Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/CMrPIdkb44qxQh52DtLH2me7jkw.roa
File: CMrPIdkb44qxQh52DtLH2me7jkw.roa (raw, json)
Hash identifier: itZcbLbqeJ3hQd52B6qbtQV5jsaCYlBbwqCtZuToeLQ=
Subject key identifier: 08:CA:CF:21:D9:1B:E3:8A:B1:42:1E:76:0E:D2:C7:DA:67:BB:8E:4C
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 019F4C2C867CDFE47C1D57497210ED816F80
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/CMrPIdkb44qxQh52DtLH2me7jkw.roa
Signing time: Fri 10 Jul 2026 13:16:54 +0000
ROA not before: Fri 10 Jul 2026 13:16:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63293
IP address blocks: 2a03:2887:ff00::/48 maxlen: 48
2a03:2887:ff02::/48 maxlen: 48
2a03:2887:ff03::/48 maxlen: 48
2a03:2887:ff04::/48 maxlen: 48
2a03:2887:ff05::/48 maxlen: 48
2a03:2887:ff06::/48 maxlen: 48
2a03:2887:ff07::/48 maxlen: 48
2a03:2887:ff08::/48 maxlen: 48
2a03:2887:ff09::/48 maxlen: 48
2a03:2887:ff0a::/48 maxlen: 48
2a03:2887:ff18::/48 maxlen: 48
2a03:2887:ff19::/48 maxlen: 48
2a03:2887:ff1b::/48 maxlen: 48
2a03:2887:ff1c::/48 maxlen: 48
2a03:2887:ff1d::/48 maxlen: 48
2a03:2887:ff1e::/48 maxlen: 48
2a03:2887:ff1f::/48 maxlen: 48
2a03:2887:ff20::/48 maxlen: 48
2a03:2887:ff21::/48 maxlen: 48
2a03:2887:ff22::/48 maxlen: 48
2a03:2887:ff23::/48 maxlen: 48
2a03:2887:ff24::/48 maxlen: 48
2a03:2887:ff25::/48 maxlen: 48
2a03:2887:ff27::/48 maxlen: 48
2a03:2887:ff28::/48 maxlen: 48
2a03:2887:ff29::/48 maxlen: 48
2a03:2887:ff2a::/48 maxlen: 48
2a03:2887:ff2b::/48 maxlen: 48
2a03:2887:ff2e::/48 maxlen: 48
2a03:2887:ff2f::/48 maxlen: 48
2a03:2887:ff30::/48 maxlen: 48
2a03:2887:ff33::/48 maxlen: 48
2a03:2887:ff35::/48 maxlen: 48
2a03:2887:ff36::/48 maxlen: 48
2a03:2887:ff37::/48 maxlen: 48
2a03:2887:ff38::/48 maxlen: 48
2a03:2887:ff39::/48 maxlen: 48
2a03:2887:ff3a::/48 maxlen: 48
2a03:2887:ff3b::/48 maxlen: 48
2a03:2887:ff3e::/48 maxlen: 48
2a03:2887:ff3f::/48 maxlen: 48
2a03:2887:ff40::/48 maxlen: 48
2a03:2887:ff41::/48 maxlen: 48
2a03:2887:ff42::/48 maxlen: 48
2a03:2887:ff43::/48 maxlen: 48
2a03:2887:ff44::/48 maxlen: 48
2a03:2887:ff45::/48 maxlen: 48
2a03:2887:ff48::/48 maxlen: 48
2a03:2887:ff49::/48 maxlen: 48
2a03:2887:ff4a::/48 maxlen: 48
2a03:2887:ff4b::/48 maxlen: 48
2a03:2887:ff4d::/48 maxlen: 48
2a03:2887:ff4e::/48 maxlen: 48
2a03:2887:ff4f::/48 maxlen: 48
2a03:2887:ff51::/48 maxlen: 48
2a03:2887:ff52::/48 maxlen: 48
2a03:2887:ff53::/48 maxlen: 48
2a03:2887:ff54::/48 maxlen: 48
2a03:2887:ff55::/48 maxlen: 48
2a03:2887:ff56::/48 maxlen: 48
2a03:2887:ff57::/48 maxlen: 48
2a03:2887:ff58::/48 maxlen: 48
2a03:2887:ff59::/48 maxlen: 48
2a03:2887:ff5a::/48 maxlen: 48
2a03:2887:ff5f::/48 maxlen: 48
2a03:2887:ff60::/48 maxlen: 48
2a03:2887:ff61::/48 maxlen: 48
2a03:2887:ff62::/48 maxlen: 48
2a03:2887:ff63::/48 maxlen: 48
2a03:2887:ff64::/48 maxlen: 48
2a03:2887:ff65::/48 maxlen: 48
2a03:2887:ff66::/48 maxlen: 48
2a03:2887:ff67::/48 maxlen: 48
2a03:2887:ff68::/48 maxlen: 48
2a03:2887:ff69::/48 maxlen: 48
2a03:2887:ff6a::/48 maxlen: 48
2a03:2887:ff6b::/48 maxlen: 48
2a03:2887:ff6c::/48 maxlen: 48
2a03:2887:ff6f::/48 maxlen: 48
2a03:2887:ff70::/48 maxlen: 48
