Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/Wx7zSJ4BFdUre-x5J2lYzvpF4jE.roa
File: Wx7zSJ4BFdUre-x5J2lYzvpF4jE.roa (raw, json)
Hash identifier: 5usbDenLcJwn1HnlbKVb9xkpHXYP/L2fciKVWt4yeXw=
Subject key identifier: 5B:1E:F3:48:9E:01:15:D5:2B:7B:EC:79:27:69:58:CE:FA:45:E2:31
Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial: 019D6DFBEDFAB69F0C75273BB1CA9616E2ED
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/Wx7zSJ4BFdUre-x5J2lYzvpF4jE.roa
Signing time: Wed 08 Apr 2026 16:45:20 +0000
ROA not before: Wed 08 Apr 2026 16:45:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a07:e00:19f::/48 maxlen: 48
2a07:e02:41::/48 maxlen: 48
2a07:e02:1001::/48 maxlen: 48
2a07:e02:1010::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6d:fb:ed:fa:b6:9f:0c:75:27:3b:b1:ca:96:16:e2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Validity
Not Before: Apr 8 16:45:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b1ef3489e0115d52b7bec79276958cefa45e231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:33:5f:ff:09:b3:0f:cf:53:9e:ca:d2:4d:e0:
84:f1:1f:4a:c4:9e:c3:05:c8:a3:f8:de:c6:c3:f3:
b1:0f:c8:7b:ed:91:8b:a0:a2:d5:b9:da:59:d2:8c:
35:d3:6f:cf:44:03:d0:ad:2c:2c:db:5a:7c:5e:62:
6b:fb:ef:2b:d0:cd:7c:59:78:8b:64:ac:72:c4:e7:
ed:ab:dd:44:25:4d:b7:18:82:5b:d7:c1:e4:7e:ae:
f3:5b:44:01:c1:2d:aa:0f:bf:fb:84:82:b9:11:2d:
79:49:de:de:76:b8:25:6f:eb:be:41:0c:6e:91:3e:
5d:53:9e:86:ea:dd:3b:81:83:d9:88:ab:89:5b:f3:
86:b6:3e:1f:2e:de:6a:e0:3a:34:05:9b:82:d2:fa:
f0:24:61:8d:87:30:cc:33:37:d0:92:2c:76:93:1f:
23:b5:57:b8:9d:d3:5d:d4:c1:c1:8d:c4:54:1f:96:
59:85:b6:38:62:c7:3a:5c:5a:26:90:28:59:59:c8:
ff:4a:0a:80:02:c0:dc:ba:e5:18:59:dd:4a:fb:7c:
8c:43:01:17:84:a1:04:28:f4:30:9e:bd:2b:05:d8:
59:c4:bb:7f:15:fa:1e:38:98:ab:7c:18:f1:58:30:
97:27:e3:a4:69:fb:07:9d:65:e4:b5:eb:06:c1:9f:
1a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1E:F3:48:9E:01:15:D5:2B:7B:EC:79:27:69:58:CE:FA:45:E2:31
X509v3 Authority Key Identifier:
keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/Wx7zSJ4BFdUre-x5J2lYzvpF4jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e00:19f::/48
2a07:e02:41::/48
2a07:e02:1001::/48
2a07:e02:1010::/44
Signature Algorithm: sha256WithRSAEncryption
b6:57:3f:b1:39:38:61:ea:0d:6f:61:ee:76:a0:a1:10:e6:73:
34:8a:b6:19:78:5f:64:15:31:ab:98:f6:eb:c1:4b:1b:4e:0c:
cc:50:d9:45:c0:32:8d:16:15:0d:e1:6d:be:20:c7:22:b0:42:
f7:23:30:20:5e:04:a6:54:f8:1a:09:57:aa:1c:1a:c6:a8:05:
70:42:0f:0a:5e:84:4d:3e:fb:e1:f4:95:14:e3:51:4a:53:e9:
a3:8f:e2:aa:a9:56:04:1f:9a:ae:0c:92:11:5e:27:f1:75:3a:
ea:af:de:e6:2b:54:25:66:cf:dc:29:50:7b:12:b2:49:03:87:
9a:69:16:f9:83:4f:29:00:ca:bb:c3:30:18:58:07:af:99:64:
8b:f8:a3:89:9a:54:6e:10:fd:2c:7f:03:0c:50:8f:a0:05:d4:
ed:0f:45:96:c6:26:94:60:be:f3:69:d1:39:c6:5c:14:8f:47:
c0:23:d9:24:5d:91:d6:53:c4:d2:be:ed:88:08:b5:16:3a:fb:
62:64:af:df:df:3c:b6:4a:b9:28:c2:d0:00:5d:1d:d4:48:93:
34:71:9d:79:fc:1a:f4:3b:6b:40:cc:f8:cf:96:81:cf:a3:6b:
9e:5f:14:d7:09:37:39:f5:7c:5d:35:a9:1a:5f:3f:24:f4:31:
1a:ba:e6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:42:06 2026 by rpki-client