Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/xU7UoNQMWPE1i86W4dVgdFTRphY.roa
File: xU7UoNQMWPE1i86W4dVgdFTRphY.roa (raw, json)
Hash identifier: q2xkz4MQhyERngQ8lq1SS1tWjkdb+8VOT+aKd0BdBYo=
Subject key identifier: C5:4E:D4:A0:D4:0C:58:F1:35:8B:CE:96:E1:D5:60:74:54:D1:A6:16
Certificate issuer: /CN=1703244c9df2252ead4436d91df6b84404145a60
Certificate serial: 019F236861EC66899F89220654DC3CFF13A1
Authority key identifier: 17:03:24:4C:9D:F2:25:2E:AD:44:36:D9:1D:F6:B8:44:04:14:5A:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/xU7UoNQMWPE1i86W4dVgdFTRphY.roa
Signing time: Thu 02 Jul 2026 15:17:51 +0000
ROA not before: Thu 02 Jul 2026 15:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211350
IP address blocks: 2a14:d480::/29 maxlen: 48
2a14:d480::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:61:ec:66:89:9f:89:22:06:54:dc:3c:ff:13:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1703244c9df2252ead4436d91df6b84404145a60
Validity
Not Before: Jul 2 15:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c54ed4a0d40c58f1358bce96e1d5607454d1a616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a6:17:5b:db:25:84:cb:09:1b:d1:1a:37:ca:
d2:9b:0e:c2:60:bc:71:b5:49:53:9a:48:d2:26:72:
7d:32:1d:22:e3:6a:b6:c1:13:de:f2:ba:18:12:69:
dd:42:56:a8:51:35:e8:c4:bf:94:68:92:83:0a:86:
2f:aa:32:a4:1e:6c:a6:b1:c4:d3:e3:90:e1:c1:4e:
c1:db:11:de:60:9a:c0:8a:b0:05:89:da:1e:ab:3c:
08:9e:b8:bb:18:bb:04:f9:70:a7:0d:d4:a8:0f:c7:
51:d9:9e:c8:3a:ea:e4:01:d6:bc:6e:39:67:6a:0e:
ba:aa:d0:de:21:28:88:d1:54:3e:28:9e:6c:3a:7f:
38:31:7d:47:a1:d9:12:3e:5b:b3:e7:cc:2f:cc:32:
d2:7a:29:22:65:6f:91:14:1b:6b:46:33:a5:ff:42:
8b:54:a7:29:ad:ed:29:5a:66:d8:61:14:33:64:2e:
8c:26:07:0d:bd:6f:12:48:46:36:b0:1a:10:8c:29:
e1:26:00:7c:04:2a:cf:8c:7b:f1:37:c1:5f:0f:a8:
8f:21:61:18:cc:d9:8d:cd:d8:a4:8a:0c:05:cb:6e:
b0:e3:2f:cf:dd:12:78:66:4b:d2:90:8c:1a:48:8d:
3f:41:c2:1e:ca:ef:4e:89:e3:0e:f7:89:db:5e:52:
ab:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4E:D4:A0:D4:0C:58:F1:35:8B:CE:96:E1:D5:60:74:54:D1:A6:16
X509v3 Authority Key Identifier:
keyid:17:03:24:4C:9D:F2:25:2E:AD:44:36:D9:1D:F6:B8:44:04:14:5A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/xU7UoNQMWPE1i86W4dVgdFTRphY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/FwMkTJ3yJS6tRDbZHfa4RAQUWmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:d480::/29
Signature Algorithm: sha256WithRSAEncryption
14:5a:27:d9:61:09:fb:7f:3e:05:e3:8f:1d:de:c0:c2:98:59:
