Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/wOVkqT7ztZXxGTTzuM5l0LfJavk.roa
File: wOVkqT7ztZXxGTTzuM5l0LfJavk.roa (raw, json)
Hash identifier: jmFTZuFqzg3pZRsa0IUrlDUzQ6n73sahy63N4xlRN5w=
Subject key identifier: C0:E5:64:A9:3E:F3:B5:95:F1:19:34:F3:B8:CE:65:D0:B7:C9:6A:F9
Certificate issuer: /CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Certificate serial: 019F23689AD9DF087656DD905C45438F7597
Authority key identifier: EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/wOVkqT7ztZXxGTTzuM5l0LfJavk.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211718
IP address blocks: 2a0d:1a40:7b00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9a:d9:df:08:76:56:dd:90:5c:45:43:8f:75:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0e564a93ef3b595f11934f3b8ce65d0b7c96af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:15:90:5b:2d:8e:cf:c1:5c:08:8f:87:7b:
9d:4a:14:e7:1e:1e:17:82:8f:af:ed:c1:50:29:b8:
22:40:ba:c4:6e:37:42:c9:b0:94:20:3b:09:dc:b9:
ff:50:9b:0e:dd:bb:94:44:f9:8e:b6:97:4a:99:55:
6d:13:81:dc:2e:b1:97:77:89:7b:4c:f5:f9:2e:e4:
2c:65:53:fd:33:1e:3e:9b:14:a7:43:9d:46:7d:0f:
34:90:03:ad:88:0c:cd:77:4f:24:6c:b2:a1:7a:42:
d2:e8:5d:50:f9:04:e2:43:6d:49:71:ff:01:09:9c:
6c:f0:8c:ac:75:4a:b5:37:59:b0:9a:f7:34:ac:22:
67:c3:95:75:ef:7e:06:f0:8e:10:16:1d:e3:f6:2b:
c9:dd:8b:91:5d:23:0b:52:ed:ce:d0:98:b5:58:16:
31:19:58:c4:5a:ea:d4:6f:73:32:89:50:39:d0:ba:
c5:7b:f6:28:1f:27:b6:83:75:29:e8:b7:93:1a:d7:
30:f9:fb:d5:a0:19:dc:e4:52:3f:ff:b4:2d:d7:65:
21:0c:2c:cc:3a:8a:26:a5:5c:ec:88:c8:a7:ce:9e:
27:aa:2f:9d:00:74:80:7b:09:7e:62:42:0a:05:f1:
7e:4b:9c:23:ce:4e:0e:c3:3f:ff:50:21:00:c7:47:
11:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E5:64:A9:3E:F3:B5:95:F1:19:34:F3:B8:CE:65:D0:B7:C9:6A:F9
X509v3 Authority Key Identifier:
keyid:EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/wOVkqT7ztZXxGTTzuM5l0LfJavk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1a40:7b00::/48
Signature Algorithm: sha256WithRSAEncryption
22:9a:19:c6:bc:96:a9:67:21:23:b3:61:d2:35:4e:47:d2:23:
98:70:07:78:87:83:87:e7:0c:8f:1c:84:d0:35:7e:7c:a4:d7:
ec:be:59:0d:20:04:07:b2:af:d3:14:93:86:88:f7:14:ed:86:
32:02:e7:c8:bf:16:78:d8:4b:37:70:ed:23:d0:0d:98:30:3c:
30:d3:34:f3:81:b8:19:68:da:c7:3d:52:32:0a:a6:c0:30:0e:
88:b4:5d:03:2e:d2:7a:7a:c7:77:87:99:27:22:c7:ee:9c:a6:
df:54:3f:5d:ab:f7:81:ac:b2:9c:14:96:e6:0f:6e:45:fd:ec:
ec:c3:f3:64:c4:59:c4:1f:08:cd:9a:e2:7c:7e:71:11:31:64:
11:e1:ca:00:ed:ff:ca:ba:56:ce:85:a7:f8:be:a7:38:1f:fd:
87:dd:92:ec:8f:69:59:84:e1:57:f4:6f:9b:5d:86:bd:4e:88:
7d:dd:a1:30:54:33:00:85:f0:56:c2:19:bc:3a:3f:33:5e:13:
30:a5:20:29:be:b1:2d:dc:51:e3:52:ca:5c:1b:02:ed:18:5d:
34:79:9b:85:8f:80:6e:2b:47:99:29:11:6c:7a:41:86:fb:61:
8f:08:00:6e:84:6e:e3:61:10:b2:a2:69:9e:51:ec:db:43:59:
05:ab:2d:7c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaJrZ3wh2Vt2QXEVDj3WXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZjUzMTRhZWVmNTEzMjMxOTRmZDg2Mjk4NThhZDIwZmI5
MmRmZTcwHhcNMjYwNzAyMTUxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGU1NjRhOTNlZjNiNTk1ZjExOTM0ZjNiOGNlNjVkMGI3Yzk2YWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuoVkFstjs/BXAiPh3udShTnHh4X
go+v7cFQKbgiQLrEbjdCybCUIDsJ3Ln/UJsO3buURPmOtpdKmVVtE4HcLrGXd4l7
TPX5LuQsZVP9Mx4+mxSnQ51GfQ80kAOtiAzNd08kbLKhekLS6F1Q+QTiQ21Jcf8B
CZxs8IysdUq1N1mwmvc0rCJnw5V1734G8I4QFh3j9ivJ3YuRXSMLUu3O0Ji1WBYx
GVjEWurUb3MyiVA50LrFe/YoHye2g3Up6LeTGtcw+fvVoBnc5FI//7Qt12UhDCzM
OoompVzsiMinzp4nqi+dAHSAewl+YkIKBfF+S5wjzk4Owz//UCEAx0cRrwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMDlZKk+87WV8Rk087jOZdC3yWr5MB8GA1UdIwQY
MBaAFO71MUru9RMjGU/YYphYrSD7kt/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3ZVeFN1NzFFeU1aVDloaW1GaXRJUHVTMy1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt
OTI4MTlkZThhMDM2LzEvd09Wa3FUN3p0Wlh4R1RUenVNNWwwTGZKYXZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2
LzEvN3ZVeFN1NzFFeU1aVDloaW1GaXRJUHVTMy1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg0aQHsA
MA0GCSqGSIb3DQEBCwUAA4IBAQAimhnGvJapZyEjs2HSNU5H0iOYcAd4h4OH5wyP
HITQNX58pNfsvlkNIAQHsq/TFJOGiPcU7YYyAufIvxZ42Es3cO0j0A2YMDww0zTz
gbgZaNrHPVIyCqbAMA6ItF0DLtJ6esd3h5knIsfunKbfVD9dq/eBrLKcFJbmD25F
/ezsw/NkxFnEHwjNmuJ8fnERMWQR4coA7f/KulbOhaf4vqc4H/2H3ZLsj2lZhOFX
9G+bXYa9Toh93aEwVDMAhfBWwhm8Oj8zXhMwpSApvrEt3FHjUspcGwLtGF00eZuF
j4BuK0eZKRFsekGG+2GPCABuhG7jYRCyommeUezbQ1kFqy18
-----END CERTIFICATE-----
Generated at Tue Jul 7 11:43:08 2026 by rpki-client