Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/itsbDKOcLvYTL1wL-BLv0v4776c.roa
File: itsbDKOcLvYTL1wL-BLv0v4776c.roa (raw, json)
Hash identifier: ZEawOvc7lWqHf5H65rd92h3sAyZZNHxySs4Mwva3K5c=
Subject key identifier: 8A:DB:1B:0C:A3:9C:2E:F6:13:2F:5C:0B:F8:12:EF:D2:FE:3B:EF:A7
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F2368F6E9EE6C45A204125C169C15BB69
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/itsbDKOcLvYTL1wL-BLv0v4776c.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48625
IP address blocks: 2001:7f8:82::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f6:e9:ee:6c:45:a2:04:12:5c:16:9c:15:bb:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8adb1b0ca39c2ef6132f5c0bf812efd2fe3befa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:99:80:d9:a4:10:19:af:2d:0e:83:90:86:23:
f1:5e:e0:10:1d:52:36:4d:e9:60:36:23:90:f2:c6:
53:89:4a:ea:c6:8d:03:ea:d6:b4:36:fd:06:c4:67:
29:72:0d:b4:58:a4:0b:17:ae:e3:43:4e:e5:15:6c:
50:97:e0:c7:ce:33:de:4b:f8:66:79:c9:4a:27:3e:
00:66:15:78:c6:25:25:9f:43:a9:54:f0:5d:0c:54:
21:d2:1c:2f:94:1c:b9:74:60:0d:64:0f:b1:b9:ab:
fe:0a:2d:5c:e1:38:f8:15:22:8f:05:e2:89:98:fd:
be:c9:74:24:ff:55:6e:d2:52:59:ef:b2:0d:e6:fd:
8e:35:10:3a:e8:e7:f4:70:42:9b:58:77:a9:1e:73:
8d:54:6f:40:cf:f0:bf:50:b5:98:fc:af:ae:92:26:
53:b2:1b:5d:fb:f5:6a:22:ec:3e:e9:e0:96:36:ea:
b3:fa:d6:c2:29:47:26:34:11:d1:9b:8a:46:f8:5f:
b3:e2:78:20:c9:67:90:8e:a5:0d:91:a8:ce:9f:ce:
63:ba:18:9f:fb:5c:43:6c:4e:bf:12:54:84:be:3c:
cb:9d:f8:2a:8c:44:31:74:03:65:22:55:da:74:be:
62:ae:22:1d:c0:f2:f2:c9:f8:22:d4:8c:4c:82:7f:
fb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DB:1B:0C:A3:9C:2E:F6:13:2F:5C:0B:F8:12:EF:D2:FE:3B:EF:A7
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/itsbDKOcLvYTL1wL-BLv0v4776c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:7f8:82::/48
Signature Algorithm: sha256WithRSAEncryption
6a:e7:23:76:67:ea:ab:68:cf:1e:4a:f5:9c:cf:b3:51:81:29:
bc:2a:2b:4f:76:21:94:54:a4:75:89:4a:9a:32:f1:4b:68:23:
d3:58:75:3f:4f:d6:87:2c:64:47:59:25:a9:e9:9b:e2:4c:86:
1d:1e:35:05:35:68:40:f5:83:6a:cf:78:b7:01:eb:0c:3a:5d:
7a:44:7f:11:1c:dd:67:4f:b8:74:40:07:35:87:a1:c1:44:06:
0c:f3:16:b2:96:18:c1:c4:77:2b:f4:b1:d7:a5:f2:f7:cb:0d:
4b:ae:15:19:bd:a8:e2:51:d2:d0:7e:79:2d:ac:30:fa:c1:02:
00:39:5d:21:04:66:54:d6:f1:d5:19:66:cd:98:ad:27:69:79:
bb:95:d5:4a:d0:0a:8e:83:14:db:98:1a:f3:ec:5a:d5:10:b1:
f3:e6:f0:bd:d9:ae:79:fa:dc:8c:65:2c:59:56:c2:12:e6:7f:
6b:4f:38:11:c7:3c:3c:3e:fe:bf:6c:3e:2f:ef:1c:54:bf:12:
1d:98:77:50:bb:2c:49:cf:f1:77:b0:e7:dd:9f:96:20:95:84:
22:a8:40:9f:09:08:5e:d2:b3:99:c7:ff:e0:62:66:86:99:45:
82:a4:49:a7:dc:cf:d9:3b:6d:ec:9d:c7:de:8a:d2:3c:c1:5e:
a6:1c:b1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:39:06 2026 by rpki-client