Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/2EMUjYcNeEo7zLY54UxOsE_hV0k.roa
File: 2EMUjYcNeEo7zLY54UxOsE_hV0k.roa (raw, json)
Hash identifier: 3YB7/NOG2YbDJCV6DGgVAX2sWqNsGinwnduZ7utVY70=
Subject key identifier: D8:43:14:8D:87:0D:78:4A:3B:CC:B6:39:E1:4C:4E:B0:4F:E1:57:49
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019FCF0149C4E2D338FA882B3661509A59BA
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/2EMUjYcNeEo7zLY54UxOsE_hV0k.roa
Signing time: Tue 04 Aug 2026 22:59:55 +0000
ROA not before: Tue 04 Aug 2026 22:59:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42375
IP address blocks: 2a0a:cd40::/29 maxlen: 29
2a11:59c0::/29 maxlen: 29
2a11:5ac0::/29 maxlen: 29
2a11:70c0::/29 maxlen: 29
2a11:8340::/29 maxlen: 29
2a11:8640::/29 maxlen: 29
2a11:9c40::/29 maxlen: 29
2a11:a8c0::/29 maxlen: 29
2a11:d7c0::/29 maxlen: 29
2a11:f540::/29 maxlen: 29
2a12:4c0::/29 maxlen: 29
2a12:1f00::/29 maxlen: 29
2a12:4200::/29 maxlen: 29
2a12:4600::/29 maxlen: 29
2a12:6800::/29 maxlen: 29
2a12:9800::/29 maxlen: 29
2a12:be80::/29 maxlen: 29
2a12:db80::/29 maxlen: 29
2a12:e980::/29 maxlen: 29
2a12:f880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cf:01:49:c4:e2:d3:38:fa:88:2b:36:61:50:9a:59:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Aug 4 22:59:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d843148d870d784a3bccb639e14c4eb04fe15749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:25:8c:af:40:db:7e:38:f4:5e:f1:c8:46:
d8:55:93:4c:e1:8a:a2:1f:16:42:8a:6c:f7:98:61:
6e:4b:39:7a:d5:85:91:05:c2:a7:f4:31:f1:af:46:
c4:39:9e:39:43:33:12:29:00:f9:f0:48:20:56:e6:
88:09:b5:f2:c8:de:f0:7a:17:0f:5e:96:01:e5:10:
c0:92:9e:ec:b8:bf:71:07:ac:a7:2f:e5:6c:8a:57:
66:5c:4c:e6:b9:e3:5c:67:0a:8f:6b:2d:3a:14:3b:
a5:14:11:e2:af:e3:4c:e3:f7:a6:59:f3:94:e1:a0:
d2:82:5b:6f:df:26:cc:06:ff:67:ff:b9:ce:a4:fa:
44:4e:b6:d2:f6:31:dd:36:63:ab:16:29:64:c8:19:
10:43:e5:15:09:4e:fa:06:76:82:c5:e5:d1:b7:4d:
42:1f:63:e8:9e:d9:dc:97:5a:10:ac:7f:78:d0:c3:
0f:ee:e0:bc:77:a1:b0:79:fe:a6:1a:d3:78:bb:c8:
a7:74:e6:00:57:69:e6:e5:d7:95:64:de:74:3a:c3:
1b:19:a8:e2:ed:c2:20:aa:3e:aa:bb:33:4c:95:76:
b6:cd:c4:60:65:e1:94:a7:5c:75:b2:6a:c3:bc:7f:
02:53:f3:da:1e:fd:15:6b:81:f4:7a:f7:29:b8:b6:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:43:14:8D:87:0D:78:4A:3B:CC:B6:39:E1:4C:4E:B0:4F:E1:57:49
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/2EMUjYcNeEo7zLY54UxOsE_hV0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:cd40::/29
2a11:59c0::/29
2a11:5ac0::/29
2a11:70c0::/29
2a11:8340::/29
2a11:8640::/29
2a11:9c40::/29
