Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/q4cd6FC622LSk8H2EKDhQNE5xJA.roa
File: q4cd6FC622LSk8H2EKDhQNE5xJA.roa (raw, json)
Hash identifier: 1Rk0CEPXV2DiiLwFLy0fJk6LbQF9KGDQLOMW2F+0pU0=
Subject key identifier: AB:87:1D:E8:50:BA:DB:62:D2:93:C1:F6:10:A0:E1:40:D1:39:C4:90
Certificate issuer: /CN=c6ff541cf364193a2a00ada14244acd34c14038a
Certificate serial: 019FA89BE18401EF235C43B78706BAD5827D
Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/q4cd6FC622LSk8H2EKDhQNE5xJA.roa
Signing time: Tue 28 Jul 2026 12:03:35 +0000
ROA not before: Tue 28 Jul 2026 12:03:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39249
IP address blocks: 2001:67c:1874::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9b:e1:84:01:ef:23:5c:43:b7:87:06:ba:d5:82:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a
Validity
Not Before: Jul 28 12:03:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab871de850badb62d293c1f610a0e140d139c490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:c9:21:44:ed:ad:a7:20:80:c4:ea:02:00:
c8:d2:0d:2f:c7:16:5a:38:e4:17:54:6c:27:0f:46:
75:ea:68:06:d2:a2:83:ad:7c:39:8e:e3:ce:10:a3:
da:ed:7c:57:5f:b8:a4:39:26:c0:8e:c6:fd:b4:7a:
2d:99:1c:1c:79:f7:5b:43:58:62:1a:21:7c:68:10:
26:f2:bb:32:16:b7:57:dc:e3:cd:59:ae:fa:4c:eb:
cf:db:78:1d:29:cb:d2:e1:6a:dd:c3:d6:b1:fb:b7:
40:36:fd:69:25:22:42:1b:ac:35:3e:b6:b8:08:99:
08:1b:95:ef:ca:3d:28:f7:a0:c3:cc:02:68:be:12:
33:74:64:dd:62:2e:cd:08:a8:0e:89:45:8b:05:8c:
48:eb:7c:0f:c0:7b:d5:79:ab:54:47:ce:49:be:22:
26:81:47:e9:92:13:85:9e:9b:0a:35:2f:29:97:94:
a7:34:e2:5c:45:31:dd:35:bc:1b:09:be:3f:b5:c7:
d4:28:b2:17:d4:d7:1d:5a:f3:71:e8:38:87:20:0c:
4a:12:e9:6c:58:05:66:6b:36:bd:1b:11:bd:fc:ce:
3e:6b:aa:5e:76:85:8e:64:2c:4c:63:34:c7:45:af:
d0:32:15:7f:09:31:ae:5e:8a:e7:ff:61:37:0e:81:
83:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:87:1D:E8:50:BA:DB:62:D2:93:C1:F6:10:A0:E1:40:D1:39:C4:90
X509v3 Authority Key Identifier:
keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/q4cd6FC622LSk8H2EKDhQNE5xJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1874::/48
Signature Algorithm: sha256WithRSAEncryption
75:71:62:5c:fc:8c:32:f6:ad:ca:bc:7a:10:9c:45:12:f0:73:
6d:c4:bb:59:ff:34:7d:28:83:3b:3a:53:7c:d9:8d:f2:80:7d:
be:a8:f8:6d:15:1e:37:95:28:66:a6:f6:64:84:54:0a:9c:42:
9e:67:0f:57:d0:69:13:cb:12:f3:4d:51:67:3f:ce:ca:e1:d9:
5a:65:3b:29:5f:bf:ca:5d:60:e8:c8:75:e3:4a:bf:62:54:23:
d0:86:23:3e:34:c9:a4:5d:b4:85:7d:48:cd:28:ba:41:50:7f:
47:37:58:01:64:54:28:78:78:e5:db:a4:f6:53:e9:6f:60:5c:
d7:e9:99:e8:ea:27:95:03:0c:ef:e2:b3:45:15:70:36:3c:b2:
10:7e:b6:af:e5:c7:e0:cd:20:9b:34:55:0c:39:c6:12:5a:ce:
ae:51:24:66:24:f7:38:48:29:b2:15:67:2c:cc:be:9f:35:ce:
7d:38:a6:f4:ae:7d:07:16:0f:04:29:6a:65:ef:54:30:fb:3d:
00:31:25:7f:98:0b:29:e3:dc:05:ee:67:1e:78:5d:c2:7c:10:
26:fb:cc:42:5c:4b:4c:c3:d0:35:96:4b:63:75:db:51:2e:9a:
0f:fe:66:05:37:1f:d5:fe:a7:d2:a1:56:05:35:89:85:51:dd:
70:a9:46:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:30:27 2026 by rpki-client