Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/cBYd54xR9hQOL6JHPgwho_gD31g.roa
File: cBYd54xR9hQOL6JHPgwho_gD31g.roa (raw, json)
Hash identifier: F3dyYgWiI88K9p+P7lv75m9rmrnt3WngFHNQLJevvvs=
Subject key identifier: 70:16:1D:E7:8C:51:F6:14:0E:2F:A2:47:3E:0C:21:A3:F8:03:DF:58
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019F94B764D57EE116BC9BD8101125398892
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/cBYd54xR9hQOL6JHPgwho_gD31g.roa
Signing time: Fri 24 Jul 2026 15:21:14 +0000
ROA not before: Fri 24 Jul 2026 15:21:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2a10:fa80:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:b7:64:d5:7e:e1:16:bc:9b:d8:10:11:25:39:88:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jul 24 15:21:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70161de78c51f6140e2fa2473e0c21a3f803df58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:8d:2d:0e:3d:d5:c9:d8:8d:80:cd:88:f7:
54:ff:4b:de:e4:3e:74:36:a5:b8:de:d3:ee:ed:a7:
25:ec:82:9c:9f:43:5e:01:74:e2:5c:ec:cc:39:4e:
5f:ee:4e:a4:37:53:f2:04:0e:c6:15:88:cf:c1:e5:
bc:eb:e5:da:3d:36:54:5d:51:6a:a0:42:9b:84:48:
5f:c3:cb:2d:36:c1:bb:12:09:60:25:c1:9c:b7:22:
2f:fe:a4:c2:f0:f4:65:aa:51:5c:78:dd:d6:c8:c3:
79:25:c3:b9:12:17:c9:f2:8b:49:9d:09:0b:c8:4e:
a9:79:ba:42:b8:64:7b:e1:50:1c:d3:59:ae:af:d4:
5a:5a:ea:8a:8c:79:d5:e8:88:d2:7b:cb:ef:9e:71:
7c:22:3f:13:8f:45:85:82:9c:9c:98:19:1d:3b:23:
64:d9:2b:2b:21:11:0b:87:4f:f0:fd:ee:35:32:70:
43:f0:e1:34:e2:a9:2b:85:b8:da:f9:f2:09:56:48:
b6:fb:87:1c:d9:a6:2b:c5:87:52:28:c2:03:86:98:
c3:a8:60:25:5e:1a:7e:e5:ca:59:ee:c9:99:3a:cc:
d3:19:ca:b5:7e:d5:bf:fc:7b:19:57:42:39:18:21:
8e:19:ed:e3:f1:0d:d5:af:fb:88:03:23:2a:f6:d6:
c1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:16:1D:E7:8C:51:F6:14:0E:2F:A2:47:3E:0C:21:A3:F8:03:DF:58
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/cBYd54xR9hQOL6JHPgwho_gD31g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:3::/48
Signature Algorithm: sha256WithRSAEncryption
28:2c:ec:c6:ce:c0:c0:d5:ac:e5:fc:99:9f:e2:85:d0:96:44:
aa:24:e5:52:33:68:b2:2e:a8:80:3e:eb:54:23:d8:51:cc:24:
6e:72:26:8f:4e:05:5a:a0:04:99:18:c2:8a:97:30:16:5f:e4:
d3:26:55:9c:ac:10:8a:7b:1d:b2:01:91:74:e1:29:1f:71:61:
b5:a1:ef:d6:0b:61:6b:30:39:7f:15:ae:e7:28:d5:06:51:32:
ff:5b:e8:4c:54:e6:f5:10:e6:fa:a1:b9:44:9b:f8:79:f4:b5:
21:9d:13:37:30:77:6b:7a:9d:ba:a2:29:a1:3e:bc:5a:37:81:
a1:d3:a9:2b:5a:d9:32:c9:5f:6a:e3:5b:c3:fd:10:c4:0e:63:
1f:68:8e:68:12:c6:ad:6c:d7:37:be:95:cd:fa:41:be:4b:eb:
dc:ca:3d:a6:e1:ef:3a:5f:5f:4e:bd:e2:5c:9c:0e:d4:fb:b0:
73:0e:02:df:0b:3d:4e:b2:25:62:10:6f:2a:35:d4:af:d7:5a:
6d:04:6f:ec:65:10:39:93:d3:11:84:4f:78:37:f8:04:90:2b:
91:df:1b:64:32:74:2d:e2:64:0b:c5:dd:ed:29:27:a5:1c:80:
fa:d6:f3:c3:3a:33:e2:6d:67:f7:bf:36:02:3d:b5:6e:6d:8a:
cc:af:52:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:07:03 2026 by rpki-client