2a11:a8c0::/29
2a11:d7c0::/29
2a11:f540::/29
2a12:4c0::/29
2a12:1f00::/29
2a12:4200::/29
2a12:4600::/29
2a12:6800::/29
2a12:9800::/29
2a12:be80::/29
2a12:db80::/29
2a12:e980::/29
2a12:f880::/29
Signature Algorithm: sha256WithRSAEncryption
98:11:4c:cb:40:72:8d:fa:32:cc:43:8d:db:98:54:fb:aa:bd:
13:c8:40:49:e8:3b:65:73:8d:1c:bc:b4:00:1b:bc:1d:8a:15:
37:3b:5a:d7:35:76:45:99:80:29:0f:95:19:6b:e9:a8:e1:26:
72:16:8d:3e:d6:58:b5:b1:1e:3b:c9:0c:3c:17:1c:0d:bf:62:
0c:bd:cb:9f:22:86:01:0c:58:87:44:67:19:fc:49:68:12:ba:
72:b3:2f:f0:14:0f:31:2d:8e:30:f1:2b:fb:d6:4c:68:14:4d:
0d:27:72:04:ad:2a:5e:e6:bf:f3:37:87:e3:5f:0f:46:9f:71:
e6:d6:c0:c9:19:03:1f:b1:6e:9e:c4:45:09:e6:34:e4:ba:c4:
3e:60:ec:f9:a3:5d:19:67:37:52:09:27:d6:71:7b:62:9d:66:
69:5a:55:50:d9:34:4f:d3:08:2e:b2:3b:27:82:e7:ef:d8:15:
45:59:f3:1c:70:bf:3f:12:4b:3b:22:18:98:31:b1:69:be:3e:
51:31:d9:cd:f4:9e:95:91:0a:56:da:53:6b:bb:b3:ca:d3:f2:
b3:54:52:af:87:16:5b:69:8f:cc:66:c2:32:b4:e9:84:51:ed:
78:09:ed:20:63:76:dc:1b:e1:d8:f2:99:10:1d:95:98:a2:7d:
b1:7d:d5:4c
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAZ/PAUnE4tM4+ogrNmFQmlm6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjYwODA0MjI1OTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODQzMTQ4ZDg3MGQ3ODRhM2JjY2I2MzllMTRjNGViMDRmZTE1NzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOkljK9A23449F7xyEbYVZNM4Yqi
HxZCimz3mGFuSzl61YWRBcKn9DHxr0bEOZ45QzMSKQD58EggVuaICbXyyN7wehcP
XpYB5RDAkp7suL9xB6ynL+VsildmXEzmueNcZwqPay06FDulFBHir+NM4/emWfOU
4aDSgltv3ybMBv9n/7nOpPpETrbS9jHdNmOrFilkyBkQQ+UVCU76BnaCxeXRt01C
H2Pontncl1oQrH940MMP7uC8d6Gwef6mGtN4u8indOYAV2nm5deVZN50OsMbGaji
7cIgqj6quzNMlXa2zcRgZeGUp1x1smrDvH8CU/PaHv0Va4H0evcpuLZ1bQIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFNhDFI2HDXhKO8y2OeFMTrBP4VdJMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvMkVNVWpZY05lRW83ekxZNTRVeE9zRV9oVjBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBkwQCAAIwgYwDBQMq
Cs1AAwUDKhFZwAMFAyoRWsADBQMqEXDAAwUDKhGDQAMFAyoRhkADBQMqEZxAAwUD
KhGowAMFAyoR18ADBQMqEfVAAwUDKhIEwAMFAyoSHwADBQMqEkIAAwUDKhJGAAMF
AyoSaAADBQMqEpgAAwUDKhK+gAMFAyoS24ADBQMqEumAAwUDKhL4gDANBgkqhkiG
9w0BAQsFAAOCAQEAmBFMy0ByjfoyzEON25hU+6q9E8hASeg7ZXONHLy0ABu8HYoV
Nzta1zV2RZmAKQ+VGWvpqOEmchaNPtZYtbEeO8kMPBccDb9iDL3LnyKGAQxYh0Rn
GfxJaBK6crMv8BQPMS2OMPEr+9ZMaBRNDSdyBK0qXua/8zeH418PRp9x5tbAyRkD
H7FunsRFCeY05LrEPmDs+aNdGWc3Ugkn1nF7Yp1maVpVUNk0T9MILrI7J4Ln79gV
RVnzHHC/PxJLOyIYmDGxab4+UTHZzfSelZEKVtpTa7uzytPys1RSr4cWW2mPzGbC
MrTphFHteAntIGN23Bvh2PKZEB2VmKJ9sX3VTA==
-----END CERTIFICATE-----
Generated at Wed Aug 5 13:24:57 2026 by rpki-client