Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/T57By2clcSuAenEMv7lZQj6uGL4.roa
File: T57By2clcSuAenEMv7lZQj6uGL4.roa (raw, json)
Hash identifier: Bj1sQ3GwnYhECghYFNY4U6Fca1mVPlNt2X9JRIo2HCg=
Subject key identifier: 4F:9E:C1:CB:67:25:71:2B:80:7A:71:0C:BF:B9:59:42:3E:AE:18:BE
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019ECFF7F3C8ABEAC7DC9AC6B54357D7614E
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/T57By2clcSuAenEMv7lZQj6uGL4.roa
Signing time: Tue 16 Jun 2026 10:26:33 +0000
ROA not before: Tue 16 Jun 2026 10:26:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202736
IP address blocks: 2a11:c940::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:f7:f3:c8:ab:ea:c7:dc:9a:c6:b5:43:57:d7:61:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jun 16 10:26:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f9ec1cb6725712b807a710cbfb959423eae18be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cf:75:5a:fe:77:82:bd:1b:78:cd:4b:f7:c8:
16:18:e2:c3:07:d7:6f:6f:13:d9:76:3f:20:40:08:
e7:61:14:d0:6b:d0:a3:06:aa:f8:7d:ba:7d:32:f6:
c6:f0:31:19:51:12:12:ed:cc:49:b5:51:28:e4:b3:
0f:bd:36:22:a0:91:55:8a:e5:49:43:25:8f:58:49:
df:53:45:9a:23:3b:48:ec:b2:2e:0a:0b:9d:84:6b:
56:60:ed:e1:ad:99:92:95:8e:25:68:3c:30:e1:92:
c9:28:46:4e:84:d1:d0:25:5d:41:c2:23:51:0a:0f:
1b:99:b8:9d:f7:08:3f:79:7c:86:39:79:c5:e0:93:
5c:c2:cc:08:5a:5a:ce:4f:8b:98:fe:f4:91:37:ca:
c9:59:0d:d0:d3:d5:80:50:f4:f4:7a:54:96:e5:4a:
87:0d:7c:cb:f6:69:91:b9:80:12:ce:38:b2:df:30:
40:8d:49:08:74:33:13:34:25:ce:98:9c:d2:fc:70:
57:23:a6:2b:4a:b6:71:f7:08:de:ec:43:39:c4:24:
7f:78:cb:d5:f3:6c:aa:2f:5a:90:fc:21:10:b3:64:
0e:66:3c:7c:32:f6:76:0a:a5:16:a1:40:67:f0:66:
82:47:7f:39:9f:6e:bb:9c:de:5a:4f:e3:45:9b:43:
87:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9E:C1:CB:67:25:71:2B:80:7A:71:0C:BF:B9:59:42:3E:AE:18:BE
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/T57By2clcSuAenEMv7lZQj6uGL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c940::/29
Signature Algorithm: sha256WithRSAEncryption
47:ff:f9:aa:64:63:54:95:9b:00:37:31:79:0e:d9:5d:f9:bd:
68:be:0a:0a:29:78:2c:a1:e9:d9:4d:01:b9:1f:6f:7c:35:06:
58:1b:d6:08:01:9d:7e:bf:29:cd:47:ca:81:61:63:70:00:3d:
2d:0e:8c:f6:4b:a0:57:e2:0b:75:25:00:4f:7f:a5:7a:bd:23:
80:5d:ca:05:2c:77:9c:c3:39:28:1b:ea:2b:c8:7b:45:34:79:
79:60:e9:fc:b6:7a:0d:d8:06:f9:26:30:24:3c:af:b4:77:f6:
c9:dd:d8:ca:e3:45:c7:e6:87:fd:c3:ce:d1:5c:31:62:d9:bd:
af:68:45:ff:f7:7e:58:ba:69:18:df:08:9e:88:c7:f9:98:9f:
e2:3e:0e:e2:51:e0:a3:04:39:52:b5:08:01:87:3e:38:b5:b0:
b8:fb:0f:39:cb:d0:0c:ab:0f:c0:ca:2b:7b:f0:6d:e5:1a:f8:
79:9f:7d:5b:ae:9e:51:94:66:b8:f2:2c:de:0c:28:b6:b4:b7:
9e:df:a3:26:6c:de:6a:af:37:e1:bd:87:ab:4d:10:c6:a0:04:
51:58:a0:86:1e:3c:25:a4:07:87:60:c0:99:bf:8c:b4:df:f3:
43:b4:1c:12:f1:8e:53:1e:22:76:3f:7e:36:e8:28:7f:06:dc:
c4:ea:1b:c5
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ7P9/PIq+rH3JrGtUNX12FOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4
ODE3ZmMwHhcNMjYwNjE2MTAyNjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjllYzFjYjY3MjU3MTJiODA3YTcxMGNiZmI5NTk0MjNlYWUxOGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM91Wv53gr0beM1L98gWGOLDB9dv
bxPZdj8gQAjnYRTQa9CjBqr4fbp9MvbG8DEZURIS7cxJtVEo5LMPvTYioJFViuVJ
QyWPWEnfU0WaIztI7LIuCgudhGtWYO3hrZmSlY4laDww4ZLJKEZOhNHQJV1BwiNR
Cg8bmbid9wg/eXyGOXnF4JNcwswIWlrOT4uY/vSRN8rJWQ3Q09WAUPT0elSW5UqH
DXzL9mmRuYASzjiy3zBAjUkIdDMTNCXOmJzS/HBXI6YrSrZx9wje7EM5xCR/eMvV
82yqL1qQ/CEQs2QOZjx8MvZ2CqUWoUBn8GaCR385n267nN5aT+NFm0OHpQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFE+ewctnJXErgHpxDL+5WUI+rhi+MB8GA1UdIwQY
MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt
NDZiOTQ5MDkyY2JlLzEvVDU3QnkyY2xjU3VBZW5FTXY3bFpRajZ1R0w0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl
LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhHJQDAN
BgkqhkiG9w0BAQsFAAOCAQEAR//5qmRjVJWbADcxeQ7ZXfm9aL4KCil4LKHp2U0B
uR9vfDUGWBvWCAGdfr8pzUfKgWFjcAA9LQ6M9kugV+ILdSUAT3+ler0jgF3KBSx3
nMM5KBvqK8h7RTR5eWDp/LZ6DdgG+SYwJDyvtHf2yd3YyuNFx+aH/cPO0VwxYtm9
r2hF//d+WLppGN8InojH+Zif4j4O4lHgowQ5UrUIAYc+OLWwuPsPOcvQDKsPwMor
e/Bt5Rr4eZ99W66eUZRmuPIs3gwotrS3nt+jJmzeaq834b2Hq00QxqAEUVighh48
JaQHh2DAmb+MtN/zQ7QcEvGOUx4idj9+NugofwbcxOobxQ==
-----END CERTIFICATE-----
Generated at Sun Jul 12 10:50:05 2026 by rpki-client