Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ES7j55n45k0wgpdgy0VQlSCSuEk.roa
File: ES7j55n45k0wgpdgy0VQlSCSuEk.roa (raw, json)
Hash identifier: ruW6MiZXoa+nsoBz0XgQOVvFKzDWpd9qlq1GKGi2ESQ=
Subject key identifier: 11:2E:E3:E7:99:F8:E6:4D:30:82:97:60:CB:45:50:95:20:92:B8:49
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019F46487E689C2A840EB0523A7C3037E6CD
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ES7j55n45k0wgpdgy0VQlSCSuEk.roa
Signing time: Thu 09 Jul 2026 09:49:43 +0000
ROA not before: Thu 09 Jul 2026 09:49:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7289
IP address blocks: 2a0c:5d40::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a11:d680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:48:7e:68:9c:2a:84:0e:b0:52:3a:7c:30:37:e6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jul 9 09:49:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=112ee3e799f8e64d30829760cb4550952092b849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f6:65:4c:49:28:ac:95:6b:2d:f8:1e:26:97:
2a:a2:70:a2:99:97:73:b8:d8:d3:24:f9:cf:59:98:
79:cb:13:b7:dc:45:2f:62:bb:e8:14:d1:f0:d3:a0:
d9:3c:ec:20:00:6d:69:1b:a2:d0:99:2c:7c:13:a8:
0e:c0:9a:6a:dd:1f:6e:e5:c7:8c:44:0e:f9:71:4b:
61:9d:09:af:e1:af:d0:9d:e9:a6:2d:be:e1:47:f3:
70:06:bb:78:fa:46:5e:76:5a:9d:7c:92:69:c0:ba:
aa:e2:a6:9c:d5:e5:e3:50:38:56:b7:46:a4:4e:12:
29:7d:23:81:31:31:13:41:e7:1a:ec:dd:a3:fe:c7:
ad:f5:88:53:c3:8a:ed:99:9d:50:1c:b8:2d:d9:47:
6e:2b:51:64:b5:81:97:4c:e7:28:95:2c:54:12:b3:
11:68:58:4e:f4:c4:f1:2a:6d:3f:40:ca:8a:b2:b7:
65:64:13:06:f1:18:7d:31:5a:0f:ba:66:e0:a3:0c:
56:7f:48:b6:59:9f:3a:5e:01:22:6f:4c:f5:88:d7:
34:14:c2:c1:0d:63:97:dd:7e:b7:1d:23:16:ba:12:
a1:35:41:83:66:ef:56:20:14:2e:eb:8b:30:04:30:
ca:be:9c:8d:90:a5:00:9d:43:0f:2c:09:54:ff:f6:
09:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2E:E3:E7:99:F8:E6:4D:30:82:97:60:CB:45:50:95:20:92:B8:49
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ES7j55n45k0wgpdgy0VQlSCSuEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:5d40::/29
2a11:580::/29
2a11:d680::/29
Signature Algorithm: sha256WithRSAEncryption
36:8d:fe:33:36:24:d2:a2:f1:40:b8:31:ea:ff:65:47:97:14:
0e:20:96:69:b1:f4:64:c8:c0:b9:2f:6b:d0:98:17:b7:28:64:
96:9d:ac:07:2c:ec:82:f4:5e:8c:43:24:31:b2:6c:9a:c8:7d:
9c:81:04:32:2d:93:e1:00:cb:cf:34:98:ea:c5:47:e2:69:52:
2b:c1:3c:41:74:49:9e:d6:77:36:29:d0:78:1b:95:14:99:b8:
ad:9e:8f:1f:f9:0d:37:aa:77:bf:61:fd:77:84:45:60:95:36:
15:d9:f3:64:78:d8:7b:51:c8:ca:90:51:de:77:71:e8:74:ce:
6b:31:c2:f6:fb:c8:0f:43:9c:55:0e:15:e3:ce:34:d1:92:e5:
5e:94:94:2e:e8:0b:a8:95:c7:d7:b7:59:49:21:f4:58:34:26:
ad:c7:c9:64:18:b6:39:d6:f3:b9:6c:5b:03:d6:50:f4:71:cd:
45:42:c8:42:7c:89:dc:24:14:4f:9c:76:96:1f:34:66:a4:51:
5f:a9:c0:96:70:0e:44:08:ea:e5:77:28:49:4a:a6:50:7e:9d:
76:72:56:be:d9:bf:bd:b0:6a:68:8f:d1:d9:a1:cb:f5:c7:15:
85:07:4a:37:f7:dd:86:24:bd:b0:a4:c8:2f:dc:1d:8a:32:1b:
e9:cb:41:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 11:42:10 2026 by rpki-client