Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/US8zhOgEgTJLtMVAy0LwKIviLAY.roa
File: US8zhOgEgTJLtMVAy0LwKIviLAY.roa (raw, json)
Hash identifier: 1Z8ADvV9JtaovNHQqKj+/BEfmZFOC6ntc+ZyZRoSJpI=
Subject key identifier: 51:2F:33:84:E8:04:81:32:4B:B4:C5:40:CB:42:F0:28:8B:E2:2C:06
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 01A13F1ABD371D9D730A38FF3D7CCED5E918
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/US8zhOgEgTJLtMVAy0LwKIviLAY.roa
Signing time: Thu 15 Oct 2026 10:27:59 +0000
ROA not before: Thu 15 Oct 2026 10:27:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139341
IP address blocks: 2a0b:1880:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:1a:bd:37:1d:9d:73:0a:38:ff:3d:7c:ce:d5:e9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Oct 15 10:27:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=512f3384e80481324bb4c540cb42f0288be22c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:a0:69:8f:49:ec:3f:8a:08:4a:83:52:f5:
db:39:03:8a:ad:3d:2e:b4:bf:51:12:f8:94:bb:db:
77:32:ba:2e:46:99:b2:65:36:b1:81:ec:55:d1:28:
cb:63:26:f0:59:f1:39:4f:95:74:d0:19:8f:c9:1a:
2a:f8:90:bc:72:73:b3:76:e8:e2:19:82:3b:94:4b:
2e:90:3c:77:37:03:3f:ec:b4:07:de:64:83:9c:33:
96:54:f7:86:a0:5d:cd:66:fb:56:22:d3:4d:d6:b6:
f2:8d:ff:57:94:43:ee:eb:78:4e:62:2d:c8:2a:1f:
90:f8:66:d2:3f:eb:0a:38:27:25:e3:8b:47:6a:0f:
ea:3d:58:bc:90:7e:88:0f:b6:56:ab:f1:73:e4:65:
b5:61:f1:5a:84:7f:e9:1e:3d:cb:54:9c:e3:05:7c:
c0:dd:bc:e2:59:c6:7b:b3:be:3e:c0:e8:ed:7d:a7:
b7:85:e8:61:f5:70:3b:47:65:e7:69:50:53:52:5e:
e7:e6:38:fc:45:06:5b:bd:db:52:17:75:ae:26:3d:
9b:ce:4b:a5:c5:f4:85:96:0d:7e:cb:f9:2b:39:f3:
dd:0e:e3:45:cd:83:3f:ca:b7:62:50:4c:a2:57:15:
6c:0a:69:83:98:c0:f3:fb:4e:52:bd:49:38:4e:44:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2F:33:84:E8:04:81:32:4B:B4:C5:40:CB:42:F0:28:8B:E2:2C:06
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/US8zhOgEgTJLtMVAy0LwKIviLAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:1880:a::/48
Signature Algorithm: sha256WithRSAEncryption
21:7a:89:f5:91:65:64:76:a5:7d:a2:b6:78:a8:fc:7b:99:d5:
cb:24:76:5d:da:59:29:06:b4:33:4f:5c:e8:69:23:28:fb:da:
15:01:9d:06:63:e0:ba:1e:79:b2:55:f5:2b:d6:c8:05:38:71:
33:df:d4:b6:57:a7:76:3e:f4:c8:c7:c0:71:a9:e8:aa:42:1a:
6f:06:d3:a2:3e:dc:42:35:29:f5:80:22:37:59:6e:82:15:93:
c6:58:57:0c:5c:db:96:b2:07:d5:17:08:ae:e5:5b:e0:5d:90:
97:4b:c2:4a:0c:cf:7f:5d:7d:32:18:8b:77:ff:dd:86:7e:8e:
a3:87:b8:22:a2:6e:fc:e4:2b:cd:e4:24:f6:6e:f2:50:a3:a7:
77:55:a8:5a:7d:9e:1e:77:bb:79:89:ba:ae:9d:4c:82:9e:b1:
b5:81:a5:7d:a8:a2:f3:90:51:76:a2:a0:d7:4f:5f:6c:68:c1:
c0:06:93:02:75:72:3f:ca:16:6f:ce:df:40:ef:a3:26:ba:04:
1d:5f:41:d8:c7:af:54:06:5d:1f:39:af:3b:6d:f6:06:7f:f6:
85:d1:4f:cd:0f:ce:f9:52:49:6c:1b:00:82:38:69:44:d2:f6:
7e:69:4e:a9:80:af:f6:26:f0:bb:02:e0:da:9c:e8:38:1f:3d:
20:e6:7f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:58:07 2026 by rpki-client