Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/cfG8GDhSC5IbhMcmwnrArCxDK5A.roa
File: cfG8GDhSC5IbhMcmwnrArCxDK5A.roa (raw, json)
Hash identifier: FkrvdsSSTjBBdNtO3cQ3OTlfM00z/ndv4EdJpdqE/pM=
Subject key identifier: 71:F1:BC:18:38:52:0B:92:1B:84:C7:26:C2:7A:C0:AC:2C:43:2B:90
Certificate issuer: /CN=75949a020a52ac7c55148085ce3efe2d02aad3d9
Certificate serial: 019F236866C5F823FF1A553A12E19037EB7D
Authority key identifier: 75:94:9A:02:0A:52:AC:7C:55:14:80:85:CE:3E:FE:2D:02:AA:D3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZSaAgpSrHxVFICFzj7-LQKq09k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/cfG8GDhSC5IbhMcmwnrArCxDK5A.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13030
IP address blocks: 2001:67c:7ac::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZSaAgpSrHxVFICFzj7-LQKq09k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:66:c5:f8:23:ff:1a:55:3a:12:e1:90:37:eb:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75949a020a52ac7c55148085ce3efe2d02aad3d9
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71f1bc1838520b921b84c726c27ac0ac2c432b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:0f:ad:d1:7f:43:5b:da:f5:4c:80:5a:21:
bc:6f:07:80:48:d1:09:68:ad:88:e7:00:08:a3:6e:
2f:61:fa:00:77:6c:43:07:ea:87:87:69:10:ce:e6:
6c:d0:e8:90:44:18:04:28:75:81:31:bb:64:c8:d7:
27:87:e0:62:7b:30:5f:a3:9a:6f:49:1b:2f:95:59:
da:34:c1:ef:c3:9d:ff:f3:5a:af:9a:d6:48:7e:61:
34:01:45:02:7f:0c:99:21:9a:ba:20:2c:28:a6:2f:
2d:aa:dd:fd:89:b5:2e:8f:fb:57:53:98:2a:95:0a:
1b:fe:07:d0:e3:18:dc:30:7c:0c:9b:f8:5f:89:c9:
46:54:98:1e:cc:9d:af:17:d3:a2:7e:7e:38:7a:67:
67:25:60:b3:85:09:1c:09:8b:6b:20:f0:07:13:6a:
30:fd:4f:1d:f0:cb:34:9e:bd:b5:1b:fd:ae:73:14:
a2:2d:e7:9f:2a:03:e9:e6:d3:80:29:a4:45:d0:46:
3d:ba:85:b9:64:2f:e3:55:f2:62:00:81:e9:a6:b5:
81:83:8f:3f:d8:7b:de:22:51:be:70:9e:32:bf:27:
92:2f:66:27:78:8b:7b:e7:77:0d:d5:1a:5d:d6:1e:
03:e6:30:35:1a:23:44:d3:8b:65:c7:9e:e5:ac:95:
4c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F1:BC:18:38:52:0B:92:1B:84:C7:26:C2:7A:C0:AC:2C:43:2B:90
X509v3 Authority Key Identifier:
keyid:75:94:9A:02:0A:52:AC:7C:55:14:80:85:CE:3E:FE:2D:02:AA:D3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZSaAgpSrHxVFICFzj7-LQKq09k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/cfG8GDhSC5IbhMcmwnrArCxDK5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/dZSaAgpSrHxVFICFzj7-LQKq09k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:7ac::/48
Signature Algorithm: sha256WithRSAEncryption
75:52:8b:bc:91:1a:5a:f5:fb:c7:a8:60:ac:f0:48:59:43:b2:
01:06:32:0e:63:18:a5:b2:13:67:2b:92:24:d1:63:b2:ef:30:
f0:bb:77:09:de:85:c5:07:49:85:10:72:08:3b:a1:37:fb:18:
25:9c:99:3f:2b:8d:75:bb:c7:1b:c4:ca:93:19:d7:ed:0d:16:
d7:d0:dc:33:c6:cb:4b:d6:e7:3a:3c:9f:81:3c:3a:95:30:96:
32:91:c0:6c:8b:c4:6e:24:76:59:c4:97:a4:ca:dd:24:e6:d8:
d4:3f:3f:b8:d1:91:61:a2:c9:68:1f:cd:34:dd:62:52:50:64:
5b:d3:9c:38:9a:c1:64:0f:1e:dd:81:be:07:ed:cf:20:b1:91:
ee:9a:ab:a5:b7:c2:e2:da:e5:69:12:fb:4f:65:d0:2b:f3:44:
25:b9:3d:5f:b5:a4:8d:79:69:f8:fa:ca:a8:da:b4:bd:c4:97:
e6:16:9c:9a:96:32:24:4b:fb:a5:eb:03:7c:5b:44:ea:1d:0e:
73:b9:45:2d:5a:a2:4a:28:99:02:b6:23:a3:38:ce:1e:a6:e7:
b0:68:73:e3:77:01:cb:84:95:2f:3f:5c:90:ab:2a:e1:e4:46:
59:cd:c2:4a:94:69:1b:a9:62:cd:d1:a1:1a:6e:a6:1a:6a:cd:
1a:46:a3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:20 2026 by rpki-client