Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/RXLzzU-CZoe7FT-5ytVOMXT2TaA.roa
File: RXLzzU-CZoe7FT-5ytVOMXT2TaA.roa (raw, json)
Hash identifier: l50dR1yK9CtW9dYyhOFpofR2LyAsaKtZoB6P6sbCuzg=
Subject key identifier: 45:72:F3:CD:4F:82:66:87:BB:15:3F:B9:CA:D5:4E:31:74:F6:4D:A0
Certificate issuer: /CN=79cb91394b790781d3a8773a855e5a9a3af20810
Certificate serial: 019EFAB916861CA9C0E4B8AC910B62BD98E6
Authority key identifier: 79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/RXLzzU-CZoe7FT-5ytVOMXT2TaA.roa
Signing time: Wed 24 Jun 2026 17:41:34 +0000
ROA not before: Wed 24 Jun 2026 17:41:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 998
IP address blocks: 2a14:d281::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:b9:16:86:1c:a9:c0:e4:b8:ac:91:0b:62:bd:98:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79cb91394b790781d3a8773a855e5a9a3af20810
Validity
Not Before: Jun 24 17:41:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4572f3cd4f826687bb153fb9cad54e3174f64da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:14:a6:40:8c:f7:45:4f:b5:6d:37:a1:5f:
f2:57:56:48:f7:79:f3:69:91:d8:1c:48:a4:a7:45:
2b:03:a7:d3:54:d9:42:a0:40:d1:04:ed:cb:6f:56:
1b:24:36:a0:90:c8:56:fe:06:8c:34:17:56:45:c7:
b5:b9:e1:61:4b:78:72:c3:2b:42:c6:47:a1:f5:2f:
83:99:92:e2:64:f8:3d:01:3d:ab:cf:a3:ca:29:b3:
a5:fb:ef:04:86:1c:6b:2b:61:c0:6c:9a:4e:7a:28:
89:11:3f:13:4d:33:e3:53:ca:13:fe:ab:d0:ee:f2:
e2:dc:b2:08:f7:d1:c8:72:e5:13:9b:e5:a2:4d:79:
66:a0:31:55:10:7c:74:2c:cf:8f:6d:53:11:a1:9a:
ee:bb:86:d9:e4:c7:c7:23:41:3d:03:65:08:92:f0:
a1:6d:e9:55:70:0c:de:33:24:d2:07:6d:b4:1f:b6:
01:c5:f5:59:2f:40:f9:70:3b:d8:21:99:10:61:93:
01:1c:54:3b:2d:11:0e:38:89:8e:08:c9:62:12:8c:
ee:4d:74:e9:ee:81:67:a6:56:f2:5e:79:87:dd:10:
fc:b6:e1:3f:23:b8:98:88:df:bf:a5:4b:6b:ea:87:
75:9a:26:71:51:ba:70:03:c6:5e:c4:51:5b:51:1b:
4b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:72:F3:CD:4F:82:66:87:BB:15:3F:B9:CA:D5:4E:31:74:F6:4D:A0
X509v3 Authority Key Identifier:
keyid:79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/RXLzzU-CZoe7FT-5ytVOMXT2TaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:d281::/32
Signature Algorithm: sha256WithRSAEncryption
33:5e:c8:67:e7:35:db:54:ae:82:f2:53:3b:f8:de:d3:b7:97:
1d:8d:fe:7f:3c:77:65:1d:69:b0:dc:6b:10:4f:f6:22:89:2f:
7f:43:47:02:81:f0:ce:20:04:58:7c:d0:56:11:25:56:4f:63:
9d:03:8e:ce:69:09:0f:84:2c:02:b0:1c:4d:cd:1c:c6:a8:fd:
c7:90:53:a6:09:38:78:ad:03:32:ac:98:a9:cc:a0:02:e7:b3:
d0:8b:c1:b3:1b:44:45:c3:fb:aa:10:b9:70:0a:11:5c:d7:d3:
60:2a:c9:2f:03:98:c7:49:ae:f9:c6:bd:83:b1:d9:64:cb:a6:
ba:b2:f9:6e:a1:ae:87:ad:e2:99:37:dc:d3:c1:a9:da:00:7c:
2d:3b:94:bf:5e:8e:1c:df:0d:48:14:d3:ce:a6:92:69:f2:71:
1f:fb:1f:74:e2:e6:01:9c:16:b0:57:f3:3f:2d:31:7b:7f:02:
e7:38:0c:30:9c:bb:0b:d2:7e:a0:d1:66:6f:32:92:70:1e:e0:
b2:b3:a3:d7:10:a4:03:67:6e:d2:7f:07:fe:6e:de:ca:f1:bd:
f5:5b:00:d3:f8:c2:c0:5c:39:7d:a1:50:49:de:66:37:bc:d3:
55:04:1f:e9:11:21:03:8d:f3:ad:40:78:a8:41:8d:dc:c6:f0:
00:d8:27:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 07:25:40 2026 by rpki-client