Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/tPIdoj3UUYmUkRkD66gzASs_7lw.roa
File: tPIdoj3UUYmUkRkD66gzASs_7lw.roa (raw, json)
Hash identifier: yc1VdGTD+R18zDVV1b+Z+1bYQb+Hr0FGdKkZS6ve5QE=
Subject key identifier: B4:F2:1D:A2:3D:D4:51:89:94:91:19:03:EB:A8:33:01:2B:3F:EE:5C
Certificate issuer: /CN=59cef6c1c2d4d5d7e26ea5934ce183b298f29bfc
Certificate serial: 019F2368CC79B9DFE637A1931C781EFEA5DE
Authority key identifier: 59:CE:F6:C1:C2:D4:D5:D7:E2:6E:A5:93:4C:E1:83:B2:98:F2:9B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/tPIdoj3UUYmUkRkD66gzASs_7lw.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209090
IP address blocks: 2a10:c706::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cc:79:b9:df:e6:37:a1:93:1c:78:1e:fe:a5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59cef6c1c2d4d5d7e26ea5934ce183b298f29bfc
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4f21da23dd4518994911903eba833012b3fee5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ca:28:5e:41:4c:e8:39:62:45:ff:17:aa:c7:
a8:da:5b:d5:97:b3:ee:c1:9f:60:14:32:07:e6:72:
9b:3b:5d:dd:b4:d0:d6:e5:fb:98:ea:5f:83:e0:19:
09:af:d1:46:53:63:cf:2c:cc:11:15:53:45:71:dd:
7a:fa:24:25:f0:44:b3:2a:a6:b3:6c:3b:90:74:15:
b9:6b:8c:98:13:11:fe:55:7a:3b:27:72:9e:92:c0:
ef:51:b0:32:08:7e:5d:51:99:10:68:83:bc:fa:a6:
4a:50:7f:91:a6:ad:8d:33:ab:e3:56:a1:62:c8:31:
ee:5a:62:2f:fa:06:cd:88:26:be:b7:e3:83:12:2f:
47:65:0d:86:70:8e:1d:b5:fe:34:6d:43:39:a1:41:
1f:a8:83:60:34:95:ba:25:7d:3c:ae:15:da:c7:a7:
e6:3b:c4:39:d5:9b:c1:fe:8a:98:40:51:ce:07:df:
3d:a3:f7:44:9d:c8:ec:57:53:b0:c6:d0:20:2a:4c:
b6:a7:d6:ab:21:ac:fe:a5:0f:39:1e:ce:1d:81:30:
cf:f4:b9:65:c7:fe:cb:0e:b9:fb:cb:c6:a3:bc:04:
a2:a7:dc:a3:4b:84:c3:d3:9f:c0:e0:43:15:07:34:
02:8b:e6:99:4d:ac:58:a9:fe:c9:31:6c:b1:e4:79:
de:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F2:1D:A2:3D:D4:51:89:94:91:19:03:EB:A8:33:01:2B:3F:EE:5C
X509v3 Authority Key Identifier:
keyid:59:CE:F6:C1:C2:D4:D5:D7:E2:6E:A5:93:4C:E1:83:B2:98:F2:9B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/tPIdoj3UUYmUkRkD66gzASs_7lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:c706::/32
Signature Algorithm: sha256WithRSAEncryption
36:ee:4d:6b:ce:af:3e:53:6c:9d:3d:1c:f2:ae:56:aa:3a:d9:
7b:e9:8f:d8:66:6e:0e:13:7f:a4:05:c6:f8:82:9a:40:7c:00:
b2:cb:a3:c0:47:a3:0a:e7:85:c2:3b:a5:4e:92:f4:61:49:28:
fa:41:bf:4b:47:5a:dc:ac:3f:ea:5c:c5:ee:3a:a4:f5:ba:01:
33:9c:da:9b:3b:96:8c:73:92:18:51:48:fd:77:95:a7:99:a2:
45:de:ee:16:8e:90:64:1d:30:22:6e:8a:ec:da:a5:6d:17:8e:
9b:90:e2:45:f8:26:f2:c1:99:0e:6e:7b:c4:5b:01:05:c6:7b:
9d:fc:5a:55:85:7b:82:fc:b4:56:fb:9c:f2:c1:a8:73:5c:b6:
70:8a:5e:e4:56:a1:af:89:c8:9d:ff:35:ef:c6:a8:2d:1c:df:
b4:c5:3a:5d:d2:64:28:0f:c9:a6:67:fa:2b:15:82:cd:56:4b:
3f:4f:13:95:14:68:3f:1b:0b:f3:52:b4:30:77:6f:a0:d7:5d:
d6:6a:66:84:97:49:50:1f:ff:66:88:e5:1b:41:26:af:11:fe:
80:9f:76:a1:f2:da:f0:59:dd:05:63:f1:e7:31:14:ba:45:ab:
79:f5:0d:4f:77:48:89:35:7d:84:48:7b:9c:52:1b:1e:d1:3d:
1f:07:8b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:05:34 2026 by rpki-client