Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/98tD6JWHqp0ypI5bbPGuX_UIwfA.roa
File: 98tD6JWHqp0ypI5bbPGuX_UIwfA.roa (raw, json)
Hash identifier: 6KvAEkDtoICEwzMgBywfxZUr+Ojo3kPDVBSheW2+ZSo=
Subject key identifier: F7:CB:43:E8:95:87:AA:9D:32:A4:8E:5B:6C:F1:AE:5F:F5:08:C1:F0
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 019C0F1DB5CC20C7733C11F15597599B707D
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/98tD6JWHqp0ypI5bbPGuX_UIwfA.roa
Signing time: Fri 30 Jan 2026 13:35:31 +0000
ROA not before: Fri 30 Jan 2026 13:35:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213507
IP address blocks: 2a06:cac0::/29 maxlen: 48
2a11:9600::/29 maxlen: 48
2a12:ec0::/29 maxlen: 48
2a12:1900::/29 maxlen: 48
2a12:28c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0f:1d:b5:cc:20:c7:73:3c:11:f1:55:97:59:9b:70:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jan 30 13:35:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7cb43e89587aa9d32a48e5b6cf1ae5ff508c1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:98:d2:45:18:7b:d9:16:81:c7:d6:06:d5:
6c:ac:82:dc:19:80:bf:1f:51:5e:fa:9a:23:c6:ca:
43:bb:f0:09:b1:0a:72:d5:7a:89:a7:5e:e9:ed:c2:
b7:c2:2e:09:01:4b:95:08:94:02:9d:ee:b9:9a:ab:
39:ea:9a:9f:08:e2:46:9c:7c:0c:6b:b5:9f:bc:e7:
81:3c:dd:b4:1c:69:9a:71:b4:9f:cb:69:a0:62:41:
4a:4b:d6:80:22:f9:40:e6:13:b7:e1:2d:96:cf:d4:
0c:74:f5:02:15:63:ac:33:63:b2:d8:18:09:87:a9:
48:ba:24:18:2f:ae:6c:83:1b:60:8f:08:8a:77:89:
a2:98:84:f7:58:92:17:a4:24:bf:c0:29:54:d2:c5:
04:e1:fe:50:75:7f:c4:c4:94:a7:b7:60:99:51:8c:
9a:68:47:67:39:b8:15:b2:b5:57:84:73:41:04:79:
49:05:09:1f:a1:15:bd:33:8e:d1:0a:ed:4c:e1:16:
2e:10:f7:30:92:54:a5:e0:f0:4a:2f:e7:87:4f:e0:
05:15:54:63:8a:e0:c1:cb:2b:ed:17:79:0c:ab:99:
e3:5d:e8:b4:e9:fb:16:20:52:95:cf:40:13:af:73:
9c:db:57:9a:32:be:8f:a1:bc:b9:af:01:37:ba:a9:
18:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CB:43:E8:95:87:AA:9D:32:A4:8E:5B:6C:F1:AE:5F:F5:08:C1:F0
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/98tD6JWHqp0ypI5bbPGuX_UIwfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:cac0::/29
2a11:9600::/29
2a12:ec0::/29
2a12:1900::/29
2a12:28c0::/29
Signature Algorithm: sha256WithRSAEncryption
75:b7:93:e8:c8:b6:a1:f6:af:f0:ef:d1:6d:4b:09:e5:2a:46:
de:70:3c:a6:47:6c:b1:c0:3c:c9:db:15:55:1f:f1:6e:03:bf:
5f:20:ae:7f:1f:bd:b3:8f:84:42:91:55:e1:97:2e:0d:67:bc:
84:57:bf:75:66:d7:2d:a6:23:8f:75:fa:46:48:57:72:bd:ad:
91:ef:81:0a:b7:25:88:ba:a0:28:d5:1c:ac:ee:97:02:60:43:
ac:cf:38:4b:d9:bf:ea:7b:0b:ed:e3:46:d9:e0:4c:e7:b8:1d:
1d:a8:c7:22:58:f2:5b:4c:da:c8:24:78:86:c7:fb:30:07:6e:
f4:6e:67:8f:3e:81:8c:91:b9:d8:c8:3c:fb:7d:89:81:fb:00:
34:4b:f7:8b:ff:cb:7e:9a:59:0e:6e:1e:f7:e1:2b:d8:9e:1a:
13:be:e3:48:a3:97:09:05:30:af:27:96:f2:b4:1b:0e:6d:e0:
f2:bc:3a:e9:16:d2:11:43:b5:d6:1a:27:f4:a9:28:0d:e0:66:
0d:ab:55:07:1c:69:5e:79:02:4f:95:4a:f0:bc:48:1e:94:b3:
aa:5e:b2:cb:e3:9e:9b:91:e1:3b:a4:43:b2:64:bb:bd:69:68:
b6:d0:94:a3:ce:98:0a:67:a4:88:8d:70:6d:3b:ca:03:07:48:
67:34:90:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:18:24 2026 by rpki-client