Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/a72f_EAVkd02dnKeMLyYzgheNuk.roa
File: a72f_EAVkd02dnKeMLyYzgheNuk.roa (raw, json)
Hash identifier: /EoQ2iaka+5rJ992IxIiC73to6yZlBsz6efJT8eS4g0=
Subject key identifier: 6B:BD:9F:FC:40:15:91:DD:36:76:72:9E:30:BC:98:CE:08:5E:36:E9
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 019F7FFDE88BC65A1504B38B184A81F87D90
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/a72f_EAVkd02dnKeMLyYzgheNuk.roa
Signing time: Mon 20 Jul 2026 14:46:14 +0000
ROA not before: Mon 20 Jul 2026 14:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60439
IP address blocks: 2a14:ae00:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:fd:e8:8b:c6:5a:15:04:b3:8b:18:4a:81:f8:7d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Jul 20 14:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bbd9ffc401591dd3676729e30bc98ce085e36e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:bf:e5:2c:b1:db:c9:ba:4e:76:94:b2:d6:
bf:51:77:f9:9d:38:e8:d4:2e:42:43:02:7a:b8:cf:
74:90:8f:9b:35:24:bd:37:40:37:99:c4:79:26:ef:
b9:d4:05:11:51:9f:78:5e:bf:1c:22:a0:49:05:96:
47:dc:ea:94:5c:ef:5e:a0:0d:d1:71:0b:ac:18:64:
ae:1e:9b:d3:7f:ec:22:e7:b3:ba:73:26:bc:a6:c5:
a4:1e:86:68:6c:9c:d4:07:7e:fb:1b:f0:f6:6e:ef:
92:76:8f:de:e1:c2:e9:21:e1:f2:c1:38:d4:fe:b7:
85:b1:9a:16:b7:19:c3:ca:a8:82:e7:9c:57:70:84:
51:33:52:72:4f:2a:c0:4b:24:28:fa:e9:d1:04:dc:
39:83:65:33:fd:70:e6:65:76:d6:d5:9a:67:af:4c:
43:fd:9f:ad:9e:3d:21:d5:25:79:a0:33:de:5e:f2:
64:b9:b7:87:ab:5c:80:43:15:a3:b8:6a:3a:f0:ef:
16:21:4f:c0:f6:da:be:d9:c5:1e:d8:45:0b:fb:e9:
b1:9d:51:a1:13:60:4f:94:8c:99:1b:4d:3a:4f:1c:
91:29:a3:e1:8c:ea:e5:34:17:aa:eb:eb:30:b0:00:
9c:66:00:ef:20:34:8d:a5:d8:d7:9c:46:6b:4d:03:
07:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BD:9F:FC:40:15:91:DD:36:76:72:9E:30:BC:98:CE:08:5E:36:E9
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/a72f_EAVkd02dnKeMLyYzgheNuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:b::/48
Signature Algorithm: sha256WithRSAEncryption
97:a6:fc:b9:a4:50:43:59:c2:91:3d:33:c4:9a:c7:ff:a2:e3:
9e:9a:17:fa:f8:33:9c:01:d2:a4:8e:29:e0:69:6b:7c:8e:0e:
f9:81:e4:d2:1c:7b:4f:2e:30:c5:61:27:bb:b1:85:f3:43:44:
7e:b4:c8:f5:e2:27:22:34:3b:a0:f3:f4:a6:6a:2a:aa:ea:2e:
b6:81:ae:f3:73:76:08:37:6e:cd:5e:ad:34:c6:2b:3f:96:6f:
87:b8:c9:82:05:ca:54:3d:6d:f1:f7:f0:03:4d:9d:60:61:bc:
96:ca:d4:c5:ca:1c:7a:3d:13:91:59:ce:f7:ab:0e:78:b0:b7:
3f:22:6f:f8:ce:0c:3c:49:46:66:52:bf:3b:71:b3:d3:fa:ad:
92:e7:89:1e:dc:00:66:ab:eb:a8:99:2b:5c:96:49:4b:e9:08:
b6:1d:b7:65:d0:85:45:ac:43:b5:c6:03:4c:69:3c:e0:bc:2b:
9d:81:33:6a:2a:9e:e3:2a:07:0e:5c:a4:cd:ec:61:90:47:cc:
dc:43:f0:8e:3a:0a:ca:4b:d8:8a:6e:f9:d9:f4:6f:9e:4e:fc:
75:b2:89:d0:5e:8d:47:ce:50:80:c1:db:6e:fe:7b:bf:db:ea:
47:d1:0a:ad:c1:fb:c7:fb:2c:fb:5c:75:28:c8:64:79:26:f6:
f1:3b:88:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:33:52 2026 by rpki-client