Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/avi7DMJKeOctm2dYd02bLrCit3I.roa
File: avi7DMJKeOctm2dYd02bLrCit3I.roa (raw, json)
Hash identifier: nFZFKEEyrubZa1X0U5AMhYHfVMMCE2ecKi32d2MPqUU=
Subject key identifier: 6A:F8:BB:0C:C2:4A:78:E7:2D:9B:67:58:77:4D:9B:2E:B0:A2:B7:72
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 019E822339875DE961685D961DC3ADA35EDC
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/avi7DMJKeOctm2dYd02bLrCit3I.roa
Signing time: Mon 01 Jun 2026 07:43:27 +0000
ROA not before: Mon 01 Jun 2026 07:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a12:f8c1::/36 maxlen: 36
2a13:fc2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:23:39:87:5d:e9:61:68:5d:96:1d:c3:ad:a3:5e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Jun 1 07:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6af8bb0cc24a78e72d9b6758774d9b2eb0a2b772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:06:7f:1e:16:51:90:f8:5f:db:42:b9:64:09:
60:1e:27:04:a5:0b:3a:74:d9:44:ca:01:2a:14:57:
38:48:23:dc:90:a8:97:9c:e0:21:02:56:cb:90:2b:
08:70:d6:66:ca:9e:98:5b:2b:6a:86:e2:a9:bf:64:
bb:4f:cc:df:0d:b1:9f:31:56:09:4e:11:fc:a0:67:
36:f7:13:5e:b6:46:94:f4:6d:17:98:e3:48:3c:67:
ba:e9:05:4b:a3:ae:5b:9b:b2:1a:27:e8:fd:87:54:
4a:54:92:f3:12:e5:50:96:29:fd:2f:4f:83:7a:9a:
f0:cf:ed:e5:60:d5:1e:f2:b5:43:56:9c:92:60:f1:
2c:65:28:e8:3e:ef:47:4c:e6:db:78:32:53:60:6c:
48:ac:98:bc:3d:e1:48:37:bb:0a:10:06:75:06:6c:
9e:4e:f4:2d:b7:63:fa:92:c4:de:e9:f8:b9:8b:0f:
57:e4:af:62:ae:e2:4b:ac:c9:67:7a:a4:a6:5a:7a:
eb:d9:92:e5:3a:83:e9:66:2c:80:e2:d5:4e:ca:12:
13:e8:95:c8:55:1b:59:9b:45:53:7e:6f:76:f8:dd:
23:51:c5:ce:67:38:ef:5d:f8:1f:cd:f4:86:0d:21:
c5:9d:14:5e:51:1c:00:12:0c:d5:16:3a:d5:89:c4:
81:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F8:BB:0C:C2:4A:78:E7:2D:9B:67:58:77:4D:9B:2E:B0:A2:B7:72
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/avi7DMJKeOctm2dYd02bLrCit3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c1::/36
2a13:fc2::/32
Signature Algorithm: sha256WithRSAEncryption
27:6e:ab:c9:45:10:7b:8b:fd:f2:71:63:5d:25:d7:86:e4:de:
50:7b:5f:ea:50:d9:b8:bd:83:31:c8:50:2c:ad:b0:4f:8f:c2:
cd:7a:26:65:ef:19:28:1e:06:15:55:f2:77:bf:ec:8f:b8:20:
12:10:28:d1:09:18:2a:ca:81:f1:6c:dd:fc:f8:be:37:4c:51:
c8:e5:6b:64:fd:e2:dd:34:2f:af:bd:9c:8b:64:fa:55:6c:ab:
48:35:eb:1b:0c:ad:f7:0b:2c:1b:98:00:43:2a:fa:ca:32:d0:
52:b5:1a:16:56:08:06:1d:90:f9:91:6b:da:3d:fe:66:89:db:
99:a1:ec:67:52:b2:78:b5:6f:bd:60:c8:6c:ef:c3:d3:8f:30:
7a:af:5d:bf:1a:a8:dc:f4:9a:6e:27:44:a1:6a:9d:f8:c2:c2:
05:cc:b3:d5:bd:27:9d:37:7c:b3:14:cf:3f:53:76:06:aa:04:
3b:c5:9b:51:89:f0:c4:b4:fc:e7:ba:af:d1:43:fd:f2:48:21:
7b:28:6f:12:b2:27:e7:65:b0:b4:1d:57:7d:ef:1b:99:5b:20:
ba:03:7a:7d:c8:0c:02:82:49:49:5a:8d:2d:1a:2e:a4:99:24:
a0:9b:80:d2:05:a8:72:a0:38:e6:32:8e:e3:b4:08:ef:49:35:
e2:b0:29:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:10 2026 by rpki-client