Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/wUccj_rDqcMS5f6rHGM1S82tXw8.roa
File: wUccj_rDqcMS5f6rHGM1S82tXw8.roa (raw, json)
Hash identifier: Am0yB5T/uFMdaWWU3crSox2wHqF23olZ6K+6iaufknI=
Subject key identifier: C1:47:1C:8F:FA:C3:A9:C3:12:E5:FE:AB:1C:63:35:4B:CD:AD:5F:0F
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 019F76D27EF102E5618EEC46A30AA06F8084
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/wUccj_rDqcMS5f6rHGM1S82tXw8.roa
Signing time: Sat 18 Jul 2026 20:02:14 +0000
ROA not before: Sat 18 Jul 2026 20:02:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197170
IP address blocks: 2a0f:ca80:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:76:d2:7e:f1:02:e5:61:8e:ec:46:a3:0a:a0:6f:80:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Jul 18 20:02:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1471c8ffac3a9c312e5feab1c63354bcdad5f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d4:b4:33:a4:7c:c8:b4:3b:14:8c:04:fc:da:
9a:05:ee:88:af:99:a5:41:79:3d:22:98:11:e7:32:
06:63:2f:86:c2:12:87:bc:51:d8:7b:28:8e:a0:7a:
da:44:dd:de:1c:63:a3:1e:26:e9:11:a2:44:1c:59:
36:86:3c:4d:41:86:7d:19:af:1f:10:b7:69:1d:82:
49:46:11:c3:8e:e6:4d:5e:9d:bc:2f:ab:0f:e9:71:
03:aa:ca:0e:57:0d:7c:94:c8:78:39:6f:8d:98:71:
da:07:65:29:15:b7:20:43:13:b6:e2:2d:ad:e6:00:
15:f0:df:2a:10:93:39:87:1d:db:3c:0b:23:a2:30:
fc:52:a3:5b:53:67:5e:27:2e:4b:d1:8b:d4:e3:c5:
38:8e:ab:95:47:87:6a:c4:1d:be:cb:c8:b9:f7:c4:
eb:de:0c:de:ec:15:89:45:c4:0b:75:16:0d:d6:c4:
23:93:4f:57:0e:19:64:fe:2f:3f:35:21:d5:85:b7:
84:c8:c6:d0:f1:8a:c4:56:bd:b0:f0:4d:5e:52:e6:
d7:bc:e3:e1:59:5e:92:a5:70:f6:93:cc:a8:ae:7c:
e6:a1:42:14:37:63:a8:62:8d:bd:99:e7:59:bc:bd:
c1:9b:54:fc:a5:2f:87:e2:5b:04:88:44:fd:fd:50:
73:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:47:1C:8F:FA:C3:A9:C3:12:E5:FE:AB:1C:63:35:4B:CD:AD:5F:0F
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/wUccj_rDqcMS5f6rHGM1S82tXw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:ca80:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
c8:e3:75:74:d3:2c:e3:55:b3:fb:91:fe:e4:cb:fc:d5:6a:c0:
b3:c5:13:fa:65:c5:77:50:9f:d7:e8:06:db:ec:26:d6:2c:ea:
c1:28:6a:6c:b8:4b:29:01:6c:e9:e5:c6:cf:72:5c:66:4b:f5:
ed:40:5a:6a:aa:d8:20:fe:5d:a8:2a:dd:bb:0a:7f:56:65:a3:
33:a1:d5:49:25:37:3e:3b:d8:46:86:18:42:83:4c:14:8e:6b:
1d:d6:e8:ad:e2:c2:e0:f6:c2:a1:ef:da:d6:2a:a2:b1:91:4a:
b1:b1:c0:f9:10:8c:fc:6c:17:ae:6a:75:ab:d3:45:66:2c:d6:
50:86:48:60:f9:64:a4:8d:72:52:17:d6:92:ff:2e:59:70:ae:
97:ab:3f:b3:6c:60:5c:38:a3:3c:c7:48:77:84:aa:c2:3f:28:
61:1f:c5:3a:71:93:95:3f:ad:f5:ae:04:af:da:91:b7:94:a3:
03:ac:06:fd:8a:22:31:38:00:9e:97:b3:6a:24:e1:59:1a:17:
98:c9:87:e7:56:0c:29:df:72:9d:84:c6:59:2a:e6:18:50:33:
00:0b:23:22:99:84:fd:c1:84:55:98:1d:93:32:35:c0:45:1a:
bb:c0:a7:a1:12:7a:10:84:dc:c3:30:db:66:a2:bf:e0:c0:13:
43:91:4e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:46:16 2026 by rpki-client