Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/96qX2JLpDjn2X07felwpqaF7sjY.roa
File: 96qX2JLpDjn2X07felwpqaF7sjY.roa (raw, json)
Hash identifier: 8OLwijPizXuspcA2/2yKy+kso5hdoNgbsBiOkwU1wxA=
Subject key identifier: F7:AA:97:D8:92:E9:0E:39:F6:5F:4E:DF:7A:5C:29:A9:A1:7B:B2:36
Certificate issuer: /CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Certificate serial: 019F23689440575AAC46573F1028CD69F2E5
Authority key identifier: EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/96qX2JLpDjn2X07felwpqaF7sjY.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26073
IP address blocks: 2a0d:1a40:edef::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:94:40:57:5a:ac:46:57:3f:10:28:cd:69:f2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7aa97d892e90e39f65f4edf7a5c29a9a17bb236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:29:b8:78:5f:70:da:aa:75:29:f2:84:d0:7d:
a7:d9:2e:90:c0:b0:5c:1e:f0:4b:be:44:50:13:71:
c6:a9:b1:39:85:d2:dc:9f:90:e5:13:65:02:d4:07:
fb:5a:85:ee:35:36:bf:a4:b1:b9:39:68:78:62:ae:
43:ef:5c:1b:49:8d:f5:66:e3:76:07:24:f2:32:6c:
a7:0e:0b:68:ae:d0:e5:60:48:c0:2d:7e:dd:36:a5:
b2:95:66:92:8b:1d:85:1e:0e:b5:00:25:71:f1:af:
7d:23:b5:5b:12:7a:1d:24:63:ae:6c:99:7b:5e:d8:
3f:fa:68:3f:98:8a:cc:9e:48:7b:1b:56:6c:42:43:
4f:38:20:fd:24:72:10:96:4f:16:f7:a9:7c:cb:75:
54:f7:c0:27:04:39:a7:5b:69:1c:8c:2d:2a:df:1e:
31:cd:5d:e9:02:69:6a:93:22:07:97:48:d0:3d:ef:
f1:7e:5b:e9:db:e2:d1:ff:4a:5c:62:5f:22:c6:19:
bb:46:d9:a9:e7:b5:d0:b6:93:c3:7c:66:0d:2e:d8:
58:88:a9:98:13:1f:54:2b:f9:38:a4:77:a0:24:c8:
26:10:e5:66:1b:ff:a1:00:40:6e:d2:98:8f:8d:75:
89:72:92:17:84:ac:6e:7c:d1:b3:bc:71:2a:24:cb:
af:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AA:97:D8:92:E9:0E:39:F6:5F:4E:DF:7A:5C:29:A9:A1:7B:B2:36
X509v3 Authority Key Identifier:
keyid:EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/96qX2JLpDjn2X07felwpqaF7sjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1a40:edef::/48
Signature Algorithm: sha256WithRSAEncryption
12:11:f6:6e:b2:d6:cc:cc:93:b6:06:12:e4:38:6f:bd:92:2b:
58:73:2a:32:6b:d1:8b:e0:fa:07:c9:c7:01:01:18:b3:ca:3e:
f5:e8:af:35:6a:cd:4a:ad:b5:db:8d:cf:3d:ba:92:78:08:a4:
51:e2:32:f0:d8:31:8b:95:1b:33:26:34:24:11:7c:c2:52:c3:
7d:aa:d1:34:0e:32:08:79:81:21:e8:81:24:92:19:a1:40:d8:
10:85:b7:e6:39:83:43:80:5a:15:aa:60:bf:1e:7d:5b:09:0f:
d3:b0:d8:30:ec:fe:06:47:ad:50:c8:e1:bc:ab:7d:84:f3:9b:
58:f0:28:c6:e1:ab:f9:1c:3d:2f:47:24:00:4a:86:52:9e:e8:
22:de:2e:61:79:93:84:f4:4d:a4:35:f0:fb:c6:c7:d8:53:0a:
83:df:21:37:a3:a8:e9:7b:20:f2:c9:f4:c3:76:97:99:da:03:
6b:28:8b:a0:a9:db:2e:11:b5:58:72:72:c4:a3:1d:7f:0e:21:
da:a2:e5:80:7f:b5:d1:5e:06:20:54:16:88:fb:03:e7:a1:23:
84:30:67:8d:bb:e9:a4:ab:db:57:8a:a6:17:be:78:7e:da:eb:
54:a6:35:d4:b3:5f:bf:6e:7f:b3:4c:43:35:4b:cd:a9:15:21:
56:d4:1d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:41:21 2026 by rpki-client