Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/aMzR14uquK9xRLMlgVieiQnpsL8.roa
File: aMzR14uquK9xRLMlgVieiQnpsL8.roa (raw, json)
Hash identifier: LnMZCy9Vc3AkrK23NCsUcwd16nNnZncQK2bQfZFfX7Y=
Subject key identifier: 68:CC:D1:D7:8B:AA:B8:AF:71:44:B3:25:81:58:9E:89:09:E9:B0:BF
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019FA423278A20DC64CAE626D5C9CC1042DA
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/aMzR14uquK9xRLMlgVieiQnpsL8.roa
Signing time: Mon 27 Jul 2026 15:13:14 +0000
ROA not before: Mon 27 Jul 2026 15:13:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402402
IP address blocks: 2a11:1e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:23:27:8a:20:dc:64:ca:e6:26:d5:c9:cc:10:42:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jul 27 15:13:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68ccd1d78baab8af7144b32581589e8909e9b0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:0d:21:25:11:1a:11:3e:f3:0b:0e:9e:aa:
02:8f:07:f2:74:da:27:72:83:11:5a:3e:4f:bb:d4:
9b:dd:fd:ee:86:82:11:75:66:c3:b7:d8:29:38:af:
e9:d8:1a:35:9a:6b:21:06:07:06:63:52:8f:a6:ee:
45:c2:f1:80:c4:7f:f3:e2:63:c4:8d:c8:96:b8:d0:
e5:87:7b:f5:b2:35:6b:a4:9e:37:bc:d3:19:a6:8c:
75:06:4b:11:63:2d:ff:f3:ea:4e:e2:2d:f1:76:b2:
85:2c:67:09:db:83:01:28:67:30:b0:b6:8c:e6:7c:
64:b2:21:d3:19:da:64:14:fc:6c:3b:a2:c5:4e:e7:
e5:7b:bd:f0:3f:0b:51:7b:6a:12:4e:03:ce:39:24:
36:da:53:19:d0:64:1d:b9:a7:0d:62:91:c7:8b:42:
18:8f:a2:95:9e:3b:90:8f:6d:1b:de:0d:d3:e1:9c:
8c:36:8f:99:ce:ea:b7:83:23:b7:26:f3:4e:82:e8:
dd:72:83:82:32:2f:c6:63:ff:e1:ca:02:90:b4:6e:
d4:cf:9f:6b:8f:3f:21:fa:88:22:87:c2:a9:9e:90:
d7:dd:bc:78:9a:53:94:c4:f7:74:ba:34:88:c6:d9:
54:20:ac:3a:38:2b:92:34:56:ab:91:d0:49:d6:89:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CC:D1:D7:8B:AA:B8:AF:71:44:B3:25:81:58:9E:89:09:E9:B0:BF
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/aMzR14uquK9xRLMlgVieiQnpsL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
79:38:91:83:03:9c:7b:7e:46:70:fd:ed:7c:bf:92:27:cc:df:
35:43:8f:c1:86:df:8b:30:b8:f8:4e:8f:21:57:f0:07:cf:19:
00:9b:53:af:c2:00:11:34:f2:a4:75:04:43:28:5a:7e:e9:03:
52:08:90:52:fe:23:fe:7f:d1:ea:4b:60:d4:44:93:b3:60:cd:
fe:d3:f4:c7:b8:a8:eb:d4:98:e2:cf:6b:99:48:41:b0:51:f5:
81:38:bd:46:4f:aa:ae:0f:a5:ce:5d:78:c6:7b:1b:d4:83:19:
41:a5:a2:ef:5c:fb:bb:24:94:75:56:64:ae:e9:0e:a2:0c:27:
14:6d:a2:1b:91:28:bf:6e:ed:8e:76:12:d5:b5:a2:1e:16:8e:
7f:91:e1:95:59:03:e6:e4:f1:e1:40:16:43:32:2f:1a:81:85:
f5:25:6d:a7:fd:5a:0e:ec:44:e8:45:66:ed:68:c8:2e:88:7f:
18:46:f0:4b:e7:ad:9c:6f:d2:62:ff:16:92:82:4e:fe:3a:28:
fb:b5:54:d9:63:1a:4a:89:84:e8:65:47:7b:b0:ff:32:41:3d:
f6:53:18:ea:ae:f1:03:97:6e:c2:4b:8b:51:36:e9:d0:6c:25:
85:5c:e6:82:c7:29:49:a7:1c:3a:ae:d5:fb:d0:4d:fb:41:32:
5b:6c:8b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:48:23 2026 by rpki-client