Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/0KUFbz0khMkDd6i1hVC0Gk78b8Q.roa
File: 0KUFbz0khMkDd6i1hVC0Gk78b8Q.roa (raw, json)
Hash identifier: e4QKXhdU4Y0/6TdXU9kKaC0Et/ZZz02AZrZMzhkrhqs=
Subject key identifier: D0:A5:05:6F:3D:24:84:C9:03:77:A8:B5:85:50:B4:1A:4E:FC:6F:C4
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 019CB011DF16D5630FEAD24FA4050445362C
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/0KUFbz0khMkDd6i1hVC0Gk78b8Q.roa
Signing time: Mon 02 Mar 2026 19:41:27 +0000
ROA not before: Mon 02 Mar 2026 19:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214337
IP address blocks: 2a0d:2406:3a00::/44 maxlen: 44
2a0d:2406:3c00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:11:df:16:d5:63:0f:ea:d2:4f:a4:05:04:45:36:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Mar 2 19:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0a5056f3d2484c90377a8b58550b41a4efc6fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8b:34:32:21:a8:74:b1:10:ec:df:e5:03:d6:
61:51:b5:d4:67:23:23:a1:ac:89:f8:9a:b9:41:f1:
a5:c9:2d:65:00:2c:5c:69:d9:f6:f6:54:d9:e0:f1:
38:db:10:db:55:2a:18:36:c7:e4:b8:8e:b0:25:af:
97:84:36:6c:26:03:4a:92:ea:07:27:d7:f5:67:9e:
45:7f:55:a0:4e:00:73:0f:dc:98:d9:82:3a:86:1f:
d2:bc:be:c2:91:81:ab:01:7d:5f:4a:90:c0:b0:ea:
45:12:c8:87:31:be:75:3f:a0:ed:94:3c:47:89:49:
62:e1:9b:2b:02:13:76:41:82:fe:52:b1:5d:e3:16:
f2:d9:8f:4b:f2:47:02:cf:d1:7f:f6:8c:7e:60:5d:
33:8b:57:d2:f2:bd:9c:37:1c:d8:0a:09:43:a8:8c:
09:d4:1d:ee:51:bb:da:5e:b8:a3:30:ee:ce:56:e0:
be:70:83:5e:08:a7:ca:da:cf:9e:9e:90:76:86:20:
7c:2b:10:55:f5:bd:9e:fa:56:a4:e4:01:05:ba:7b:
dc:d4:1c:5f:cf:4b:56:11:b0:14:b0:d7:ba:cd:b4:
2e:db:5c:90:18:c9:63:ba:2a:d8:10:64:d6:bc:a4:
c4:90:19:f3:ca:17:b1:de:8e:cd:d4:28:f8:ac:74:
bb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A5:05:6F:3D:24:84:C9:03:77:A8:B5:85:50:B4:1A:4E:FC:6F:C4
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/0KUFbz0khMkDd6i1hVC0Gk78b8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2406:3a00::/44
2a0d:2406:3c00::/48
Signature Algorithm: sha256WithRSAEncryption
07:ff:12:f1:ed:42:f5:60:f6:cd:09:07:c2:6b:06:f7:e2:b6:
0a:21:cc:65:46:d2:52:0f:5f:69:76:65:11:49:d6:6a:f4:31:
5e:33:27:4f:7d:4c:b6:4d:22:5c:75:a3:db:8d:be:a2:8a:4d:
1a:26:da:25:14:21:0e:51:a6:aa:9e:4c:36:b7:e6:cb:9d:08:
84:09:4b:16:c2:e7:eb:b4:a1:be:65:aa:13:f0:89:f2:93:95:
96:c5:df:af:d5:b0:8a:fd:ab:77:0f:b2:67:ed:47:bd:9e:47:
26:48:51:ba:f5:b8:8c:2f:4e:bf:ad:04:f4:d9:45:18:8d:59:
6b:c7:ce:d7:69:35:8b:18:9a:02:0f:b4:7e:8a:99:a0:85:51:
c9:63:c7:43:62:61:0d:90:8b:bc:21:fa:e5:b2:60:a8:db:7b:
d3:9e:93:6d:3f:e4:8b:4a:36:c5:b3:cb:93:47:5e:7f:21:ac:
ae:6e:05:e1:a0:78:d8:1f:a9:c0:78:5a:9d:ed:bf:d2:c2:8b:
47:e9:9a:12:ed:3b:19:2b:5d:31:4f:1e:cb:4b:be:81:8b:29:
03:08:da:23:9d:9f:9d:2f:72:1a:69:7f:fa:12:a8:79:ca:ec:
93:ce:16:3f:53:12:21:3c:cc:1a:72:a5:75:1d:c7:b3:61:74:
67:fc:85:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 09:34:44 2026 by rpki-client