Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/AtDiavwmONmfcR6PyPSX1Y3q72M.roa
File: AtDiavwmONmfcR6PyPSX1Y3q72M.roa (raw, json)
Hash identifier: 645rqeq+3xwCJ+dLSr46LUrzfMC+zVPjHY0f0QIzQr8=
Subject key identifier: 02:D0:E2:6A:FC:26:38:D9:9F:71:1E:8F:C8:F4:97:D5:8D:EA:EF:63
Certificate issuer: /CN=2ee765f613d0f258555986ed8cc18aa2d818250f
Certificate serial: 019F2368CAE55D054CB721CA7A7C864FBB72
Authority key identifier: 2E:E7:65:F6:13:D0:F2:58:55:59:86:ED:8C:C1:8A:A2:D8:18:25:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/AtDiavwmONmfcR6PyPSX1Y3q72M.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50066
IP address blocks: 2001:67c:2a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ca:e5:5d:05:4c:b7:21:ca:7a:7c:86:4f:bb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee765f613d0f258555986ed8cc18aa2d818250f
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02d0e26afc2638d99f711e8fc8f497d58deaef63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:8c:62:40:72:f8:f5:3d:e2:fd:a4:af:6e:
43:26:29:93:f4:f3:9d:96:c6:95:40:05:61:96:b4:
58:46:6b:5b:e3:57:73:dc:92:05:c8:a2:3d:53:02:
0f:d8:fa:1b:39:53:da:9d:cf:f5:3c:1a:86:5d:2d:
f2:2e:83:80:7c:2a:90:d2:9f:be:db:92:fb:bf:cc:
8c:e5:6f:2c:b1:6c:69:26:af:01:5c:f5:d1:35:94:
46:9e:b4:ea:7a:02:e2:6e:25:6a:7a:19:9a:0d:6d:
f1:fe:0e:ce:5d:57:67:92:0e:d5:d7:6b:a9:c5:39:
e7:0c:27:7a:59:e3:65:03:ba:71:72:5d:94:a9:ca:
b8:7a:76:d8:ae:cc:87:d6:52:a5:8d:a9:aa:04:28:
bf:c6:d0:be:47:1f:b5:f4:3e:06:1d:b3:6c:9a:73:
c0:e3:ec:9c:13:63:5d:97:7e:01:1e:f8:79:5d:66:
0e:76:6e:c8:2e:33:4b:b6:30:4f:17:62:59:20:53:
cb:69:08:67:ab:07:94:2e:f4:99:9c:30:b4:60:42:
25:cb:83:f5:3d:1b:f7:3d:c6:cd:97:0f:48:48:f9:
68:97:d2:f7:05:1f:ad:7c:75:3a:fb:fc:db:62:74:
25:5b:c3:20:29:c1:55:e9:77:7b:52:0b:28:ac:47:
98:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D0:E2:6A:FC:26:38:D9:9F:71:1E:8F:C8:F4:97:D5:8D:EA:EF:63
X509v3 Authority Key Identifier:
keyid:2E:E7:65:F6:13:D0:F2:58:55:59:86:ED:8C:C1:8A:A2:D8:18:25:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/AtDiavwmONmfcR6PyPSX1Y3q72M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b450af-2091-4ef2-b5f5-2b7c1edf116a/1/Ludl9hPQ8lhVWYbtjMGKotgYJQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2a0::/48
Signature Algorithm: sha256WithRSAEncryption
46:38:91:57:17:ca:39:ab:70:9c:8b:a9:7a:ef:26:61:90:c3:
1e:06:7c:21:32:8c:84:62:6d:b5:36:d9:25:42:bc:ec:a7:4f:
09:6f:e2:f5:68:88:23:f6:93:ea:55:15:29:c7:b8:44:7a:90:
87:9a:18:68:93:90:d4:3d:b1:b1:df:f7:2c:67:fc:53:44:e4:
05:93:a5:3e:b2:9e:c8:3a:c5:78:e5:c9:dd:70:e6:3a:8f:a6:
ad:81:3a:e6:b6:fc:39:d4:5e:dc:90:95:14:3c:b2:82:e7:a0:
ad:32:66:a5:eb:51:44:56:21:5e:a6:b8:94:18:80:f6:6e:8b:
c4:24:ae:88:0c:bc:d5:30:a1:2f:46:a1:9e:76:2f:aa:2f:98:
1f:e7:3b:bf:b6:4a:70:e5:2a:a3:3d:34:7a:c8:01:a3:a3:b1:
9f:6d:ab:e3:55:35:82:b5:04:01:ea:94:37:92:02:23:56:3a:
fa:79:a1:ab:ea:f6:b6:f9:c7:7f:ae:eb:0b:cc:0f:9d:70:bc:
fe:fe:19:d3:95:c6:2a:12:d7:ec:69:13:f2:4e:ef:1b:43:6a:
fe:d8:55:cc:9a:be:8d:e6:03:8c:d2:40:34:d1:07:12:9c:c7:
bb:99:6b:e5:a7:ed:3d:70:08:70:0d:6f:67:57:e5:c9:db:9a:
96:11:4b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:36 2026 by rpki-client