Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/eQZGj93OSs13aDg8ER4L_C8B_RI.roa
File: eQZGj93OSs13aDg8ER4L_C8B_RI.roa (raw, json)
Hash identifier: Hcrbza7jBAwB3syibW9+PsXZ+2L/rOmdPcvYoTTcKKI=
Subject key identifier: 79:06:46:8F:DD:CE:4A:CD:77:68:38:3C:11:1E:0B:FC:2F:01:FD:12
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 019ED4AAFF2B5C53EF243B093743BA84083A
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/eQZGj93OSs13aDg8ER4L_C8B_RI.roa
Signing time: Wed 17 Jun 2026 08:20:36 +0000
ROA not before: Wed 17 Jun 2026 08:20:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213618
IP address blocks: 2a11:1900::/29 maxlen: 29
2a12:3100::/29 maxlen: 29
2a12:5180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:aa:ff:2b:5c:53:ef:24:3b:09:37:43:ba:84:08:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Jun 17 08:20:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7906468fddce4acd7768383c111e0bfc2f01fd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:28:2e:19:f5:0e:70:38:06:f8:3d:65:b1:f8:
5d:ce:ec:75:ee:d8:ef:04:dc:56:d2:a2:bc:6b:e4:
4e:7e:11:e6:6d:47:ed:30:e7:17:57:11:b5:dc:16:
d6:5a:97:42:5e:4c:d7:10:db:ce:a2:8e:55:e9:41:
25:16:18:96:92:1e:c9:23:f4:9d:31:6b:14:23:c7:
30:a2:e2:9c:b2:41:e3:3a:1c:12:5c:b0:9d:c3:99:
f9:f0:7a:93:72:8f:93:09:09:99:25:09:5a:41:dc:
cf:5e:aa:92:8b:a9:3b:2c:a2:01:eb:ae:04:1e:a6:
7a:e9:b0:aa:23:5d:02:46:ef:79:80:14:b8:cc:21:
50:20:5d:de:65:f9:b1:aa:de:37:44:7d:4c:d8:38:
bd:d5:ab:6e:98:c7:a6:f6:8e:b7:5f:5d:a5:38:ce:
aa:1b:7b:43:6b:5e:ec:f9:20:fe:5e:0c:bc:2c:04:
f1:48:ef:0b:1f:22:57:c5:94:d0:4d:88:8b:ad:c4:
48:0d:50:2b:7b:a2:d9:07:a5:3a:e6:31:cb:f6:dc:
9e:7d:18:61:9e:6f:75:8e:f9:f5:81:3c:6e:09:0d:
75:6c:63:b4:0e:3a:0d:87:16:6b:f6:81:ce:10:c8:
0e:4f:ad:07:15:1d:11:d0:7f:2a:29:58:35:b0:cd:
96:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:06:46:8F:DD:CE:4A:CD:77:68:38:3C:11:1E:0B:FC:2F:01:FD:12
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/eQZGj93OSs13aDg8ER4L_C8B_RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1900::/29
2a12:3100::/29
2a12:5180::/29
Signature Algorithm: sha256WithRSAEncryption
60:9a:6f:70:d0:4e:47:40:bd:91:a4:52:97:9f:75:bd:74:f1:
6a:5d:8b:63:8d:d2:8a:64:41:c7:9c:94:91:a6:29:42:f5:5f:
a7:63:85:dc:d3:e0:6c:c1:5e:5c:19:93:28:92:0d:c2:79:47:
39:9d:c1:7c:c6:4f:83:4f:d9:64:94:6d:a6:06:55:21:94:ef:
69:ed:89:cb:a0:68:db:d9:63:88:03:6a:e6:7f:12:6d:52:01:
5d:e8:cd:3a:c4:d3:0b:68:e9:ab:4f:35:97:5d:f8:cd:ef:99:
a6:6c:96:b7:24:8c:7d:7c:0a:69:7b:a8:83:f6:b8:75:a0:19:
de:b0:0a:61:f2:94:4f:1a:15:70:a0:0d:6f:f7:93:3d:59:3f:
2d:1d:63:ea:41:1d:6c:92:6c:04:b1:19:b9:7a:0d:76:d6:b7:
48:09:c2:a4:c8:c2:bf:e0:1e:a2:6b:2d:59:75:81:4d:26:14:
2a:2a:cb:6f:95:77:33:55:44:65:d2:51:e0:35:21:03:3b:bf:
d3:62:53:57:cc:37:26:ab:68:82:89:a6:77:3b:f1:f6:22:1a:
61:97:bf:bb:ef:3e:f1:19:2f:37:f6:10:6a:b1:60:67:f5:c9:
9c:84:38:ec:cb:bf:cd:4b:29:a4:5e:de:6c:ef:42:6c:7a:02:
09:d4:32:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 06:23:03 2026 by rpki-client