Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/ScFcsl6lvF3SPchqeDIaLpJiH4E.roa
File: ScFcsl6lvF3SPchqeDIaLpJiH4E.roa (raw, json)
Hash identifier: hC8uhwWvIDgVsrI5VZ9bvKvfidgku7ZK/6gVNz3FnvY=
Subject key identifier: 49:C1:5C:B2:5E:A5:BC:5D:D2:3D:C8:6A:78:32:1A:2E:92:62:1F:81
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 019F93E1279BDE806FD24502BC7510F8E6E5
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/ScFcsl6lvF3SPchqeDIaLpJiH4E.roa
Signing time: Fri 24 Jul 2026 11:27:14 +0000
ROA not before: Fri 24 Jul 2026 11:27:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48274
IP address blocks: 2a05:9340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:e1:27:9b:de:80:6f:d2:45:02:bc:75:10:f8:e6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Jul 24 11:27:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49c15cb25ea5bc5dd23dc86a78321a2e92621f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:51:8c:e9:83:e6:a5:e7:99:ef:b1:d7:a4:b7:
7a:e2:d0:f9:e5:4e:16:6e:8e:97:cd:ce:da:57:58:
8c:dd:bc:d3:7f:ad:cc:93:be:e7:f1:b1:9d:95:bc:
64:45:bd:e0:f3:78:05:91:42:e9:7a:94:98:17:dc:
06:a3:07:24:90:c3:5b:cf:89:a0:58:cc:69:d3:0c:
94:f9:d6:f2:4a:0e:40:2c:38:fc:93:55:eb:60:2c:
3d:e6:ed:9a:6f:55:a6:d2:a0:db:f0:e1:03:12:89:
09:49:e5:11:26:59:e9:3f:d4:91:9f:62:c2:ce:a7:
32:50:c3:a6:91:fa:99:24:92:8a:5d:01:9f:d5:b9:
ab:88:2e:27:31:af:65:a5:58:61:bc:b1:ce:6f:45:
a4:7c:f2:59:16:fd:44:7b:bb:fa:e3:40:8b:28:0d:
63:2b:01:2a:be:94:e0:1b:f9:ea:a2:0d:aa:e9:bd:
02:e0:2d:a5:69:f8:1a:f2:e3:16:bd:29:95:b2:cc:
c0:92:60:3e:1b:33:65:d2:16:29:65:46:5b:0b:bf:
d0:26:e2:68:7c:ef:e7:a1:98:34:33:4b:74:cb:85:
23:76:6b:0a:14:f4:5b:c1:b6:63:58:dc:ef:c9:cf:
e7:e0:87:b8:05:36:ec:3a:ac:51:65:90:e7:c2:35:
be:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C1:5C:B2:5E:A5:BC:5D:D2:3D:C8:6A:78:32:1A:2E:92:62:1F:81
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/ScFcsl6lvF3SPchqeDIaLpJiH4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9340::/29
Signature Algorithm: sha256WithRSAEncryption
6a:2b:da:b2:9d:8a:84:86:90:09:6f:79:d8:85:4b:80:8d:c7:
60:bd:02:1c:42:f9:d5:ff:6d:2f:0e:7d:a9:6a:8a:13:e2:81:
79:c2:03:f3:39:71:42:ca:82:a3:ac:31:8f:a0:e2:b4:b6:13:
8d:e7:3b:89:b6:2b:7a:f8:ea:5b:53:0a:65:2d:ad:cb:1e:a2:
be:1d:45:f8:dc:10:9a:fd:fc:12:33:a1:79:25:03:a3:5f:26:
f6:f0:8d:a0:c0:55:9e:43:ce:bd:c5:8c:23:06:0f:77:70:59:
fa:d2:2b:bc:ff:86:e5:53:5b:30:d8:be:d8:96:d5:fd:0e:d6:
0a:9c:dd:d9:cf:80:1e:eb:f3:12:74:33:43:c3:40:38:68:15:
1b:4e:05:bd:ff:79:46:f8:96:84:b4:5a:cb:e8:c1:fa:ca:c4:
6b:e3:f5:0f:a0:9a:ea:98:5b:9c:eb:7d:3a:b3:07:65:0d:fc:
e5:09:a4:ed:05:c7:54:d6:bd:4a:24:97:39:1d:8b:e5:d6:fe:
60:74:bc:89:b3:98:b3:aa:9c:dd:48:b9:fc:bd:e7:6b:5f:03:
d9:84:11:82:47:3b:3f:61:fe:5b:d1:de:0f:ef:c4:96:33:bd:
5d:fd:43:ef:42:a8:0f:70:a6:33:2c:c0:bf:4f:5e:f4:ca:ee:
d0:76:db:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:06:16 2026 by rpki-client