Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/OxKWVKSu8q5MpbR4mXLRZseiBak.roa
File: OxKWVKSu8q5MpbR4mXLRZseiBak.roa (raw, json)
Hash identifier: WzjynFG/qnlCwj8eYyliY8fN3o7QhJH4fPJus7/EOTQ=
Subject key identifier: 3B:12:96:54:A4:AE:F2:AE:4C:A5:B4:78:99:72:D1:66:C7:A2:05:A9
Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial: 019EA42DDF9057BA914AC4296F1A6610CFE3
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/OxKWVKSu8q5MpbR4mXLRZseiBak.roa
Signing time: Sun 07 Jun 2026 22:22:10 +0000
ROA not before: Sun 07 Jun 2026 22:22:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2a07:e02:1100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a4:2d:df:90:57:ba:91:4a:c4:29:6f:1a:66:10:cf:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Validity
Not Before: Jun 7 22:22:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b129654a4aef2ae4ca5b4789972d166c7a205a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1c:29:a6:f1:ba:7a:90:c8:b3:0f:4a:cc:f5:
75:40:37:eb:86:16:84:43:02:a1:77:1c:0a:34:7d:
2e:7f:1e:d9:dc:fc:72:26:c3:e6:bc:05:22:ba:a9:
0d:b4:bc:7b:63:74:14:85:1c:8a:55:66:88:01:34:
62:24:93:fb:12:9b:1f:ce:de:fb:6a:a8:16:a9:83:
f2:89:05:42:b1:36:c9:e8:5c:ba:80:54:57:ac:01:
38:ed:d6:09:48:cf:b5:93:91:bd:bb:c7:7e:90:9a:
45:88:13:fa:cf:6c:a2:52:0d:1c:e3:d1:61:46:d3:
19:3d:73:d4:29:5c:cc:ff:65:5d:24:ca:1f:66:2b:
f3:a2:27:a1:71:14:c9:7b:1f:61:42:9d:74:49:48:
26:6b:5b:3e:d4:df:e1:db:70:26:88:cb:e5:86:24:
63:79:02:a6:ab:9e:49:3e:94:e0:57:b8:d4:0a:a3:
25:04:11:d3:6a:c0:d2:9d:de:62:d5:ac:a7:cd:ce:
2f:00:a0:88:12:9d:9b:e7:bd:14:28:71:8b:5d:55:
8e:df:99:bb:aa:63:77:71:f8:36:a0:41:b0:db:69:
54:a8:d8:2a:f2:94:0e:f7:f5:f8:b5:4f:db:11:03:
7a:ec:ec:7c:e9:fc:0f:a0:89:22:3c:b1:96:ab:32:
50:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:12:96:54:A4:AE:F2:AE:4C:A5:B4:78:99:72:D1:66:C7:A2:05:A9
X509v3 Authority Key Identifier:
keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/OxKWVKSu8q5MpbR4mXLRZseiBak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e02:1100::/40
Signature Algorithm: sha256WithRSAEncryption
21:af:8a:18:5a:82:b0:9c:24:63:92:9b:da:67:08:b1:c8:d2:
06:36:5e:a8:f2:4b:a7:77:50:8b:72:ea:cd:94:64:15:4c:6f:
db:58:c9:06:15:9c:73:0f:83:41:78:77:b8:db:6f:a6:3a:d8:
58:a3:c9:86:0e:80:36:b6:56:4a:88:5c:e4:20:f8:67:47:29:
f0:b2:49:e9:da:fc:70:e2:ae:2d:2a:fa:74:26:50:30:b3:ad:
d4:2f:48:f9:4d:c0:c6:5f:8f:cd:a5:1a:1d:dd:a8:38:2d:e2:
d8:06:1a:94:ee:eb:1c:e3:22:37:77:22:f5:fd:29:cc:d8:b2:
0a:78:7e:52:7c:f2:43:64:67:02:7a:ea:26:c5:1c:87:4a:2d:
80:30:8e:07:1b:06:39:fd:9a:16:ab:40:9a:f2:68:76:7b:35:
2d:43:63:15:f7:63:41:75:a8:51:20:54:86:35:20:85:87:a1:
73:4a:c7:a2:71:ea:97:7c:87:e3:7a:5c:a4:c7:7f:80:81:4f:
9c:a1:ac:98:5d:8d:83:a8:bd:bf:e4:02:ab:8b:24:62:26:20:
86:bd:af:d7:de:91:25:d6:c5:22:5f:d4:8f:9a:d7:1a:8c:4c:
c2:d8:07:bf:f7:3b:b6:5c:37:6b:09:42:fa:64:f1:f6:59:aa:
94:43:6e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:29:38 2026 by rpki-client