Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/e8f0N2koGxLuVORh62e9yiFONmA.roa
File: e8f0N2koGxLuVORh62e9yiFONmA.roa (raw, json)
Hash identifier: l74UNXKpHqzVGeD5WfqV801+3Uv6HZ+Zal3qCDvFAAY=
Subject key identifier: 7B:C7:F4:37:69:28:1B:12:EE:54:E4:61:EB:67:BD:CA:21:4E:36:60
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 01A13BBC864A1E985A11FB809ED4AE8F9793
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/e8f0N2koGxLuVORh62e9yiFONmA.roa
Signing time: Wed 14 Oct 2026 18:46:13 +0000
ROA not before: Wed 14 Oct 2026 18:46:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219476
IP address blocks: 2a14:1d40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:bc:86:4a:1e:98:5a:11:fb:80:9e:d4:ae:8f:97:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Oct 14 18:46:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bc7f43769281b12ee54e461eb67bdca214e3660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:fd:77:51:d0:37:83:3c:58:d9:25:d3:b0:
39:97:33:b3:70:eb:b5:a1:60:e8:14:ee:8c:c1:76:
2a:b4:7c:e8:83:ef:41:38:78:5f:26:47:37:b8:21:
52:85:e8:33:2b:62:56:25:25:05:e2:e2:b8:73:a5:
3c:ee:dc:32:bc:52:07:e2:7d:03:77:ce:4c:7c:d6:
8e:0f:5a:af:d7:08:38:20:c2:08:16:94:ec:b3:23:
43:c7:cf:5a:b0:36:66:21:9e:63:ef:6a:bd:b3:0a:
93:00:9e:43:4d:63:62:74:84:ad:88:b6:8d:8e:8a:
31:a6:b4:c2:cb:95:76:e6:ef:97:89:76:b8:71:92:
41:b2:36:18:7b:1e:4d:38:5a:fe:e5:bc:ad:61:94:
55:65:30:ef:d7:fa:23:ad:34:f4:29:d8:79:64:c2:
31:6d:e8:d3:21:0b:11:2c:3c:3a:6e:d7:98:ca:da:
b2:1a:45:5e:12:14:66:f5:01:51:dd:16:0d:92:b6:
9b:24:a2:e7:23:52:50:ff:21:d7:22:8a:ca:cb:0d:
1a:59:f7:74:f5:e9:ef:e6:1f:53:53:ed:3e:5a:41:
33:7d:17:72:84:cf:0a:f7:cb:d1:81:e7:a0:93:83:
ad:0c:8c:9e:ec:15:53:a5:49:37:88:bb:96:4b:c0:
33:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C7:F4:37:69:28:1B:12:EE:54:E4:61:EB:67:BD:CA:21:4E:36:60
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/e8f0N2koGxLuVORh62e9yiFONmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
07:7b:ea:0d:77:50:07:95:d5:7c:37:e3:5e:b0:e1:1d:c8:ea:
2a:b8:0e:9a:1f:de:eb:95:6b:02:bf:5e:85:12:1a:8a:54:ee:
53:03:c1:5a:8f:52:84:14:c8:54:82:26:fa:b4:57:d6:94:8a:
36:96:98:17:65:1d:05:ef:dc:48:d0:fa:db:cb:02:8e:df:7a:
9f:13:df:d2:6e:b3:f9:25:c3:02:66:a5:1f:9a:cf:c4:78:4a:
ee:5c:ae:99:70:38:ee:51:09:ce:aa:90:61:31:82:fa:be:eb:
0e:d6:a0:94:cb:0d:aa:98:10:ad:3d:d7:07:c7:84:b6:a8:e1:
da:ce:26:08:b5:ec:9d:dd:eb:df:8b:09:f0:08:87:a4:75:27:
70:54:cb:dc:6b:20:16:58:77:40:2b:a5:21:0d:09:17:0b:61:
b4:4e:3b:70:b7:66:7a:fa:ff:e7:0e:e9:4f:0f:26:8c:26:3e:
17:ec:ad:3c:b0:23:09:dc:19:84:40:62:3c:6c:72:16:6a:50:
f8:d9:ca:f8:fc:97:29:b9:00:8d:1e:27:ee:f7:c9:5a:51:87:
d0:1f:62:84:bf:4b:05:7d:ff:0d:a8:d5:1e:7c:ce:61:4e:4e:
3f:0d:96:e7:4a:89:dc:8e:fe:77:eb:20:83:f7:06:56:b6:c8:
74:e0:9f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:56:51 2026 by rpki-client