46:d0:30:c8:4f:25:83:44:
f5:d9:b5:ce:1c:a6:f7:7b:15:8f:de:db:ee:66:f6:
cd:2d:8f:e3:f8:ef:16:4e:85:66:36:1d:98:9e:d1:
5d:ae:a4:b0:7b:f2:98:e7:ef:43:16:86:e3:80:12:
1e:f5:c9:b9:0a:66:9f:b7:90:ee:43:61:63:d3:34:
5b:a9:43:fd:59:36:94:6f:12:3d:9c:3a:c8:09:a9:
89:32:69:2f:ac:15:ef:87:6c:f3:1f:cb:2f:5a:d4:
62:6a:80:d0:85:97:3e:f5:c4:1a:b4:ff:2c:81:f5:
4b:85:90:98:a8:1e:b9:43:d9:20:bd:01:3f:84:22:
cd:bf:ec:a7:73:15:88:29:34:f7:8e:60:e4:87:1f:
54:a2:5d:18:33:77:2d:63:5f:e4:1f:85:1f:0e:89:
e5:9d:71:47:9b:f6:87:56:1e:ec:71:6f:f6:67:53:
e1:1e:45:78:6e:11:c0:94:8f:98:e0:9f:41:cf:69:
85:ce:ee:95:c1:3f:7f:ae:27:a2:ca:d0:a8:14:d1:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:55:C0:FB:31:A1:BA:74:2C:92:81:60:68:7E:62:FC:23:47:DD:03
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/_1XA-zGhunQskoFgaH5i_CNH3QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:8::/48
Signature Algorithm: sha256WithRSAEncryption
45:15:7f:ed:de:1e:20:09:9f:df:41:ff:a2:4e:a6:18:06:98:
dc:72:8b:57:4b:6b:bf:67:c3:ce:42:0e:5c:81:cb:73:25:30:
56:40:c7:5f:0c:7e:f7:b3:88:44:cd:c9:a3:e2:23:68:82:14:
c3:87:0e:3f:d7:81:68:21:cd:2f:b1:0f:05:d5:33:34:ed:09:
a7:66:8e:62:0a:16:b1:77:66:dd:55:98:65:40:31:83:f8:9a:
83:36:64:09:1d:6d:41:c8:10:be:44:6a:f8:46:be:cb:88:0e:
24:d1:44:45:68:bd:00:59:62:25:6b:62:9f:da:60:cf:0f:ee:
b8:f4:e1:c5:98:8f:09:12:46:c3:0b:8c:f4:0a:aa:62:8d:1d:
db:02:20:28:cc:fd:d6:2d:fb:f3:55:48:87:cc:d3:5c:bb:5e:
94:dd:8d:2e:3d:79:0a:48:8d:fe:b3:71:be:f0:28:11:ab:7c:
62:95:61:f0:ac:35:b3:0e:0d:be:2e:91:cf:bb:5f:f9:9c:3e:
dd:c4:66:ee:f5:e5:8e:b8:b0:70:37:22:e2:78:40:b3:dc:a8:
35:e9:f3:b5:e6:cf:91:c3:d7:e0:b0:a7:68:b9:f9:ab:66:07:
b9:13:d2:c5:8e:f2:af:50:b3:e0:a4:e6:9a:83:8f:21:53:b4:
9f:8e:8b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:28:38 2026 by rpki-client