Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/ccTIBXpnBKiCIFP6jtkeUYvcfyU.roa
File: ccTIBXpnBKiCIFP6jtkeUYvcfyU.roa (raw, json)
Hash identifier: RYLFC72B9dzFoQN0FlnNd+oyUoSf2vNtWKltjAP5ay0=
Subject key identifier: 71:C4:C8:05:7A:67:04:A8:82:20:53:FA:8E:D9:1E:51:8B:DC:7F:25
Certificate issuer: /CN=b6b2333f066573f5316e075a01ce2490b58c6ae1
Certificate serial: 019D3BDDB07F756AA8A63D0E867F6F3BF202
Authority key identifier: B6:B2:33:3F:06:65:73:F5:31:6E:07:5A:01:CE:24:90:B5:8C:6A:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/ccTIBXpnBKiCIFP6jtkeUYvcfyU.roa
Signing time: Sun 29 Mar 2026 23:11:17 +0000
ROA not before: Sun 29 Mar 2026 23:11:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402333
IP address blocks: 2001:678:1184::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3b:dd:b0:7f:75:6a:a8:a6:3d:0e:86:7f:6f:3b:f2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b2333f066573f5316e075a01ce2490b58c6ae1
Validity
Not Before: Mar 29 23:11:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71c4c8057a6704a8822053fa8ed91e518bdc7f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:00:21:94:e3:8e:c8:1b:68:95:ef:47:df:
95:1b:49:d4:80:8f:d8:02:97:56:ab:e0:bd:24:40:
27:e5:22:cd:d8:ad:a2:9a:a0:63:b7:2a:a8:eb:77:
84:ba:62:f9:d5:8e:b8:8d:c8:f6:6b:33:7b:ea:41:
48:ea:af:f3:69:92:1e:a0:d3:a7:a8:fe:4c:77:af:
54:c3:92:69:53:c2:ae:7c:7b:f5:80:f5:51:f6:bc:
f5:62:21:ed:1c:3b:a2:f2:ad:a3:a4:ac:a2:e2:06:
8e:5d:a1:4e:3a:3a:ef:7e:74:2b:29:0d:4b:4d:ca:
70:dc:44:a8:b2:83:25:ec:a5:ce:e7:06:5c:57:61:
d6:a3:01:68:0f:cf:f1:1c:7e:30:37:20:96:df:79:
69:db:8c:2e:4d:06:10:1a:1d:de:b1:83:a1:39:0a:
71:f8:2a:19:6b:ec:40:6a:dd:d7:66:0e:77:28:73:
bb:10:e2:1d:58:80:da:17:5f:ee:2d:e9:0f:fc:88:
fe:a6:cf:a3:73:ec:5c:60:8a:79:98:cb:9b:7b:da:
e9:0b:7c:a7:42:5d:59:41:8b:e5:80:20:bc:3e:5e:
6d:c0:3c:16:87:ce:1d:42:ae:71:fb:4c:af:de:be:
79:a5:ce:65:c0:5f:13:1e:39:dd:e5:ea:b5:ca:4f:
d6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C4:C8:05:7A:67:04:A8:82:20:53:FA:8E:D9:1E:51:8B:DC:7F:25
X509v3 Authority Key Identifier:
keyid:B6:B2:33:3F:06:65:73:F5:31:6E:07:5A:01:CE:24:90:B5:8C:6A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/ccTIBXpnBKiCIFP6jtkeUYvcfyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1184::/48
Signature Algorithm: sha256WithRSAEncryption
cb:b8:06:9d:82:31:c5:a5:63:1c:db:12:c1:b9:4e:04:60:1c:
1f:6a:e8:6e:f3:5f:80:f7:dc:c1:e8:33:2f:a4:bc:a2:69:08:
b6:de:a0:14:0b:69:e6:57:f8:21:d3:58:c1:d8:27:27:36:f2:
a5:e7:47:68:b4:39:1f:dc:39:0e:ab:75:05:a0:5d:7d:ec:54:
b5:ef:ad:16:86:7b:ab:51:32:76:db:d6:6e:9b:dc:f6:3b:99:
bd:c3:7a:b3:46:d6:48:bf:a5:d7:d5:31:89:5f:7d:75:12:e2:
52:80:ae:96:42:86:58:db:a0:e7:d8:66:87:12:e1:f0:bf:f1:
aa:b3:12:0d:0f:a8:8f:22:c6:14:12:6b:38:1b:01:21:70:b0:
d8:62:c2:00:d2:cc:a5:f1:9d:f7:e2:43:a4:8d:19:cc:91:0a:
f1:2d:9a:a6:68:c1:54:8d:19:c9:73:45:48:c8:e3:e4:2f:e7:
f1:bc:1d:89:4f:ba:db:a1:be:1c:5b:8d:01:32:5b:96:b9:df:
63:81:8e:0e:e6:2d:75:b6:1d:20:e8:0c:56:f1:15:a4:17:8c:
0f:71:f2:5d:1e:95:ab:7b:df:5c:44:e8:0d:50:12:cb:90:aa:
5e:32:29:17:d9:32:56:25:ee:44:11:68:5f:17:0a:5a:53:af:
db:28:d2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:34 2026 by rpki-client