Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/1-TF-JoXo3nwcNcfQRcHbGY3qmXw.roa
File: 1-TF-JoXo3nwcNcfQRcHbGY3qmXw.roa (raw, json)
Hash identifier: SQN5hmAjWwammFizA41s1F2xWOAm+YxghfyjGPYdQT8=
Subject key identifier: F9:31:7E:26:85:E8:DE:7C:1C:35:C7:D0:45:C1:DB:19:8D:EA:99:7C
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019DD9253CA27D56C7A22D89BC41D12D17BD
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/1-TF-JoXo3nwcNcfQRcHbGY3qmXw.roa
Signing time: Wed 29 Apr 2026 12:09:49 +0000
ROA not before: Wed 29 Apr 2026 12:09:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 2a0b:8440::/29 maxlen: 32
2a13:cdc0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:25:3c:a2:7d:56:c7:a2:2d:89:bc:41:d1:2d:17:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Apr 29 12:09:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9317e2685e8de7c1c35c7d045c1db198dea997c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:21:04:f1:d5:63:43:54:62:15:02:34:bf:
44:18:3c:cb:2a:b2:eb:02:7f:eb:51:3a:43:c1:39:
c9:9a:58:43:99:2f:c8:5a:a7:93:38:59:91:6d:58:
a9:65:28:7b:00:19:ec:25:3d:24:d8:2a:c4:e4:44:
78:cc:47:4f:f5:6b:ef:a3:00:d7:3f:de:30:7d:b1:
02:a6:eb:3e:cc:70:3a:53:2a:d9:26:2e:2b:c1:df:
5a:f4:2c:f2:4d:dc:72:c5:be:9c:39:87:99:39:72:
83:93:16:53:a3:29:0e:03:c5:58:0a:87:e2:b8:e3:
a9:44:38:c8:bb:71:83:51:b9:73:20:ff:eb:b9:80:
b9:f6:4e:20:53:51:5d:a6:d8:ed:d1:8b:93:67:f5:
52:75:ea:34:04:25:11:5a:87:c5:34:3f:9f:02:d4:
31:65:f7:0c:f6:fc:ab:b1:13:a9:86:3f:9a:5e:9c:
f4:8c:fc:8b:80:5d:6a:4c:38:22:37:24:0a:b9:c7:
92:f0:49:d0:d2:22:ac:43:55:8d:fe:09:31:91:e6:
42:c4:bd:af:ae:d2:eb:63:fb:59:20:8a:a5:a7:63:
ff:94:73:58:d8:8e:f7:45:6d:80:b9:d6:51:72:f9:
33:53:10:37:ad:ac:de:dd:3c:43:50:0b:ee:80:9e:
98:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:31:7E:26:85:E8:DE:7C:1C:35:C7:D0:45:C1:DB:19:8D:EA:99:7C
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/1-TF-JoXo3nwcNcfQRcHbGY3qmXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:8440::/29
2a13:cdc0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:37:f6:3d:f1:f6:1d:d2:7f:44:42:15:46:15:43:fc:02:e3:
be:6f:7c:56:27:7f:b7:95:39:69:10:65:db:f1:c6:19:07:e2:
0c:cd:59:79:7e:2b:d2:60:47:9c:3d:88:d8:64:cd:45:c9:54:
9e:86:02:37:79:16:c1:5c:c6:e5:86:0f:a0:93:7d:43:08:b5:
04:b7:67:84:4c:2c:60:62:40:f5:14:d2:2f:f7:61:1d:17:4e:
0e:83:d9:c4:7c:67:5d:8b:72:a0:33:13:49:f9:4c:92:9d:e7:
e4:55:3c:c9:f7:f1:3f:22:b6:b4:a9:51:24:4c:11:ac:a9:3a:
2c:a4:87:0d:4d:ea:ec:47:09:93:04:21:c2:68:0e:3d:e4:06:
09:69:36:a3:aa:27:4d:9c:a7:50:31:aa:bd:24:48:6e:c5:6e:
60:d4:fd:d9:b0:69:bf:69:fc:b2:68:5d:0b:21:e4:61:7d:70:
c4:2a:24:3f:69:67:d4:40:52:5f:a0:9b:17:bf:fe:e1:ca:a1:
87:b0:12:68:a0:eb:11:b4:9e:b8:e8:0c:8e:df:6a:70:5a:7e:
ce:73:8f:65:23:ae:00:b2:d7:16:c5:4f:24:97:5c:fb:7c:f0:
82:b9:3e:39:80:54:48:b1:a2:df:8c:02:d6:a6:7d:e7:54:74:
32:3a:65:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:26 2026 by rpki-client