Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/7loHyHhPVpat4f9MglB51vsJoMM.roa
File: 7loHyHhPVpat4f9MglB51vsJoMM.roa (raw, json)
Hash identifier: yrqVhvEkaCCmAr5JwpBA5F/9OAaY7CpBz/lL4yE+mxI=
Subject key identifier: EE:5A:07:C8:78:4F:56:96:AD:E1:FF:4C:82:50:79:D6:FB:09:A0:C3
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019F135FD974FC317B085FA41150E2A8B600
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/7loHyHhPVpat4f9MglB51vsJoMM.roa
Signing time: Mon 29 Jun 2026 12:34:36 +0000
ROA not before: Mon 29 Jun 2026 12:34:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213413
IP address blocks: 2a09:3f06:6969::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:5f:d9:74:fc:31:7b:08:5f:a4:11:50:e2:a8:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jun 29 12:34:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee5a07c8784f5696ade1ff4c825079d6fb09a0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:50:c9:9c:35:83:85:77:58:b9:7a:37:a0:75:
06:75:2c:ef:c1:52:90:8b:44:08:cf:ad:77:59:ec:
d4:ec:83:8a:d6:d9:80:1e:4d:a3:09:b2:22:da:f7:
42:2a:ec:d3:d3:29:ca:80:34:c3:f5:bc:00:fb:dc:
54:55:bd:4e:91:2e:27:c9:17:43:7b:f6:6b:5f:f7:
3a:70:ef:bb:a5:34:d2:ee:73:22:1c:8d:cb:80:21:
08:88:a3:0f:6e:26:fa:00:90:f4:52:cd:75:13:aa:
d6:ca:f1:09:da:ed:34:db:50:85:21:05:48:86:7f:
15:1e:10:1e:83:e7:34:2b:47:6d:e2:19:51:94:21:
5e:bd:c3:12:b8:9b:ac:71:06:c6:c2:26:2f:19:52:
70:03:fa:d1:af:72:41:92:68:2e:0d:bb:1f:f8:23:
87:20:da:ce:4d:ae:21:3f:d7:c3:ad:54:a5:e3:e3:
17:cb:45:90:7b:21:23:42:2f:20:88:e6:29:9c:32:
c2:81:ef:41:d0:91:de:26:aa:c8:bf:87:94:79:60:
3a:5f:f7:26:54:6b:bf:91:a6:12:06:41:08:2c:4a:
0c:26:f8:42:91:ab:74:65:fc:56:1c:94:40:aa:24:
d8:3c:9d:8f:ac:74:9f:f0:75:dd:2d:35:ba:fd:ee:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5A:07:C8:78:4F:56:96:AD:E1:FF:4C:82:50:79:D6:FB:09:A0:C3
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/7loHyHhPVpat4f9MglB51vsJoMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f06:6969::/48
Signature Algorithm: sha256WithRSAEncryption
a0:f5:69:e6:b7:38:02:cb:5d:a2:fc:f5:18:68:69:58:23:cb:
d7:74:3c:73:ce:56:1b:25:7a:6f:5b:5e:cb:f4:d3:ad:ab:ee:
16:32:58:8a:6a:a6:3e:1b:dc:af:ff:c1:77:e6:d8:33:e7:81:
74:6a:97:36:62:67:0d:6e:47:37:d2:34:ec:2a:e6:dc:1e:56:
d6:20:08:7f:28:18:f4:51:4e:fa:b0:a1:ef:33:0a:a4:ec:e1:
c5:87:26:23:6e:e2:0a:ea:78:cf:58:d1:76:bd:21:58:31:48:
c1:07:d2:35:72:cc:61:13:35:46:e2:38:09:6f:c4:f6:a5:85:
c9:4f:4f:43:87:c2:64:9f:5a:e5:07:91:6b:39:38:be:09:03:
a6:92:12:ce:e1:53:ba:66:fc:08:03:d2:f5:a6:dd:e5:09:ba:
30:15:04:35:01:49:8e:60:3d:c9:64:2e:0f:2e:84:ad:0b:3d:
e6:b6:d2:1b:01:10:5b:a1:7e:ca:b1:00:7f:5e:44:ee:7b:8f:
f4:3d:83:4e:49:3f:40:0f:6d:73:68:4d:b9:36:6a:bd:9c:c2:
f0:d1:43:1f:1a:75:e3:62:87:03:ee:b3:4d:6f:f4:d0:2d:2f:
9e:d6:1c:cf:32:eb:b4:64:df:9a:d0:d8:4d:93:25:de:b5:f6:
52:ec:7c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:42 2026 by rpki-client