Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/7AoLhlDMcoVRdjcLyxcQf-3OllE.roa
File: 7AoLhlDMcoVRdjcLyxcQf-3OllE.roa (raw, json)
Hash identifier: Q4dXESu/ezy6t9zHxB9C770019wLJbmi79CJ9JqUVP0=
Subject key identifier: EC:0A:0B:86:50:CC:72:85:51:76:37:0B:CB:17:10:7F:ED:CE:96:51
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 01A11B85599E526391FDA91991621AA64B1C
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/7AoLhlDMcoVRdjcLyxcQf-3OllE.roa
Signing time: Thu 08 Oct 2026 12:38:06 +0000
ROA not before: Thu 08 Oct 2026 12:38:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213861
IP address blocks: 2a09:a503::/32 maxlen: 32
2a0d:fcc4::/32 maxlen: 32
2a14:a406::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:85:59:9e:52:63:91:fd:a9:19:91:62:1a:a6:4b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Oct 8 12:38:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec0a0b8650cc72855176370bcb17107fedce9651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cf:b0:4b:46:26:cf:63:17:ec:2c:37:2a:e1:
ab:64:d4:36:e9:32:bc:93:bd:93:6c:20:a8:29:76:
c4:63:93:fc:35:ea:dc:f6:77:8f:30:8d:96:72:bc:
ae:68:29:16:52:3a:71:71:f5:3c:2c:6c:00:ed:6d:
3b:38:cc:f6:7a:65:b1:ee:34:c2:15:83:7d:2a:3e:
22:28:b4:f1:fb:99:54:30:40:25:25:8d:75:82:e3:
0e:d7:2b:15:95:41:1c:f9:67:36:8f:8b:85:02:44:
57:c0:a2:1a:02:52:ab:7f:2e:25:da:17:d5:01:ce:
db:14:cd:88:e7:3d:54:6f:20:24:fc:cc:91:0a:95:
58:1b:d2:36:07:93:98:4b:45:aa:23:86:6d:38:4e:
5c:db:46:96:85:79:53:f6:78:8b:09:6b:b5:90:9a:
be:59:19:d8:08:e1:5f:f9:7b:1f:46:5c:18:af:5c:
38:30:ba:61:a8:28:23:ac:56:f0:62:81:9d:fd:3d:
96:3e:fd:2e:d8:46:b4:26:3d:eb:2f:3d:0f:cd:47:
d5:e7:d3:e6:0d:b2:0b:b8:20:a7:6e:34:78:1e:35:
43:2c:d3:82:a3:3f:a6:3f:46:37:77:f9:67:ce:c6:
30:26:f2:60:83:33:b9:3a:7e:a7:7a:1e:3c:c8:dc:
6b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0A:0B:86:50:CC:72:85:51:76:37:0B:CB:17:10:7F:ED:CE:96:51
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/7AoLhlDMcoVRdjcLyxcQf-3OllE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:a503::/32
2a0d:fcc4::/32
2a14:a406::/32
Signature Algorithm: sha256WithRSAEncryption
5f:72:65:c6:8e:26:e1:5b:97:33:c6:2a:89:cf:17:cc:8d:23:
59:94:8a:3f:d2:3c:1b:e1:61:b7:cd:d8:55:bf:9b:5c:9c:c1:
9e:02:27:a7:1b:70:e0:50:9a:0e:97:83:d7:90:e0:08:93:51:
96:3a:3f:22:39:d7:d6:42:30:e3:4f:14:22:e2:4e:db:70:0a:
f6:ba:b0:74:11:1d:15:f4:0b:18:34:13:db:bc:73:1c:88:8e:
8c:e4:89:13:a0:9d:b2:c2:5c:e4:92:1f:4d:97:67:3f:cc:a5:
00:24:66:7f:38:2b:a2:46:8d:d5:08:41:b6:95:53:c9:66:45:
f3:4b:e8:5b:b7:2a:ac:d9:ad:f0:c2:0b:34:38:86:9c:a1:2a:
0f:79:7f:4b:fe:b0:8e:e6:e5:e2:73:9b:da:89:ec:31:e8:85:
57:09:d0:5d:07:3d:88:2d:19:02:91:84:db:d5:a5:92:8b:ab:
30:85:03:28:f6:12:87:ee:7c:bb:4e:02:ab:f3:71:72:ed:67:
7a:c7:52:ef:95:2a:ea:4a:93:00:a5:cf:d3:a1:d9:18:c1:0f:
60:66:00:80:6a:4e:c2:3e:f1:58:52:e7:cc:8e:97:9d:10:fa:
f5:73:1a:41:e7:ea:b6:cd:f4:39:b9:88:a7:d1:bf:2d:b1:87:
aa:1b:b8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:35 2026 by rpki-client