Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/X1S1z6CrzJkdF4dCeCm-se-s4J8.roa
File: X1S1z6CrzJkdF4dCeCm-se-s4J8.roa (raw, json)
Hash identifier: Y5udF7iCsk7tkEh52H+ceEwvOnXrZWaMJVMZZgF25Vw=
Subject key identifier: 5F:54:B5:CF:A0:AB:CC:99:1D:17:87:42:78:29:BE:B1:EF:AC:E0:9F
Certificate issuer: /CN=7b69efe6016f72d4592f1b0bab9186476ff3a29d
Certificate serial: 019C465357EA2607C0B671A5DEA797BE4086
Authority key identifier: 7B:69:EF:E6:01:6F:72:D4:59:2F:1B:0B:AB:91:86:47:6F:F3:A2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/X1S1z6CrzJkdF4dCeCm-se-s4J8.roa
Signing time: Tue 10 Feb 2026 06:53:12 +0000
ROA not before: Tue 10 Feb 2026 06:53:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a0b:71c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft
rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:53:57:ea:26:07:c0:b6:71:a5:de:a7:97:be:40:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b69efe6016f72d4592f1b0bab9186476ff3a29d
Validity
Not Before: Feb 10 06:53:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f54b5cfa0abcc991d1787427829beb1eface09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:83:3f:96:ec:45:44:04:53:8b:05:e9:46:9e:
49:7b:4d:cd:45:5a:1a:6c:91:9e:0a:af:93:b2:69:
75:42:0f:38:78:cc:29:15:9d:58:0f:60:0f:0a:54:
62:bc:74:bf:2b:e9:22:14:4d:89:cf:be:36:11:3e:
b4:bf:ff:70:ca:0c:b8:3e:28:cc:bf:0b:68:75:f2:
2b:31:5c:84:91:46:e0:4e:9c:88:f6:eb:7c:f2:b7:
d9:cf:2b:c7:81:61:1e:56:a2:f4:63:b9:96:91:7d:
f5:be:da:64:62:02:9a:8a:8f:a4:75:a4:1e:9a:11:
a4:e4:a0:d3:82:69:b2:80:ec:0c:a2:65:bb:8d:3a:
5d:a6:5d:a6:f2:6c:19:00:e6:2b:e2:8b:c1:2f:d3:
f3:96:ad:86:1f:2f:c6:67:2c:9e:0d:92:a0:cd:9e:
ec:0e:80:ba:9e:da:98:1f:b0:12:6f:e7:e5:e0:57:
2e:2a:40:9f:29:72:2e:bf:a3:8c:0e:30:53:36:ff:
03:d6:f8:fe:fa:ea:7a:f4:a1:35:cb:40:cd:79:96:
a2:21:52:64:97:5c:c7:c0:ba:a5:9d:af:4f:4c:72:
14:3d:82:c0:ef:1e:2c:32:d8:ea:ef:89:f7:25:4f:
0b:53:5f:d0:c3:4f:1d:0a:54:88:82:90:fa:22:5a:
13:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:54:B5:CF:A0:AB:CC:99:1D:17:87:42:78:29:BE:B1:EF:AC:E0:9F
X509v3 Authority Key Identifier:
keyid:7B:69:EF:E6:01:6F:72:D4:59:2F:1B:0B:AB:91:86:47:6F:F3:A2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/X1S1z6CrzJkdF4dCeCm-se-s4J8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:71c0::/29
Signature Algorithm: sha256WithRSAEncryption
bb:41:61:e0:51:af:ac:75:3d:be:bf:9e:cf:0d:3e:c3:2c:52:
ed:38:d1:f7:58:f2:86:94:b8:72:02:16:93:f6:ec:2d:1a:bb:
eb:f3:36:41:15:d7:6e:fe:70:72:98:ad:a0:95:c6:3a:88:75:
d2:c1:d2:91:e0:17:d5:33:97:e4:68:42:2c:6f:9a:61:da:37:
76:53:d6:e9:e4:c2:f0:ce:46:7d:1d:01:3d:e2:c1:41:57:24:
89:93:5f:a2:e6:11:dd:31:98:81:8b:64:aa:72:8b:06:2b:8b:
fe:45:db:ad:a3:57:2f:83:3a:96:88:f7:9b:9e:e9:21:f8:6e:
52:a5:40:54:95:bd:18:5e:68:76:01:35:c5:0b:4c:1b:c1:42:
a5:4c:43:86:d7:0d:13:08:6d:40:ef:0e:38:84:2c:95:b3:19:
27:fd:31:56:ab:97:e9:59:d2:f4:44:74:90:af:d1:e8:a1:db:
7a:6a:49:11:65:6f:82:8e:5b:df:52:f5:1b:86:2d:91:be:79:
a0:63:c7:cc:77:e1:4f:09:8e:95:e4:08:b1:72:6b:2f:ec:8e:
74:5c:6e:eb:c1:f7:a9:95:ce:af:2b:de:55:86:88:91:ea:cb:
32:cb:1c:7b:6a:f3:9c:22:e8:e1:71:2e:e9:6c:45:d5:1e:65:
6d:b2:54:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:32:16 2026 by rpki-client