Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/evtx3nrzsLs_kDWrDpHdooRCeHI.roa
File: evtx3nrzsLs_kDWrDpHdooRCeHI.roa (raw, json)
Hash identifier: Z2dTjxN0OCxDBmXhTjGrer7oxFFhdJxKlZ/hk3HShc0=
Subject key identifier: 7A:FB:71:DE:7A:F3:B0:BB:3F:90:35:AB:0E:91:DD:A2:84:42:78:72
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019EFB4B96446806238F0978620466071D7A
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/evtx3nrzsLs_kDWrDpHdooRCeHI.roa
Signing time: Wed 24 Jun 2026 20:21:35 +0000
ROA not before: Wed 24 Jun 2026 20:21:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209641
IP address blocks: 2a11:9046::/32 maxlen: 32
2a12:8784::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:4b:96:44:68:06:23:8f:09:78:62:04:66:07:1d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jun 24 20:21:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7afb71de7af3b0bb3f9035ab0e91dda284427872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ef:9a:d5:c1:af:13:b8:95:c5:04:1b:67:65:
45:44:08:6c:ca:aa:a1:11:1b:bc:7c:74:39:a2:82:
47:22:86:32:88:04:cb:ce:26:f3:a1:81:a2:0b:dd:
a7:db:3f:09:54:1e:8f:e0:1d:ea:be:71:2c:6f:c5:
f0:7f:c5:45:e9:4e:93:c6:66:97:d2:86:8e:9f:b9:
cc:cf:1c:cb:84:bf:fc:35:f6:7a:8a:6d:7a:cb:63:
3b:06:ec:ba:cd:1b:b0:de:97:c1:dc:7d:64:28:68:
7b:dd:f1:ad:ce:bc:8a:81:80:a6:74:a9:fa:03:06:
06:9c:61:4c:90:3d:9e:f2:d1:65:a9:bc:da:3a:f9:
a7:f0:78:d9:e7:bd:e9:93:25:7b:e7:57:82:9f:2e:
c5:0b:3c:16:4b:fe:99:1e:c9:ec:15:d1:d6:c8:c7:
88:7a:f0:01:e4:bf:30:42:8b:79:c7:34:e5:f8:31:
bf:11:13:45:8a:b4:73:42:e6:e5:8e:a3:fd:2d:ee:
c0:3c:89:e6:a0:f5:34:3c:22:c9:3f:58:1d:e8:75:
a8:b1:80:68:1e:89:ab:df:ce:b6:16:f3:ab:45:81:
9e:ec:9b:7b:db:6e:e7:6f:8e:3d:77:0d:ce:83:c0:
ea:64:40:1a:f1:51:1f:a7:da:af:a5:eb:8b:8b:17:
ba:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FB:71:DE:7A:F3:B0:BB:3F:90:35:AB:0E:91:DD:A2:84:42:78:72
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/evtx3nrzsLs_kDWrDpHdooRCeHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:9046::/32
2a12:8784::/32
Signature Algorithm: sha256WithRSAEncryption
5c:ff:e2:d8:5c:a7:69:d5:37:d4:35:9f:96:cd:0b:ac:56:6e:
0e:24:ff:15:ea:39:f7:2f:6e:de:20:bd:1b:eb:4b:f4:8f:e3:
f9:c2:81:93:ef:fe:dd:0d:aa:80:f9:20:40:e1:82:89:7a:be:
44:47:02:b4:c0:ab:c6:74:6f:2f:5f:44:2c:b4:e4:9c:a9:2d:
fa:50:af:de:b7:72:dd:8d:ff:e2:29:73:bd:f6:8d:38:a4:5a:
cb:38:9a:07:d0:ec:f5:eb:37:e0:91:f1:8d:e7:74:da:a7:9e:
1d:1b:f1:6c:53:15:6c:8d:14:ee:5d:25:89:64:0f:57:d6:8b:
ed:62:7f:44:b6:6e:02:6d:6f:f3:76:be:0a:51:eb:fe:4f:2b:
84:79:ee:c5:60:9f:bc:a6:be:2e:33:67:f4:c2:a8:6e:14:df:
b1:96:9a:f3:67:9e:bd:d8:83:23:d9:c7:57:c1:73:38:ff:94:
96:c7:2d:d3:d5:2d:f8:ae:18:d5:64:d8:0e:1e:02:03:4e:e9:
d6:33:bd:8a:c4:37:1a:43:62:c3:50:ce:2a:99:03:6d:98:58:
ed:64:f4:92:78:96:fa:2e:f6:8b:4d:c5:dc:f4:f3:da:5d:ad:
f8:26:a5:8b:63:e2:a5:40:12:ac:5e:43:a7:c1:72:95:b8:f4:
5b:6f:d8:c9
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ77S5ZEaAYjjwl4YgRmBx16MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYwNjI0MjAyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWZiNzFkZTdhZjNiMGJiM2Y5MDM1YWIwZTkxZGRhMjg0NDI3ODcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe+a1cGvE7iVxQQbZ2VFRAhsyqqh
ERu8fHQ5ooJHIoYyiATLzibzoYGiC92n2z8JVB6P4B3qvnEsb8Xwf8VF6U6TxmaX
0oaOn7nMzxzLhL/8NfZ6im16y2M7Buy6zRuw3pfB3H1kKGh73fGtzryKgYCmdKn6
AwYGnGFMkD2e8tFlqbzaOvmn8HjZ573pkyV751eCny7FCzwWS/6ZHsnsFdHWyMeI
evAB5L8wQot5xzTl+DG/ERNFirRzQubljqP9Le7APInmoPU0PCLJP1gd6HWosYBo
Homr3862FvOrRYGe7Jt7227nb449dw3Og8DqZEAa8VEfp9qvpeuLixe6hQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHr7cd5687C7P5A1qw6R3aKEQnhyMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvZXZ0eDNucnpzTHNfa0RXckRwSGRvb1JDZUhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKhGQRgMF
ACoSh4QwDQYJKoZIhvcNAQELBQADggEBAFz/4thcp2nVN9Q1n5bNC6xWbg4k/xXq
Ofcvbt4gvRvrS/SP4/nCgZPv/t0NqoD5IEDhgol6vkRHArTAq8Z0by9fRCy05Jyp
LfpQr963ct2N/+Ipc732jTikWss4mgfQ7PXrN+CR8Y3ndNqnnh0b8WxTFWyNFO5d
JYlkD1fWi+1if0S2bgJtb/N2vgpR6/5PK4R57sVgn7ymvi4zZ/TCqG4U37GWmvNn
nr3YgyPZx1fBczj/lJbHLdPVLfiuGNVk2A4eAgNO6dYzvYrENxpDYsNQziqZA22Y
WO1k9JJ4lvou9otNxdz089pdrfgmpYtj4qVAEqxeQ6fBcpW49Ftv2Mk=
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:27 2026 by rpki-client