Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/bq7p2c5vJ2AuacchZjMY0iRJ4d8.roa
File: bq7p2c5vJ2AuacchZjMY0iRJ4d8.roa (raw, json)
Hash identifier: 18rUuCK206j5Kf25J505Px18ULYGnExtH3WZ9ccpOUo=
Subject key identifier: 6E:AE:E9:D9:CE:6F:27:60:2E:69:C7:21:66:33:18:D2:24:49:E1:DF
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 019F228F49DF7B76F5D4CAC1BD70505B5852
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/bq7p2c5vJ2AuacchZjMY0iRJ4d8.roa
Signing time: Thu 02 Jul 2026 11:20:43 +0000
ROA not before: Thu 02 Jul 2026 11:20:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 949
IP address blocks: 2a12:a300::/29 maxlen: 48
2a14:1f80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:8f:49:df:7b:76:f5:d4:ca:c1:bd:70:50:5b:58:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Jul 2 11:20:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6eaee9d9ce6f27602e69c721663318d22449e1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:bf:0f:90:b3:ed:6c:a3:9a:1d:61:ab:ee:
98:be:7c:e1:00:21:e6:cc:f0:6c:63:9d:06:69:64:
b2:a1:de:5b:a9:e0:3a:16:f7:e4:6c:60:78:5e:94:
8a:23:f9:64:5a:2d:82:ba:bb:d8:71:85:39:a2:65:
c6:e5:82:95:f7:8d:1c:93:f6:38:28:da:82:41:bc:
66:0c:84:7a:12:f0:ea:15:3e:60:1b:dc:7e:f5:a6:
de:1e:21:bc:ef:c8:e8:2b:35:10:8c:65:45:96:36:
0c:14:71:ab:6e:1a:19:03:d3:01:c8:e0:e0:13:08:
d3:17:24:44:c4:ff:18:38:be:8c:25:c2:68:6e:84:
77:b5:a7:39:11:78:83:e5:1c:fc:00:bf:b2:e3:1f:
bc:71:d4:ea:bc:fa:1b:ac:90:73:f7:14:e1:d1:f6:
95:59:74:00:e7:8c:b6:62:4c:86:24:07:2c:82:07:
57:d3:d2:c7:9c:39:24:9b:be:fa:e2:0f:b9:2e:5d:
e1:dd:7e:ca:1c:17:8d:73:6e:00:ab:93:cf:b4:62:
38:aa:10:63:8d:c6:8c:a9:16:93:3b:0b:59:c2:b1:
ab:25:84:5a:f6:43:d7:ac:9c:0c:1d:56:2d:2a:76:
d8:05:1d:d7:2e:d6:09:0f:e3:f4:25:1a:7e:c3:c7:
6b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AE:E9:D9:CE:6F:27:60:2E:69:C7:21:66:33:18:D2:24:49:E1:DF
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/bq7p2c5vJ2AuacchZjMY0iRJ4d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a300::/29
2a14:1f80::/29
Signature Algorithm: sha256WithRSAEncryption
34:76:91:e7:f4:fe:75:fa:62:3f:37:57:97:4f:b4:be:04:cd:
2c:cb:4c:c1:5b:3c:5f:d7:ab:5d:f2:a5:26:a0:04:f8:36:26:
3f:fb:ce:4f:8d:23:f1:7a:e9:d5:a4:d5:89:13:0f:3e:e8:5e:
55:a3:6e:82:8d:1e:26:4e:31:88:42:8d:d8:59:c3:cc:25:e1:
1d:9c:b1:ed:1d:a9:6a:38:18:b6:b1:b1:e4:c2:e9:cc:d1:3a:
b8:53:a2:6d:95:d7:d9:9f:ba:90:82:83:68:08:fd:6f:c1:90:
a4:c1:4a:3f:9f:f1:12:c3:23:df:23:de:e3:24:60:a8:7f:a3:
8e:74:18:af:cc:35:98:28:f7:71:23:14:13:8d:8a:31:39:8b:
a6:2d:d7:e9:f1:90:6c:33:c1:f1:87:d8:be:5d:26:b9:20:60:
71:7c:5f:bb:cb:cb:1f:65:3d:96:c2:b0:3d:23:73:32:89:52:
7d:71:5a:e3:f9:fd:d2:36:35:77:4c:e8:c1:da:4b:89:ae:71:
50:d0:15:ce:25:53:f6:af:ae:da:01:a4:b0:81:ae:17:aa:c7:
23:b2:4a:0d:13:29:f9:6e:9e:34:ed:30:a6:28:8b:b6:a9:f4:
ef:31:d2:6a:02:51:86:1d:e0:3e:c7:dc:32:5d:60:d9:e2:a8:
f3:af:a9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 06:23:09 2026 by rpki-client