Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/_eCGeJZ9ztcP-js9iVfWwYNorMo.roa
File: _eCGeJZ9ztcP-js9iVfWwYNorMo.roa (raw, json)
Hash identifier: FYcuEdqIhJg4+sQujNMQIp6qd+suyEBIAnKLihcHSjo=
Subject key identifier: FD:E0:86:78:96:7D:CE:D7:0F:FA:3B:3D:89:57:D6:C1:83:68:AC:CA
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019F5C14A274F381A2A1C226C738627E1EC5
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/_eCGeJZ9ztcP-js9iVfWwYNorMo.roa
Signing time: Mon 13 Jul 2026 15:24:43 +0000
ROA not before: Mon 13 Jul 2026 15:24:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199746
IP address blocks: 2a0d:d940:2017::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:14:a2:74:f3:81:a2:a1:c2:26:c7:38:62:7e:1e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jul 13 15:24:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fde08678967dced70ffa3b3d8957d6c18368acca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:5d:37:54:09:2a:79:8f:25:45:9f:ca:42:
1d:77:8e:b4:f3:3a:cb:27:1a:3d:1f:de:b5:bb:2a:
87:39:23:98:e6:46:df:ea:f5:63:80:bd:9b:01:5f:
06:55:0f:28:44:a6:7b:b9:cb:17:2c:9f:9e:5f:23:
97:cf:57:9a:fb:4b:07:91:88:7b:c3:dc:b9:65:35:
73:f4:de:6e:43:32:1b:d3:49:2b:e9:a5:8d:9a:8c:
8a:c9:04:44:41:25:a4:cd:88:9b:ab:4f:43:98:18:
3e:8a:8b:0e:be:52:2a:a1:21:7a:17:1a:e9:ba:e7:
9c:89:26:7e:85:74:94:bc:e3:1f:54:39:01:6c:00:
b4:5e:11:c5:b1:94:c3:d9:f4:82:c8:a4:c7:3d:67:
3d:82:e3:2a:57:0d:e1:16:86:d6:bc:72:cc:be:e5:
b9:f2:81:18:a2:bd:16:06:0d:86:3d:27:41:08:67:
d3:93:de:f7:84:ee:62:28:8f:34:3d:42:c4:4e:6a:
97:eb:f2:af:c3:10:da:60:c0:7a:26:0f:0c:18:5a:
70:bb:3b:14:89:89:1f:3d:7c:4f:8d:cd:b6:e9:03:
f6:2d:11:1c:25:42:d4:00:a8:77:66:88:18:43:f2:
79:38:c3:82:66:f0:16:9e:2d:d1:f3:56:05:8d:3b:
fb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E0:86:78:96:7D:CE:D7:0F:FA:3B:3D:89:57:D6:C1:83:68:AC:CA
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/_eCGeJZ9ztcP-js9iVfWwYNorMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:2017::/48
Signature Algorithm: sha256WithRSAEncryption
38:ff:b7:0f:ef:8f:2a:d2:c1:e5:f5:4f:82:fa:d2:13:e8:98:
7c:35:56:e4:0f:1a:c4:ab:dc:ac:d1:05:1c:ba:bb:03:51:30:
9b:bf:3e:e1:4a:ac:b9:84:2e:fc:14:34:94:5f:0f:93:7b:9c:
9d:8a:2e:d3:4e:49:4a:f8:3e:1f:fc:35:89:02:30:da:f5:41:
ca:0b:2b:3b:0a:23:8d:dc:3a:c7:80:d9:a4:3f:38:c0:e4:0a:
8c:0a:7c:51:10:a9:5a:81:fa:36:05:43:dd:4c:fc:c8:17:33:
d8:30:b3:8b:5c:f5:76:1f:32:a9:35:71:8b:1c:d4:92:ed:aa:
d0:30:fa:96:94:b2:01:24:e2:34:9c:9d:36:00:16:6a:9d:71:
50:e0:5b:b7:66:3d:47:c8:a8:b1:7e:e7:0a:6c:e0:14:67:3d:
cf:f7:d0:a2:c0:d0:e5:4b:e9:a5:8e:75:2b:bf:f1:79:63:89:
9d:3b:1b:77:c0:0a:82:51:95:17:80:41:79:19:ab:dc:27:f1:
13:27:3d:a6:1f:77:6e:8b:b4:fd:76:64:92:d2:0b:54:71:02:
51:dc:b9:e7:46:5d:39:50:a6:00:f5:28:39:4f:55:f6:e5:aa:
a7:6a:77:81:5f:38:4f:6d:13:ec:d3:25:87:69:1b:b3:9b:17:
0d:02:cc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:43:28 2026 by rpki-client