Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/7kHLECUqrXn4aB91R-Hg428ln2E.roa
File: 7kHLECUqrXn4aB91R-Hg428ln2E.roa (raw, json)
Hash identifier: 1LiZ6M2U3EB8HhCU+11reP2nGrGrGe1YF958uCdgvAE=
Subject key identifier: EE:41:CB:10:25:2A:AD:79:F8:68:1F:75:47:E1:E0:E3:6F:25:9F:61
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A0232ED9449CB7A06A2D0B092BAA53DDE3
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/7kHLECUqrXn4aB91R-Hg428ln2E.roa
Signing time: Fri 21 Aug 2026 07:17:47 +0000
ROA not before: Fri 21 Aug 2026 07:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40115
IP address blocks: 2a0e:4005:ff00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:2e:d9:44:9c:b7:a0:6a:2d:0b:09:2b:aa:53:dd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Aug 21 07:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee41cb10252aad79f8681f7547e1e0e36f259f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ff:b4:2e:01:de:16:34:88:cc:a4:44:50:a1:
d2:ae:84:51:7a:76:b8:8e:c6:35:4e:c1:b4:0f:de:
78:2b:d7:12:37:dc:bf:d5:49:9c:c9:26:c2:de:d7:
b5:6e:98:90:99:ba:2f:0e:61:93:ee:d3:c2:55:d9:
18:31:6b:cf:e0:c2:df:2b:b1:f7:e4:b4:b2:54:44:
cf:bb:13:94:15:6e:c0:78:45:42:b1:3b:49:92:f6:
9e:29:7c:f4:d2:55:08:db:db:e0:b1:2e:7d:45:84:
c0:39:0b:e6:49:10:eb:f8:09:90:60:9a:ce:ff:6e:
f2:6d:c6:6f:58:c4:5e:86:28:b0:89:39:3e:13:42:
e9:5c:e9:63:ac:06:9c:e3:1d:05:f0:0a:f0:d7:c4:
7f:63:03:58:0b:49:d4:bf:3e:84:65:96:81:c6:09:
ca:94:1a:8a:ee:18:88:af:ef:bc:eb:94:74:ec:3e:
4a:6e:84:ff:6d:2a:95:8b:33:fb:d1:3f:3f:a9:00:
50:09:89:08:7e:92:97:7b:0e:42:45:84:20:94:40:
c0:45:b0:35:4c:a1:1c:7a:00:67:cc:7f:25:c3:a5:
7e:b6:49:34:82:4b:0c:73:4f:d1:a7:2a:b9:e8:e4:
f4:3e:6d:27:9b:be:da:6e:e9:a4:19:b4:fb:e6:36:
cd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:41:CB:10:25:2A:AD:79:F8:68:1F:75:47:E1:E0:E3:6F:25:9F:61
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/7kHLECUqrXn4aB91R-Hg428ln2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4005:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
99:c8:d5:79:ad:f7:c2:2e:9f:e0:20:c7:f0:60:2e:98:d4:e7:
7d:74:c6:6b:ba:a8:98:ce:0c:1c:2b:64:0f:fb:b2:35:b2:55:
e4:93:b0:55:3a:e4:24:52:ba:f5:71:78:85:be:8e:c8:c1:77:
9a:30:89:3c:d5:7a:88:11:14:67:51:a7:2a:bc:f0:fc:a6:27:
fa:2a:9d:29:3b:4d:c3:f2:13:0b:b0:07:8a:57:64:8c:1d:ba:
9d:db:a1:d5:13:76:4d:3d:ee:50:34:16:07:77:43:00:c1:dc:
d9:56:ef:fd:91:c9:0d:36:ef:e3:52:21:92:1a:1e:53:ba:ac:
d2:7e:8d:71:e1:d7:6b:ae:be:8d:95:8b:6c:ed:83:78:7b:5d:
be:9c:92:ed:b6:a5:cb:ea:ea:77:fe:5a:a1:da:e8:da:8d:d9:
48:1b:ac:3b:a4:bc:76:73:2e:91:60:33:1d:f1:03:b7:9d:29:
9e:36:b3:f1:cc:3a:21:70:6e:0b:2b:30:fb:09:73:18:ff:4f:
19:f9:c9:62:da:93:83:26:28:4c:58:7b:48:cb:74:a8:f6:58:
03:7d:42:5a:69:01:84:0f:31:11:6f:01:0e:65:87:10:4b:3a:
10:99:aa:89:10:dc:3a:9d:19:1e:36:f9:1b:2f:a6:d0:66:58:
25:c6:0e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:20 2026 by rpki-client