2a03:2887:ff71::/48 maxlen: 48
2a03:2887:ff72::/48 maxlen: 48
2a03:2887:ff73::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:2c:86:7c:df:e4:7c:1d:57:49:72:10:ed:81:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Jul 10 13:16:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08cacf21d91be38ab1421e760ed2c7da67bb8e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2e:f4:99:63:79:f3:40:44:26:f9:3a:b3:c5:
e3:ee:5e:1a:f1:72:e8:61:5f:58:f5:29:24:76:e8:
f3:21:ef:9f:c2:dd:6c:c1:06:1a:9c:ad:10:13:28:
15:f7:20:92:10:e6:71:a7:19:58:b2:c8:5e:3e:8d:
9d:1e:14:57:18:9a:f8:23:4b:66:bc:53:de:61:df:
5e:17:ef:83:e0:79:8a:03:d0:6f:ad:c0:c0:44:fc:
bb:0e:7e:0c:92:f4:cf:65:0e:96:0d:d0:76:15:7a:
1c:c1:09:41:37:b5:32:0d:48:0b:f8:aa:bb:a6:4a:
44:e9:a4:15:1c:4a:08:8b:d5:28:f9:c6:4c:27:f8:
59:05:e2:bd:b7:0d:64:dc:0c:83:4d:f9:a3:fd:97:
8b:45:aa:cd:a9:de:ac:90:16:56:b1:89:0b:68:8f:
ad:72:14:e3:d7:bb:bb:ea:75:e5:63:8e:8a:ec:4b:
1d:c4:b4:1f:5c:4b:bf:9d:53:8f:6e:0b:1a:50:4f:
91:59:23:b7:54:81:59:e7:b0:0a:75:ff:e8:63:1d:
69:5b:96:cb:01:58:3a:92:71:9f:f3:07:f4:65:dd:
18:8e:b2:a4:ab:d1:74:a4:92:6f:20:b4:5b:b0:c8:
25:1c:48:f4:35:c6:cc:0a:2e:3f:fc:35:c3:f9:c7:
a6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CA:CF:21:D9:1B:E3:8A:B1:42:1E:76:0E:D2:C7:DA:67:BB:8E:4C
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/CMrPIdkb44qxQh52DtLH2me7jkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2887:ff00::/48
2a03:2887:ff02::-2a03:2887:ff0a:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff18::/47
2a03:2887:ff1b::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff27::-2a03:2887:ff2b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff2e::-2a03:2887:ff30:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff33::/48
2a03:2887:ff35::-2a03:2887:ff3b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff3e::-2a03:2887:ff45:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff48::/46
2a03:2887:ff4d::-2a03:2887:ff4f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff51::-2a03:2887:ff5a:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff5f::-2a03:2887:ff6c:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff6f::-2a03:2887:ff73:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
76:f0:96:a2:03:fa:af:9a:84:28:35:8c:23:a8:e3:ae:49:a8:
d2:f0:3a:bc:96:42:c5:95:a5:f2:9c:a4:c5:75:34:5d:e5:3d:
71:5b:69:a8:52:c9:aa:49:c6:df:2d:e1:5c:4f:50:e2:28:a2:
40:05:df:a0:e3:72:f7:cb:2d:fd:76:83:1d:f1:88:0d:a4:72:
66:97:9b:48:a3:d9:ea:01:b2:34:87:b7:78:72:d1:36:c6:fb:
1f:b5:fb:36:b4:17:81:96:0d:ba:be:54:d6:20:2d:ab:b2:17:
54:8b:e7:ab:f6:6d:8b:08:90:c6:19:92:ed:08:59:75:f6:20:
7b:94:b9:82:61:c2:fb:bb:90:62:71:31:bc:9b:0e:54:73:c1:
21:93:ac:01:b9:3b:ba:c3:ff:cc:7c:e6:7f:d3:80:1f:38:1b:
3f:1b:0a:54:d8:80:fd:7a:63:31:50:98:a6:79:1f:52:b8:fa:
47:0d:e9:dc:c2:dc:89:dd:9c:2c:d7:2b:22:3f:47:d1:1b:58:
2f:be:86:16:29:01:4b:56:89:1e:a3:d3:80:c7:d6:58:4b:ea:
54:3b:6b:45:f7:95:e5:13:e9:fe:68:f8:8d:ee:93:61:09:3e:
5b:be:f5:c6:0c:13:c2:14:ba:26:63:c6:9f:14:54:7d:b7:f5:
44:89:f6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:21:19 2026 by rpki-client