Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/sjEyW6AD2Jf48TivnuWbHN3pmpM.roa
File: sjEyW6AD2Jf48TivnuWbHN3pmpM.roa (raw, json)
Hash identifier: 7twsJMkUmHbT5ZR1Ntzc98zq9nXpj2vWiMkvKAXsBxY=
Subject key identifier: B2:31:32:5B:A0:03:D8:97:F8:F1:38:AF:9E:E5:9B:1C:DD:E9:9A:93
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 019F23683D237378A5AB55541CEFC905F07C
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/sjEyW6AD2Jf48TivnuWbHN3pmpM.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219407
IP address blocks: 2a02:eb00:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3d:23:73:78:a5:ab:55:54:1c:ef:c9:05:f0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b231325ba003d897f8f138af9ee59b1cdde99a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:26:84:f7:eb:69:68:1b:5f:c0:c2:59:fe:4d:
38:07:20:fd:a6:31:9b:ac:39:02:f0:78:a5:fa:21:
2e:7b:6b:a1:a5:f6:60:ac:be:fc:f0:2d:d1:61:55:
40:af:eb:cf:f6:1c:71:87:17:ed:33:df:65:dd:e1:
84:ca:aa:e4:af:be:8c:7e:fd:70:60:e2:2f:d2:4a:
33:00:21:4a:1d:b1:ac:9b:c1:14:68:bc:d8:1f:3b:
da:ab:49:66:99:28:ad:99:47:b5:02:60:fb:d6:43:
66:b7:dd:b9:ec:9a:3b:e5:32:00:68:2d:cd:5d:9d:
19:41:d9:2f:0a:68:6e:ed:6c:25:45:89:eb:f1:e8:
a3:b2:0a:fb:91:a7:75:72:5d:47:60:02:8d:76:7c:
fc:e4:1c:6c:f6:34:51:69:40:03:6b:1d:93:27:80:
d1:2b:ad:0b:f2:32:93:71:60:d4:2a:90:5a:01:e5:
9d:90:ef:84:05:d5:03:8e:29:1d:a4:4e:0c:9b:23:
5e:29:f3:2c:d0:aa:64:7d:13:3e:14:8a:31:11:74:
d7:0e:ef:e1:30:8f:5b:22:52:b3:3c:48:42:82:00:
17:46:50:f8:fa:38:92:15:82:6e:4a:b0:24:34:18:
a4:95:db:20:37:4a:6c:c2:f6:4f:94:c8:42:02:ba:
9e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:31:32:5B:A0:03:D8:97:F8:F1:38:AF:9E:E5:9B:1C:DD:E9:9A:93
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/sjEyW6AD2Jf48TivnuWbHN3pmpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:eb00:3::/48
Signature Algorithm: sha256WithRSAEncryption
7e:13:78:cc:df:6c:98:d6:08:16:62:63:5e:07:33:2d:20:03:
d7:0c:94:97:8a:fb:92:d8:c9:8e:48:7b:0e:ad:51:d7:43:37:
c7:28:99:57:ea:8d:5b:90:d9:d2:40:41:68:42:f7:ba:bd:e6:
da:94:fc:c6:3d:3b:5d:d0:4c:b2:41:c9:65:db:41:87:a4:77:
2b:17:21:eb:58:51:ad:c1:4d:72:e2:d9:5f:11:08:d6:88:69:
ff:2b:ff:ca:9a:90:d0:14:4a:46:e7:04:38:64:a9:83:fd:35:
bd:d3:d7:55:02:29:a8:8f:54:18:4c:f9:73:8b:f4:bd:18:57:
d6:5e:54:9f:66:6e:24:ef:8d:f9:40:c9:a8:c6:9b:3e:0c:d1:
10:c9:5a:cc:ad:f6:bd:87:61:1e:75:97:6e:1a:83:35:00:e6:
8e:00:75:29:09:41:4c:38:bc:bf:da:72:e5:40:3a:22:97:95:
2c:8e:af:e3:dc:8e:08:76:01:d2:e9:70:4e:b0:2b:6d:59:aa:
0a:35:4c:01:c0:00:11:fc:34:d7:84:40:e7:ee:54:da:21:95:
c0:ea:bf:09:5f:5b:34:25:56:8e:f8:9c:96:b1:6a:90:e4:ea:
c5:4a:eb:24:e8:b2:1d:40:4c:a3:63:9e:17:5d:c9:7d:1b:6b:
fb:92:4a:20
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaD0jc3ilq1VUHO/JBfB8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjNjODdlNzA3NDg1M2M5MTgzZjE2N2EyYzI1YjAyZTM0
MTc0ODAwHhcNMjYwNzAyMTUxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjMxMzI1YmEwMDNkODk3ZjhmMTM4YWY5ZWU1OWIxY2RkZTk5YTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CaE9+tpaBtfwMJZ/k04ByD9pjGb
rDkC8Hil+iEue2uhpfZgrL788C3RYVVAr+vP9hxxhxftM99l3eGEyqrkr76Mfv1w
YOIv0kozACFKHbGsm8EUaLzYHzvaq0lmmSitmUe1AmD71kNmt9257Jo75TIAaC3N
XZ0ZQdkvCmhu7WwlRYnr8eijsgr7kad1cl1HYAKNdnz85Bxs9jRRaUADax2TJ4DR
K60L8jKTcWDUKpBaAeWdkO+EBdUDjikdpE4MmyNeKfMs0KpkfRM+FIoxEXTXDu/h
MI9bIlKzPEhCggAXRlD4+jiSFYJuSrAkNBikldsgN0pswvZPlMhCArqeDwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLIxMlugA9iX+PE4r57lmxzd6ZqTMB8GA1UdIwQY
MBaAFJWzyH5wdIU8kYPxZ6LCWwLjQXSAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt
Mzk5ZmM5NjkzYjIyLzEvc2pFeVc2QUQySmY0OFRpdm51V2JITjNwbXBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy
LzEvbGJQSWZuQjBoVHlSZ19Gbm9zSmJBdU5CZElBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgLrAAAD
MA0GCSqGSIb3DQEBCwUAA4IBAQB+E3jM32yY1ggWYmNeBzMtIAPXDJSXivuS2MmO
SHsOrVHXQzfHKJlX6o1bkNnSQEFoQve6vebalPzGPTtd0EyyQcll20GHpHcrFyHr
WFGtwU1y4tlfEQjWiGn/K//KmpDQFEpG5wQ4ZKmD/TW909dVAimoj1QYTPlzi/S9
GFfWXlSfZm4k7435QMmoxps+DNEQyVrMrfa9h2EedZduGoM1AOaOAHUpCUFMOLy/
2nLlQDoil5Usjq/j3I4IdgHS6XBOsCttWaoKNUwBwAAR/DTXhEDn7lTaIZXA6r8J
X1s0JVaO+JyWsWqQ5OrFSusk6LIdQEyjY54XXcl9G2v7kkog
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:05:52 2026 by rpki-client