Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/I6diHiTCg9qHT58_rXDkmTY5s4M.roa
File: I6diHiTCg9qHT58_rXDkmTY5s4M.roa (raw, json)
Hash identifier: y3DBQKvGuIS8X4KFKKuAO23bkqAVCUyZ36p0a5xpbis=
Subject key identifier: 23:A7:62:1E:24:C2:83:DA:87:4F:9F:3F:AD:70:E4:99:36:39:B3:83
Certificate issuer: /CN=7b49d0b0363e7a64083e2e54cc301f514ae08910
Certificate serial: 019D76871EE6707EE6F4B6D194B1FDC683EE
Authority key identifier: 7B:49:D0:B0:36:3E:7A:64:08:3E:2E:54:CC:30:1F:51:4A:E0:89:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/I6diHiTCg9qHT58_rXDkmTY5s4M.roa
Signing time: Fri 10 Apr 2026 08:34:19 +0000
ROA not before: Fri 10 Apr 2026 08:34:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2116
IP address blocks: 2a13:1840:d1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:87:1e:e6:70:7e:e6:f4:b6:d1:94:b1:fd:c6:83:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b49d0b0363e7a64083e2e54cc301f514ae08910
Validity
Not Before: Apr 10 08:34:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23a7621e24c283da874f9f3fad70e4993639b383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:60:f7:5b:c8:db:4b:b8:41:5b:b9:42:f3:44:
2a:a1:fd:6d:60:24:22:aa:16:30:40:ef:a3:d5:f7:
03:00:68:9d:71:02:a2:82:9e:f0:6b:d3:c1:6c:b5:
d3:6e:ef:f7:27:27:30:91:95:76:84:6b:8e:e9:3a:
e7:f8:7c:5d:7c:69:b3:c3:e6:18:b8:59:86:7c:57:
2c:97:d9:90:4a:e2:51:7f:47:5c:91:6b:e6:94:61:
98:04:fd:d3:3d:3c:69:c0:e2:e5:6d:c6:6f:0c:c3:
00:82:f5:e1:57:fb:5c:68:47:42:ad:70:de:ee:22:
0b:91:50:f8:c5:e0:39:fa:60:f0:6c:17:46:b7:6e:
5d:29:c9:28:00:71:65:eb:f8:b8:98:b2:89:42:07:
52:60:7d:cd:6c:6c:ca:30:26:49:d9:65:44:e0:c0:
eb:d8:3a:d9:1c:78:e2:ca:9c:17:76:46:bf:54:eb:
24:80:b7:83:41:78:2c:e9:84:cc:c4:00:03:19:d5:
04:59:ba:db:6c:57:e1:4d:f5:fa:0e:f4:84:ab:a9:
8b:47:2f:c4:95:d5:65:f2:54:52:f4:53:3c:ec:3a:
0a:72:d2:15:6f:9d:b7:a8:8b:0c:99:61:a0:5c:0d:
76:93:fb:83:92:fb:09:95:d1:64:bd:c1:5e:d8:4b:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A7:62:1E:24:C2:83:DA:87:4F:9F:3F:AD:70:E4:99:36:39:B3:83
X509v3 Authority Key Identifier:
keyid:7B:49:D0:B0:36:3E:7A:64:08:3E:2E:54:CC:30:1F:51:4A:E0:89:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/I6diHiTCg9qHT58_rXDkmTY5s4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1840:d1::/48
Signature Algorithm: sha256WithRSAEncryption
5c:51:7e:74:d5:47:36:a2:8d:f8:25:ec:c4:33:f7:28:6b:7a:
45:d6:de:e7:6b:e1:b9:4e:3d:23:49:66:71:09:37:f7:13:17:
64:da:d7:5e:1f:ad:09:b4:b2:fe:40:27:66:23:22:60:cf:9c:
4e:b4:d9:7d:b0:99:78:36:85:72:50:96:95:67:be:5d:49:97:
4b:70:c5:f0:65:9e:83:72:38:ca:62:4f:36:cf:36:ea:45:05:
43:e5:d6:d1:35:09:ab:d5:bc:28:30:37:78:4b:19:47:00:d3:
0f:c4:0f:a3:dd:11:34:f3:2d:cc:64:37:72:97:29:9d:0b:37:
d6:b6:cf:66:00:7a:b9:b4:68:e6:6c:18:2e:83:07:5b:59:bb:
7c:00:4c:ec:14:5e:6e:95:5c:2e:b1:92:40:59:01:13:9c:18:
19:62:98:df:4c:90:94:c0:f2:03:62:57:fb:cd:3f:ff:d4:79:
60:68:2d:ff:6c:d2:d3:21:af:00:1a:f3:66:f0:f5:59:60:11:
b0:f6:78:e2:60:13:84:21:22:3f:85:fb:3d:cd:1e:a1:77:d2:
d7:72:05:e7:01:aa:32:1d:e2:ec:0e:39:d2:c3:af:e9:a6:78:
53:7d:31:af:86:d6:25:ba:2c:28:6c:47:16:6a:87:34:7e:82:
05:bb:f0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:27:15 2026 by rpki-client