85:6b:ed:6d:9a:ea:76:71:82:cf:7e:f7:0a:88:17:eb:1b:4e:
60:63:5a:d5:a5:73:7d:0a:17:7c:a3:27:0d:ef:c3:6b:58:e2:
5c:b9:1d:ee:07:9b:c9:e8:4f:bf:5e:44:84:0f:83:0e:df:3f:
1a:e8:d2:d7:1e:b4:67:ee:b1:a1:2a:8a:bf:56:f1:d3:20:16:
4c:6a:7d:f0:e6:98:21:9b:37:1a:7f:be:39:49:0f:d0:13:95:
25:0e:81:cf:2c:4c:73:22:28:69:4c:be:67:e8:4e:00:d3:16:
cf:28:cb:6b:6e:88:0d:a4:88:cb:33:69:5c:8d:5d:cf:09:2c:
6b:ab:6d:b9:b2:65:2b:25:65:26:7d:b9:39:ab:9d:7d:4c:8e:
33:76:44:13:4c:d8:42:3f:9c:c2:29:9f:bd:3b:77:44:fd:7e:
a2:11:23:de:3c:b8:ef:43:79:d4:c6:16:ca:03:19:18:22:5c:
b6:ea:e1:1b:51:b0:87:2f:73:82:80:1e:1e:d1:a7:a1:cd:f9:
8e:a3:2d:0e:02:01:ca:fe:5a:fe:f6:e5:53:3d:b2:ec:94:04:
e4:f4:c1:d4:6c:c5:1b:0a:9e:69:fa:b4:a7:78:d8:0f:1f:f4:
a9:e4:7c:d9
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ8jaGHsZomfiSIGVNw8/xOhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MDMyNDRjOWRmMjI1MmVhZDQ0MzZkOTFkZjZiODQ0MDQx
NDVhNjAwHhcNMjYwNzAyMTUxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTRlZDRhMGQ0MGM1OGYxMzU4YmNlOTZlMWQ1NjA3NDU0ZDFhNjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qYXW9slhMsJG9EaN8rSmw7CYLxx
tUlTmkjSJnJ9Mh0i42q2wRPe8roYEmndQlaoUTXoxL+UaJKDCoYvqjKkHmymscTT
45DhwU7B2xHeYJrAirAFidoeqzwInri7GLsE+XCnDdSoD8dR2Z7IOurkAda8bjln
ag66qtDeISiI0VQ+KJ5sOn84MX1HodkSPluz58wvzDLSeikiZW+RFBtrRjOl/0KL
VKcpre0pWmbYYRQzZC6MJgcNvW8SSEY2sBoQjCnhJgB8BCrPjHvxN8FfD6iPIWEY
zNmNzdikigwFy26w4y/P3RJ4ZkvSkIwaSI0/QcIeyu9OieMO94nbXlKryQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMVO1KDUDFjxNYvOluHVYHRU0aYWMB8GA1UdIwQY
MBaAFBcDJEyd8iUurUQ22R32uEQEFFpgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndNa1RKM3lKUzZ0UkRiWkhmYTRSQVFVV21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lYmM1N2QtNWMzZS00YmFkLWI3MGQt
ODE5NjgwZGI0MzU4LzEveFU3VW9OUU1XUEUxaTg2VzRkVmdkRlRScGhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lYmM1N2QtNWMzZS00YmFkLWI3MGQtODE5NjgwZGI0MzU4
LzEvRndNa1RKM3lKUzZ0UkRiWkhmYTRSQVFVV21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhTUgDAN
BgkqhkiG9w0BAQsFAAOCAQEAFFon2WEJ+38+BeOPHd7AwphZhWvtbZrqdnGCz373
CogX6xtOYGNa1aVzfQoXfKMnDe/Da1jiXLkd7gebyehPv15EhA+DDt8/GujS1x60
Z+6xoSqKv1bx0yAWTGp98OaYIZs3Gn++OUkP0BOVJQ6BzyxMcyIoaUy+Z+hOANMW
zyjLa26IDaSIyzNpXI1dzwksa6ttubJlKyVlJn25OaudfUyOM3ZEE0zYQj+cwimf
vTt3RP1+ohEj3jy470N51MYWygMZGCJcturhG1Gwhy9zgoAeHtGnoc35jqMtDgIB
yv5a/vblUz2y7JQE5PTB1GzFGwqeafq0p3jYDx/0qeR82Q==
-----END CERTIFICATE-----
Generated at Mon Jul 13 13:10:17 2026 by rpki-client