Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/SEYQgtC_8BplrZD7grL5ljlcID0.roa
File: SEYQgtC_8BplrZD7grL5ljlcID0.roa (raw, json)
Hash identifier: Ee29iLIQ6Fe9LUgXTWVjmo6kKFtR4CoXYo22/zo9Gpw=
Subject key identifier: 48:46:10:82:D0:BF:F0:1A:65:AD:90:FB:82:B2:F9:96:39:5C:20:3D
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 019F11E6A5EB655C65F2D91BB0E98FC4A32C
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/SEYQgtC_8BplrZD7grL5ljlcID0.roa
Signing time: Mon 29 Jun 2026 05:42:36 +0000
ROA not before: Mon 29 Jun 2026 05:42:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 64.178.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:e6:a5:eb:65:5c:65:f2:d9:1b:b0:e9:8f:c4:a3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Jun 29 05:42:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48461082d0bff01a65ad90fb82b2f996395c203d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e0:45:5f:aa:04:cb:c0:60:7b:51:ed:40:77:
45:6b:cd:04:bb:28:de:57:9a:02:81:3b:45:df:15:
d6:bc:5b:02:6a:9f:e1:0e:72:ff:ce:87:5e:97:41:
47:2b:56:8a:f8:c8:04:fd:2e:a1:cf:bd:c4:bf:5a:
23:13:8c:5d:4b:cb:be:ba:a2:f1:2d:fa:bc:b4:41:
45:c8:ed:9e:ca:64:74:0c:41:96:14:1f:e4:9c:21:
eb:f8:34:1b:71:21:a7:6a:e2:75:e1:ef:ea:92:b0:
20:76:ad:ea:da:98:e9:8e:2f:21:11:49:49:3f:ef:
28:69:f0:10:ac:8c:e6:3f:05:fe:eb:26:2d:4a:8d:
6f:df:de:9c:3e:69:46:8c:37:77:bb:b7:c0:ba:b2:
c2:c3:e2:af:51:a6:37:6f:d8:94:36:6d:8c:2e:42:
ba:98:10:f2:9b:87:00:63:4f:d5:6c:d0:a3:5f:2d:
e7:56:02:6d:d2:62:57:d6:b0:b3:9b:de:05:fa:98:
40:6b:ba:d9:c6:63:6b:4e:34:f6:9f:b5:f4:d8:8e:
07:e3:97:6e:16:1c:e4:2c:fe:2c:88:30:b6:58:f7:
eb:6d:65:3f:5a:68:c2:15:70:f7:20:bb:57:68:b6:
ab:bd:b1:7a:2f:9c:e1:89:4a:14:8a:22:60:12:f3:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:46:10:82:D0:BF:F0:1A:65:AD:90:FB:82:B2:F9:96:39:5C:20:3D
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/SEYQgtC_8BplrZD7grL5ljlcID0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.178.96.0/20
Signature Algorithm: sha256WithRSAEncryption
0f:ff:6e:53:7a:da:67:ae:1c:86:68:83:15:05:2a:4a:97:23:
e5:41:3b:ad:0c:f3:4e:36:40:74:4e:94:37:99:e7:b2:ef:fa:
39:56:24:b1:36:0e:6d:b9:1f:66:61:37:e5:80:34:f1:49:ac:
cf:3e:10:9f:35:e8:f9:89:96:14:dd:5b:3d:e0:a3:3a:14:48:
2a:cf:e5:a4:34:30:fb:7f:c9:9b:51:74:4d:f4:e6:df:86:2f:
1d:4b:0e:ce:ab:1b:d8:ed:b4:21:2c:56:47:ac:40:04:2a:47:
57:42:f6:1f:8c:ec:a8:0c:73:e7:2c:87:6b:4b:23:79:fa:4e:
ef:72:7d:eb:0d:5b:b6:59:45:a3:f0:c2:84:71:a5:6d:20:ba:
ea:4e:2a:6a:7b:18:dd:dc:5a:ee:cd:de:9d:88:7a:1b:19:9c:
88:93:73:9d:bf:39:88:c2:6f:b7:23:b6:ee:f7:b6:a2:e1:67:
8d:fb:74:0c:ba:7c:68:8c:b0:ad:15:0c:7a:bb:aa:34:9b:78:
8c:ec:9b:ac:c0:b7:62:e3:6c:f8:03:30:e1:2b:7c:ea:08:30:
54:63:4a:a4:5e:87:db:c2:8f:9d:15:24:57:11:32:67:23:c2:
8f:52:0a:a0:a8:7e:3e:14:a0:32:62:f0:f3:d5:6a:fd:ad:d0:
7b:c1:38:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:10:42 2026 by rpki-client