Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/L7unT3wF2J_onYc0udjc9XnBEWs.roa
File: L7unT3wF2J_onYc0udjc9XnBEWs.roa (raw, json)
Hash identifier: KxVWMk5aTpbygjadse9AXrj9EQRdEuzKZUmFJGIltkM=
Subject key identifier: 2F:BB:A7:4F:7C:05:D8:9F:E8:9D:87:34:B9:D8:DC:F5:79:C1:11:6B
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 019F1E5C75084BF3A2E575CBB851745E5F9A
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/L7unT3wF2J_onYc0udjc9XnBEWs.roa
Signing time: Wed 01 Jul 2026 15:46:43 +0000
ROA not before: Wed 01 Jul 2026 15:46:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219298
IP address blocks: 2001:67c:de0::/48 maxlen: 48
2001:67c:14b4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:5c:75:08:4b:f3:a2:e5:75:cb:b8:51:74:5e:5f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: Jul 1 15:46:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fbba74f7c05d89fe89d8734b9d8dcf579c1116b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:98:7d:f0:f5:d0:8b:c9:fa:93:7f:7a:3b:
47:64:0f:37:9f:80:0f:cc:5d:64:44:63:76:c9:c6:
dc:fd:85:24:5b:1e:1a:9a:05:a6:a8:68:f5:c0:f4:
15:d6:cf:f1:19:79:9a:ec:75:bc:67:56:5e:02:85:
c1:b8:8d:2a:19:e7:a0:d7:fc:56:fa:a4:8f:12:b0:
ba:2f:53:36:a4:4d:05:7b:5d:d9:4b:92:0f:89:02:
5f:77:c7:a4:36:4a:be:b5:dc:d8:98:ab:fd:31:8c:
a5:bf:68:c9:a1:ad:c5:e9:60:5a:b9:a2:e4:2d:2c:
8c:ff:a2:1b:1f:02:bb:a8:e9:ec:97:a5:21:2e:d4:
01:10:04:45:ce:bd:00:7f:6a:ac:55:40:d0:9a:ea:
1c:07:97:16:53:df:f2:00:17:5f:95:3d:2f:60:9c:
01:fd:a8:6c:75:56:97:e7:55:a1:84:02:84:ef:63:
7a:b7:9e:f2:5b:d2:3e:ce:41:de:c2:3a:c1:ba:a7:
df:bc:e2:56:60:17:c0:43:bb:2d:17:6c:00:40:fd:
ac:06:c8:25:fe:1b:54:34:5f:e2:c0:3e:ee:e7:8d:
1f:aa:d6:11:99:43:df:56:66:3d:1f:51:ea:2d:07:
a2:c9:07:1a:17:d1:38:0d:f2:5b:12:c9:cc:d9:d3:
8c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BB:A7:4F:7C:05:D8:9F:E8:9D:87:34:B9:D8:DC:F5:79:C1:11:6B
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/L7unT3wF2J_onYc0udjc9XnBEWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:de0::/48
2001:67c:14b4::/48
Signature Algorithm: sha256WithRSAEncryption
79:4b:90:8f:2d:eb:db:f6:f9:19:47:f9:c5:59:39:44:9f:48:
3e:25:f3:83:fa:41:f6:01:02:c2:e3:ac:bb:35:3c:84:86:c2:
ba:db:61:62:d8:01:bb:fe:61:04:44:80:49:b5:f1:8d:7c:c7:
ea:47:ff:0c:3e:e8:b4:0d:29:18:ea:79:a9:52:bb:4e:13:bc:
2e:9c:67:4d:80:8b:76:d3:4f:57:a9:b5:b6:97:4c:21:dc:f3:
3e:ac:63:a1:4a:a9:5c:71:d9:4c:83:00:a7:41:0a:4b:bb:db:
7c:03:95:f8:f4:48:88:86:f6:df:99:ed:d6:3a:2a:be:f3:81:
c0:91:b1:c6:e7:2c:0a:19:f7:3c:82:ed:7f:6c:4b:c2:0d:65:
57:94:8f:9e:2a:bc:b5:bc:6f:4e:6b:bf:af:31:b9:20:d4:ee:
bd:b4:02:95:f4:8a:04:5a:ea:80:65:95:07:9c:60:3d:d5:90:
66:49:02:27:21:48:8c:20:18:4e:cb:86:45:a2:73:9b:dc:67:
ed:d7:bd:31:f5:74:af:e4:c9:f1:43:88:34:28:8b:b6:b3:a0:
ca:11:18:8d:98:2b:f2:f5:76:04:29:b1:75:76:cd:21:80:69:
13:0d:68:d2:ed:61:bc:8b:3b:16:46:f0:2a:8d:fc:0e:da:15:
6c:3b:17:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:27 2026 by rpki-client