Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/sfoaD0gh3QgYHRuTwM6KqFkxOkQ.roa
File: sfoaD0gh3QgYHRuTwM6KqFkxOkQ.roa (raw, json)
Hash identifier: MG+l0cjg9doHuJsEha9w6usP174LVgs0j+PQfMk+iKk=
Subject key identifier: B1:FA:1A:0F:48:21:DD:08:18:1D:1B:93:C0:CE:8A:A8:59:31:3A:44
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F2368F5A5829518172CB4A44F9E159772
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/sfoaD0gh3QgYHRuTwM6KqFkxOkQ.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10099
IP address blocks: 2a04:ac03::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f5:a5:82:95:18:17:2c:b4:a4:4f:9e:15:97:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1fa1a0f4821dd08181d1b93c0ce8aa859313a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:69:98:d6:f7:69:73:fc:0d:15:5d:ed:cc:
c2:a3:97:00:fb:c8:2f:e5:ed:77:3d:07:82:e5:5a:
4b:e8:91:26:bd:0b:5b:b2:44:dd:1f:c9:1d:d5:26:
6a:4c:37:93:4f:ac:92:4c:08:82:6c:94:91:8b:b7:
b9:e8:be:7c:6a:31:06:a5:41:8f:3d:6c:41:a9:dc:
e2:b9:76:93:77:4a:ee:a1:dc:3a:50:b2:be:dd:0f:
3f:80:f2:6f:57:d4:55:70:f5:2c:f6:8b:be:c9:f5:
19:a7:09:e5:26:6e:9d:30:9c:6c:09:29:5e:02:f2:
06:2c:76:a2:11:f2:f2:58:05:79:ac:07:d7:92:71:
4f:8c:24:95:f7:d9:a3:46:47:fa:cb:52:01:01:ea:
91:2d:dc:e0:a5:17:47:f0:51:50:53:ff:16:6e:ff:
81:d5:6e:ea:c9:55:e9:0f:87:6e:3d:4c:ed:ec:73:
bf:0a:d9:ba:90:a3:10:c9:40:ae:b6:d0:38:50:bb:
05:f6:fe:0e:b7:04:98:c2:d2:bc:50:b2:37:f5:b4:
27:96:a3:e7:41:75:b9:a5:ae:cb:46:86:0b:26:dd:
70:80:4b:ff:dc:09:90:aa:31:a0:c8:32:a5:97:46:
5f:48:3e:6c:f3:23:45:46:34:65:e0:4d:8b:6f:e1:
1f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FA:1A:0F:48:21:DD:08:18:1D:1B:93:C0:CE:8A:A8:59:31:3A:44
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/sfoaD0gh3QgYHRuTwM6KqFkxOkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ac03::/64
Signature Algorithm: sha256WithRSAEncryption
7c:b2:25:fc:dc:b5:3d:4a:00:fb:4e:bf:f0:44:88:69:e1:75:
31:ca:1d:44:07:ab:24:5d:a7:3f:35:21:5f:f0:7c:36:23:e4:
76:d3:50:aa:23:41:db:ed:2d:19:b6:d8:ff:ba:b2:b8:fd:83:
4e:8b:76:f8:c8:03:b7:9b:e8:56:1c:96:16:aa:38:26:19:d2:
32:40:44:f2:93:7c:aa:ee:b3:34:85:96:d4:e7:c9:ba:b8:44:
9d:71:3c:02:28:15:94:db:8d:f5:fe:f2:62:1e:df:db:55:84:
ef:19:de:76:90:02:43:58:0a:32:89:06:df:fe:07:48:49:ff:
bc:5c:b4:00:13:77:07:34:9b:ad:43:61:2e:51:08:56:66:63:
01:07:05:ee:22:14:f7:92:a5:b1:1f:db:a9:87:47:20:b5:85:
d2:9f:23:16:65:9c:e6:a6:45:d8:b4:cb:fb:ee:1c:d3:d3:dc:
20:c7:d2:c5:2d:7d:e6:1c:d7:fa:2e:3d:b0:b4:bd:47:23:91:
68:52:a4:34:28:af:12:96:19:d7:ef:05:5f:3a:44:23:b7:1b:
d1:f5:f0:0a:16:a6:81:26:4e:3a:7e:8e:ff:51:46:f3:ac:6f:
4e:28:0c:ba:dd:99:90:17:44:4b:d5:af:0b:32:fa:15:45:64:
ef:7b:6e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:05 2026 by rpki-client