Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/EcUtNVkTOi3EHBnQtghPEHrJEZY.roa
File: EcUtNVkTOi3EHBnQtghPEHrJEZY.roa (raw, json)
Hash identifier: GXsobrevmwlATTbR+PgJl7ZZUb6khqpMkBW74Ix7biA=
Subject key identifier: 11:C5:2D:35:59:13:3A:2D:C4:1C:19:D0:B6:08:4F:10:7A:C9:11:96
Certificate issuer: /CN=73d85f8438d73b5668e89cc692646f9487965fa9
Certificate serial: 01A05D662CCBF24D8049BADC77BC7F6583B9
Authority key identifier: 73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/EcUtNVkTOi3EHBnQtghPEHrJEZY.roa
Signing time: Tue 01 Sep 2026 14:36:12 +0000
ROA not before: Tue 01 Sep 2026 14:36:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214480
IP address blocks: 2001:678:1310::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:66:2c:cb:f2:4d:80:49:ba:dc:77:bc:7f:65:83:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d85f8438d73b5668e89cc692646f9487965fa9
Validity
Not Before: Sep 1 14:36:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11c52d3559133a2dc41c19d0b6084f107ac91196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3f:a5:df:1c:20:a4:4b:6c:e9:e1:b5:40:ef:
60:59:f8:94:36:8c:4f:25:a6:89:a5:4e:06:a4:f2:
1b:9a:db:ed:cd:f9:26:0d:e1:71:d1:1c:a2:57:cf:
e7:84:f8:45:b4:84:9d:41:c7:35:64:30:98:c3:59:
aa:6f:d2:80:61:55:31:85:5e:c8:95:4a:a1:a7:0f:
c8:d7:ca:c8:43:0f:1b:2f:c2:f0:ee:e4:5e:58:02:
42:ba:f7:4d:2f:d5:4c:59:0b:25:af:83:bc:59:05:
ec:c4:40:b4:73:ee:f4:4a:c2:da:a6:eb:fc:7d:e4:
e0:47:50:95:5d:f2:7f:8f:10:05:86:02:02:72:d6:
ba:c0:bc:35:24:68:8e:16:9a:45:1f:3c:7b:63:05:
c3:79:e6:2b:93:a0:df:da:3b:9c:95:14:12:74:a4:
b8:46:5a:68:a4:22:57:86:c7:a5:77:e6:80:5f:74:
67:5e:07:3e:de:d9:c0:41:a0:91:f5:5d:c2:52:67:
6e:24:d6:8c:36:60:3e:75:20:74:6f:9b:b7:52:cf:
af:fe:b6:48:6c:90:c8:0f:30:8b:c5:91:12:3c:6d:
a5:1b:2f:af:51:9b:3b:cd:65:6a:b1:68:a0:d0:7f:
20:bb:a6:1d:0a:3e:d3:71:1f:f2:20:20:7d:c1:57:
e7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C5:2D:35:59:13:3A:2D:C4:1C:19:D0:B6:08:4F:10:7A:C9:11:96
X509v3 Authority Key Identifier:
keyid:73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/EcUtNVkTOi3EHBnQtghPEHrJEZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1310::/48
Signature Algorithm: sha256WithRSAEncryption
43:f9:77:90:7e:12:39:93:2a:42:c4:0b:7b:c1:c8:82:4a:74:
47:5d:eb:9b:3d:5b:9e:d2:ef:6c:83:9f:a4:60:27:9e:0b:43:
8b:4f:6a:6a:33:61:15:0a:70:c7:47:d7:19:44:38:3c:be:21:
06:90:dd:19:2d:f8:1f:5e:c7:50:9c:0a:d1:cf:63:1d:53:55:
f7:92:e7:64:54:36:43:f3:6c:94:e9:4d:ae:ef:a7:3c:43:52:
32:2d:04:21:a6:b8:bc:5c:0b:17:95:be:08:35:ab:6e:ff:86:
a2:a2:c1:6d:28:8a:93:dc:31:ac:72:7c:60:f6:ba:bb:12:6b:
08:e3:32:86:2b:8e:b3:fe:04:b5:c0:2d:62:85:ec:34:04:d1:
11:ae:9f:fd:8b:58:cb:86:7c:f8:44:59:22:c9:06:fb:73:65:
f3:fa:c9:8b:5f:23:8e:ba:29:f0:6e:29:86:68:46:e3:57:08:
b1:2f:96:04:6a:17:e9:ce:95:d7:3f:cc:91:ab:1b:9b:90:77:
a7:8e:e0:f0:0f:a3:88:44:76:49:e0:f7:13:54:9e:a2:99:41:
d2:b8:0a:c5:62:15:f4:3a:ff:46:00:da:83:25:e3:73:2c:eb:
47:d7:a3:ca:04:56:97:1e:bf:1f:e4:cf:8e:49:f9:27:38:13:
03:70:35:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:27:54 2026 by rpki-client