Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/68EZrauB0qv4UqFcrYI1HWiTafA.roa
File: 68EZrauB0qv4UqFcrYI1HWiTafA.roa (raw, json)
Hash identifier: bosTecBYxP1S8RTUkYY+Q2j0KSr6GAn+ipiGx0hncVw=
Subject key identifier: EB:C1:19:AD:AB:81:D2:AB:F8:52:A1:5C:AD:82:35:1D:68:93:69:F0
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 019F12FC0DB8C08DF240D59EDE0D2CCF2402
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/68EZrauB0qv4UqFcrYI1HWiTafA.roa
Signing time: Mon 29 Jun 2026 10:45:36 +0000
ROA not before: Mon 29 Jun 2026 10:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203446
IP address blocks: 2a07:cec0:420::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:fc:0d:b8:c0:8d:f2:40:d5:9e:de:0d:2c:cf:24:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: Jun 29 10:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebc119adab81d2abf852a15cad82351d689369f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3c:56:4f:61:2a:f7:9d:4f:d5:3e:2c:aa:6f:
5f:0f:92:8f:75:24:7f:11:d0:a6:2c:73:c4:19:e8:
b4:c6:d1:ad:98:b7:77:36:71:fa:ee:2b:79:42:5f:
18:b5:76:e4:3f:e2:26:b9:1f:30:3e:d1:82:ca:ef:
94:27:fe:02:02:e5:b6:1b:25:23:2c:a0:d2:7d:22:
ae:8f:90:50:90:85:06:5d:84:9f:da:a0:a6:7d:34:
4e:02:61:3f:90:7a:7b:7a:c0:c8:39:18:82:6a:e3:
72:95:14:5b:e0:b4:3a:c6:38:01:fd:41:59:ac:21:
75:f8:03:1d:f1:ca:73:9e:15:9d:63:03:26:b3:a5:
91:d0:23:d3:56:88:76:e0:4e:a3:44:ba:9b:4b:fd:
e3:ad:1e:01:a6:9b:98:e7:59:41:dc:44:ba:46:f7:
7f:e5:03:64:a1:05:1e:fb:b4:b0:b3:e9:60:96:7f:
95:f7:b4:44:bb:66:98:b6:c7:25:7a:f0:b1:97:0d:
e9:8e:e7:ed:3d:21:f9:b2:f9:70:8d:59:21:24:bd:
79:7f:50:91:28:e6:07:cd:c6:23:9a:e8:1a:7a:78:
1e:0b:f2:97:86:fd:70:e3:ba:c1:1d:e6:05:33:60:
07:8d:84:98:6b:f3:3d:67:28:fb:af:3a:e5:7e:9e:
6a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C1:19:AD:AB:81:D2:AB:F8:52:A1:5C:AD:82:35:1D:68:93:69:F0
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/68EZrauB0qv4UqFcrYI1HWiTafA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:cec0:420::/48
Signature Algorithm: sha256WithRSAEncryption
6e:aa:d0:d3:e2:35:e8:73:87:a7:db:92:66:e8:85:d2:05:cf:
40:9c:c2:dc:8b:e5:45:fd:f4:84:88:17:66:64:2f:4a:ce:e8:
7f:e4:29:bc:e4:02:5b:c2:c1:e3:2e:bf:c3:d5:2b:5b:5c:67:
11:cc:2c:0f:cd:b4:59:58:90:75:9d:e7:d5:bc:94:bd:80:80:
58:30:24:ca:07:5d:19:18:e2:19:2c:26:17:cc:b8:86:f6:80:
54:05:47:41:a7:66:46:4b:f1:50:69:81:ca:f7:7d:bb:6b:6f:
ea:7c:4b:6a:77:83:f5:49:a6:c3:66:a3:2d:12:a2:8b:b2:f1:
0b:02:e0:c2:b1:8b:53:ac:07:9c:eb:be:90:91:ff:5b:36:b7:
94:ab:91:f5:ec:09:c8:b2:09:4e:21:69:fe:fa:57:c4:70:6f:
a7:6f:2f:2f:94:3c:03:28:11:eb:ce:ad:d4:c5:b4:c9:5e:e1:
3e:87:73:4c:49:4e:de:c1:30:f3:39:0b:86:14:29:6a:b3:93:
bd:7f:4b:cf:c3:ef:68:ec:d8:48:0c:0d:a5:af:23:db:83:b6:
a0:b1:86:03:00:14:9e:91:bd:66:f4:59:61:c7:2e:ee:ac:72:
57:51:6b:eb:5f:c2:14:5f:96:94:93:00:99:52:34:d0:8d:36:
e5:9e:a4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:16 2026 by rpki-client