Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/Eeyhf0b9XCDkQlMfbJyK_Q5CmTE.roa
File: Eeyhf0b9XCDkQlMfbJyK_Q5CmTE.roa (raw, json)
Hash identifier: rKSKo81rt1XZZrMHSvr6OgELBhtpxtwAQKcwMR52ATY=
Subject key identifier: 11:EC:A1:7F:46:FD:5C:20:E4:42:53:1F:6C:9C:8A:FD:0E:42:99:31
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 019F46554F899EE36800EBE038BEEC18F9E8
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/Eeyhf0b9XCDkQlMfbJyK_Q5CmTE.roa
Signing time: Thu 09 Jul 2026 10:03:43 +0000
ROA not before: Thu 09 Jul 2026 10:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48274
IP address blocks: 2a11:cc0::/29 maxlen: 29
2a11:3ac0::/29 maxlen: 29
2a11:9500::/29 maxlen: 29
2a11:b7c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:55:4f:89:9e:e3:68:00:eb:e0:38:be:ec:18:f9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Jul 9 10:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11eca17f46fd5c20e442531f6c9c8afd0e429931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:98:29:5d:09:58:c7:a2:ea:89:03:4b:e6:
e5:57:6a:d2:6d:40:09:cc:12:8e:40:a0:70:1e:18:
cc:9c:93:9a:0c:ca:72:36:88:95:24:89:ec:87:af:
e5:4c:b9:22:a3:ef:bc:d6:23:ba:98:86:8d:c0:b2:
ed:cf:5d:54:34:79:aa:06:ae:28:72:48:d9:69:25:
e9:8b:91:0d:1f:c5:55:90:5e:8b:d7:eb:ec:08:18:
91:4f:9a:31:d5:35:9d:3e:9e:43:91:7a:53:f8:c2:
52:24:5e:68:4d:dd:25:9b:31:fd:2d:be:a3:84:37:
96:12:00:e5:77:e1:9a:8b:ba:e7:43:69:5c:1a:82:
71:ce:93:fe:3c:f9:28:dc:9f:b9:ad:a3:e8:fa:04:
0e:e3:0d:44:b3:c6:39:5e:a2:a3:7a:14:85:fa:41:
56:ed:2b:d9:f6:91:a3:bc:a8:78:1d:9c:a3:df:29:
3b:7a:0f:72:96:23:0b:24:7d:b4:c3:9e:b2:d7:ec:
bf:b0:7d:c3:6c:db:2a:68:ba:02:16:f4:cb:f9:e6:
13:9c:e9:ec:0b:2b:73:87:7b:ed:5e:83:f1:2c:fd:
de:15:ba:bc:35:1d:33:bb:94:b4:14:12:52:01:c9:
1b:f7:b1:77:45:45:7c:3b:f5:09:56:ef:41:51:6f:
c1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EC:A1:7F:46:FD:5C:20:E4:42:53:1F:6C:9C:8A:FD:0E:42:99:31
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/Eeyhf0b9XCDkQlMfbJyK_Q5CmTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:cc0::/29
2a11:3ac0::/29
2a11:9500::/29
2a11:b7c0::/29
Signature Algorithm: sha256WithRSAEncryption
a8:b0:29:46:a4:ff:76:8f:8f:ea:45:94:81:1f:84:db:09:84:
7b:12:96:8c:18:66:f7:2c:1e:80:c0:52:5c:b9:1a:8e:c3:2a:
b0:de:9a:36:24:02:1c:67:b1:26:fb:4f:96:7b:5d:2d:1e:87:
b0:a1:b5:01:9d:b5:0e:da:0d:d6:f5:a5:f8:0e:ec:cb:fd:31:
e2:1b:6c:31:6c:ed:de:f9:92:fa:59:9a:93:ae:84:88:39:03:
7a:9a:4b:e6:38:65:35:25:60:44:ad:2e:42:7e:d5:68:27:22:
2e:80:45:84:22:10:18:65:41:8f:d9:50:39:82:5f:ae:03:ef:
d4:a1:53:b2:b6:cb:cc:f7:ee:e4:23:0a:ba:5e:bc:5f:ee:1c:
99:85:29:3e:4e:72:c9:ea:fd:5c:5e:f7:68:08:56:2c:a5:f7:
29:0d:eb:8d:81:68:22:ed:33:fa:80:5d:a5:fc:ec:d5:30:14:
75:a2:c6:8d:d0:a3:ce:d7:ed:a4:6b:8d:c6:ab:3f:8d:c8:0e:
a7:1c:60:75:0c:5f:4f:59:83:ce:86:7f:7a:be:ee:e7:fe:08:
ac:74:31:bc:98:2a:e8:bd:7a:96:3b:cb:e6:19:f7:4c:29:cd:
02:04:7e:9c:4a:b0:19:2c:9a:5b:68:81:dd:a6:2c:86:f4:98:
24:e5:53:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:06:29 2026 by rpki-client