Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/n6n7Fvy8_mAImvTvjcIpuy7n-Xg.roa
File: n6n7Fvy8_mAImvTvjcIpuy7n-Xg.roa (raw, json)
Hash identifier: hjHfVIr3l9HNipRO4yGtImqOUXJxGDWq7OMpdD3w+ro=
Subject key identifier: 9F:A9:FB:16:FC:BC:FE:60:08:9A:F4:EF:8D:C2:29:BB:2E:E7:F9:78
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019F69D4E0C09E70DF1F242C47492DBF8E4E
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/n6n7Fvy8_mAImvTvjcIpuy7n-Xg.roa
Signing time: Thu 16 Jul 2026 07:29:46 +0000
ROA not before: Thu 16 Jul 2026 07:29:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41720
IP address blocks: 2a10:fa81:1001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:d4:e0:c0:9e:70:df:1f:24:2c:47:49:2d:bf:8e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jul 16 07:29:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fa9fb16fcbcfe60089af4ef8dc229bb2ee7f978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:8c:0c:21:30:7d:8d:6b:61:76:5e:15:74:
f4:fc:1a:5d:8c:98:70:92:b3:a2:4e:ab:59:6f:52:
0d:ce:66:e1:0d:39:53:88:ff:20:06:c3:f5:b7:c8:
3e:1c:ed:d4:7e:1b:9a:41:77:98:0f:f8:95:24:d4:
4f:43:a0:56:e0:99:29:fa:78:00:e7:9d:ee:a0:4f:
24:c9:74:f7:23:71:67:14:6f:76:9f:a1:e5:76:2f:
12:a1:61:75:29:1f:6b:89:c4:c4:92:08:9e:2d:de:
0a:2a:a0:1a:96:73:41:e3:5c:8e:e5:46:da:64:a7:
77:be:ed:dd:50:69:80:01:c1:19:1b:ac:3c:1d:b3:
49:49:16:e5:b2:82:6d:f5:a1:0d:89:63:f0:e7:cc:
e4:79:3c:4e:dc:92:e7:5f:06:7d:ac:d4:65:a1:14:
e9:1b:94:61:e7:cc:f9:d9:fe:6b:e1:30:fc:d4:62:
54:fa:4d:66:a6:ac:5a:69:b4:dc:c2:c8:4a:35:48:
33:ec:15:18:24:04:37:46:51:9f:9f:06:c0:0c:f8:
98:29:cf:ad:73:aa:5c:43:02:47:df:9c:da:c2:ed:
f1:3c:3d:af:10:f5:f4:78:b8:a2:a6:c9:1f:b5:57:
cd:70:38:dc:b6:15:c7:5e:c2:8c:f1:cd:9a:95:7d:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A9:FB:16:FC:BC:FE:60:08:9A:F4:EF:8D:C2:29:BB:2E:E7:F9:78
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/n6n7Fvy8_mAImvTvjcIpuy7n-Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:1001::/48
Signature Algorithm: sha256WithRSAEncryption
8a:23:10:ae:64:c3:2f:94:1a:a6:a4:c7:74:61:99:46:4e:cb:
e1:0c:2c:fd:a5:b2:a8:19:20:67:60:e2:6c:c6:23:30:9b:9c:
8c:7a:f5:af:da:27:bf:b4:a9:76:8c:fd:6f:8d:05:55:0f:6c:
10:c1:67:65:47:8d:bd:6d:37:33:8d:83:60:1d:a1:5a:a2:13:
62:17:5d:29:d3:2c:96:d1:12:3b:70:d7:88:54:24:05:8d:c8:
7e:c6:58:68:b9:77:23:ee:5b:a4:83:c9:ed:c2:4c:a8:e8:20:
09:d4:2d:f0:c2:49:b7:48:dd:92:42:d0:c8:ab:db:c7:23:29:
ba:10:c2:c8:67:88:76:0c:f1:dc:53:68:ea:53:a4:1f:72:66:
38:e3:ab:f5:99:93:79:ca:5e:9f:81:12:76:d6:00:d4:24:ca:
ff:db:1d:31:dc:95:3d:14:be:3a:df:02:3f:ea:d8:97:35:f3:
33:fe:15:e3:4a:76:fa:ad:94:03:9c:e0:f1:5f:72:fc:8e:38:
28:ca:d6:4e:2e:6b:c7:db:f4:ff:55:61:40:cb:63:7c:72:32:
8c:4d:9b:86:d4:32:a4:2c:46:e9:30:f1:a0:f8:f3:c9:91:00:
24:60:68:67:14:6c:93:b5:76:89:82:ec:d2:de:8d:ef:83:6f:
4c:86:36:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:38 2026 by rpki-client