Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/2JFfv659oPFGOkGk_bNMMZy8rbs.roa
File: 2JFfv659oPFGOkGk_bNMMZy8rbs.roa (raw, json)
Hash identifier: 9gs7l3uhLE7j+4RGYjBCct/pVQeRefhiDRoUa8kkxMY=
Subject key identifier: D8:91:5F:BF:AE:7D:A0:F1:46:3A:41:A4:FD:B3:4C:31:9C:BC:AD:BB
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 01A049CD17741E1FB70E2046E1B1EE4AC20E
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/2JFfv659oPFGOkGk_bNMMZy8rbs.roa
Signing time: Fri 28 Aug 2026 19:16:12 +0000
ROA not before: Fri 28 Aug 2026 19:16:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218888
IP address blocks: 2a10:4646:9c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:cd:17:74:1e:1f:b7:0e:20:46:e1:b1:ee:4a:c2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Aug 28 19:16:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8915fbfae7da0f1463a41a4fdb34c319cbcadbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:cd:7b:dc:45:d4:9c:a3:95:d6:35:4a:0b:
49:8a:ad:a8:86:a9:35:f7:b4:03:1d:a8:df:b0:80:
5d:13:97:36:f9:6b:a7:41:1d:d8:e3:05:61:f3:e8:
71:a4:aa:ff:79:12:f6:45:df:f7:e0:b0:9c:5c:af:
a4:ad:38:1b:77:74:a0:11:83:91:6a:49:a0:d9:6b:
b0:62:5a:bb:eb:ef:04:d4:a6:80:13:28:34:56:70:
dd:be:c0:ea:80:97:ff:fb:ba:1c:05:6a:92:a3:6e:
a1:cc:98:3f:b7:f9:39:5b:3e:71:05:74:68:77:57:
c3:da:cc:57:fd:27:62:79:8f:1a:73:dc:88:71:83:
8a:58:4a:40:a7:50:23:79:57:fe:01:47:9e:ca:3b:
02:a1:a8:cf:74:0f:e3:b9:a8:26:c6:f8:39:5d:7e:
fc:6e:4f:aa:22:50:1c:00:5c:1a:07:f4:09:0c:ae:
b0:de:72:b7:62:28:5f:8e:ae:5a:8b:df:f4:e1:8f:
4e:8e:86:2f:f2:de:8a:d3:2f:73:ad:f8:61:6f:93:
2d:71:4f:27:9a:27:b5:5f:5e:26:f3:03:f1:37:20:
95:bd:d6:cf:dd:04:39:d2:92:b1:19:ac:4c:bf:ab:
16:7d:4b:3a:a9:b4:ef:27:3f:a6:0d:ed:1d:f3:bc:
c9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:91:5F:BF:AE:7D:A0:F1:46:3A:41:A4:FD:B3:4C:31:9C:BC:AD:BB
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/2JFfv659oPFGOkGk_bNMMZy8rbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:9c0::/44
Signature Algorithm: sha256WithRSAEncryption
9c:c2:dc:6a:df:29:73:d6:5d:3b:84:37:6b:67:2f:5c:91:8b:
37:21:de:bf:39:41:c1:fe:f8:fd:81:92:a5:a6:a8:f1:6c:1a:
bf:1a:23:c2:26:ef:a3:78:b0:a3:34:a9:fd:4e:0d:1a:b0:ea:
d1:ab:3e:9b:d8:5e:7d:77:c2:0b:8d:59:fa:47:85:50:5e:12:
27:4f:84:46:c3:50:15:59:d8:41:fc:0b:17:16:ed:4a:86:d6:
39:bc:e5:9d:3c:f3:69:4c:2d:7f:9c:b2:3a:73:a0:ea:66:23:
fb:55:d2:da:61:db:53:ac:0d:85:38:85:d3:f9:6d:d7:ac:be:
e2:d2:4f:5c:cf:43:8f:47:0c:fc:51:32:5a:db:f9:a5:d1:d7:
e9:c0:fb:93:c3:3d:b0:eb:e1:a8:0a:a8:87:e8:be:14:4c:57:
ae:f6:fe:c4:1c:c1:b7:71:0b:04:8f:25:af:e0:1d:5c:2f:80:
f0:77:5f:22:ee:3e:61:33:56:e5:b8:cb:10:11:48:80:05:46:
14:41:b7:3a:a7:e2:5c:5e:e0:3a:c6:21:f0:46:a8:d0:0b:14:
46:02:3b:99:02:d0:08:c1:fb:bc:a0:8d:46:1e:12:5a:c0:59:
a3:a9:2b:3a:48:b1:77:f4:ec:6e:06:85:07:c0:bf:5a:67:04:
59:94:a2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:52:35 2026 by rpki-client