Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/egQEbfnW1MXHUAUDIXi9mc2fB-c.roa
File: egQEbfnW1MXHUAUDIXi9mc2fB-c.roa (raw, json)
Hash identifier: 1BkfZIfCGpyU9bVzsVuHecgL4efqavb1+AuIHnc1Rt8=
Subject key identifier: 7A:04:04:6D:F9:D6:D4:C5:C7:50:05:03:21:78:BD:99:CD:9F:07:E7
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 019EE180FFED102A6402A90F931AFAF68560
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/egQEbfnW1MXHUAUDIXi9mc2fB-c.roa
Signing time: Fri 19 Jun 2026 20:09:48 +0000
ROA not before: Fri 19 Jun 2026 20:09:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214326
IP address blocks: 2a12:5844:1190::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:80:ff:ed:10:2a:64:02:a9:0f:93:1a:fa:f6:85:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Jun 19 20:09:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a04046df9d6d4c5c75005032178bd99cd9f07e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:ab:e4:c3:4c:e3:3b:9f:bf:b5:12:fe:f0:
2d:b1:8f:df:2c:ba:ad:89:56:19:de:6b:29:50:2a:
f6:dc:20:b7:34:fa:2e:28:24:d5:6b:dd:aa:39:fe:
8e:f2:c2:d6:60:b3:08:03:78:89:0f:a7:1d:86:fa:
42:c7:97:14:2c:2d:16:fe:e9:1c:0c:39:da:18:a1:
af:c2:fb:f7:98:e6:70:58:02:f4:d9:97:84:2e:45:
87:4c:5a:d5:09:76:7d:99:17:0b:5d:bb:b5:05:17:
e4:02:a2:46:02:22:12:6c:d2:08:ec:3c:eb:de:84:
a8:71:13:a0:95:24:c2:30:ae:25:21:af:3e:a3:d5:
19:e9:70:2e:66:a1:e5:35:11:a7:79:a5:eb:99:3f:
36:4e:60:51:c9:c3:0a:ae:8b:d6:7a:33:1a:b1:95:
cf:d4:92:cb:f8:64:ad:b8:aa:7c:9e:b1:7a:eb:47:
54:ac:62:7f:a3:3a:11:b3:f5:83:49:f2:da:cc:5a:
e8:4e:67:40:45:10:4b:28:68:48:6a:3e:85:cd:ab:
8c:fb:a1:0b:11:4f:1c:b7:56:de:a5:03:60:2e:ce:
3d:96:6a:d2:2d:db:a6:9c:d6:3f:b8:f4:f6:95:36:
e7:11:cb:a9:b0:50:00:18:1d:50:34:f2:97:30:b5:
fb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:04:04:6D:F9:D6:D4:C5:C7:50:05:03:21:78:BD:99:CD:9F:07:E7
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/egQEbfnW1MXHUAUDIXi9mc2fB-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5844:1190::/44
Signature Algorithm: sha256WithRSAEncryption
62:1e:cc:2f:63:10:a2:80:20:f8:07:82:cf:fa:5f:9f:78:3c:
d2:a9:c0:1d:09:ef:f2:ad:77:a2:85:ca:8d:f5:22:16:47:30:
21:c7:f4:77:24:af:21:a6:3c:de:fc:10:f7:c8:04:00:3e:ac:
62:74:d4:46:a0:f2:a6:a7:93:bb:1c:75:65:85:66:3d:b7:28:
6c:50:66:b6:29:32:f3:15:7f:61:90:ad:e5:cd:50:01:db:b5:
2d:39:2f:ea:6e:8b:07:a9:6c:42:c0:18:f5:14:a0:2c:c2:d9:
10:62:e9:dd:b5:1e:ff:6b:32:7b:2b:c3:6f:1f:59:25:73:34:
17:57:50:74:0b:0d:c2:ee:cb:28:2e:ee:00:26:59:58:a0:54:
d7:b1:1c:26:79:be:51:85:30:d5:61:a0:ec:8a:8a:53:e1:cf:
cc:25:6f:1b:a2:30:20:a9:48:6b:e6:46:3c:f3:7f:b2:d1:9b:
7b:e5:41:48:0f:5c:b3:a3:e2:27:ca:91:23:97:1f:e9:97:bd:
cd:58:d6:ea:12:24:a4:d4:ef:9f:e5:6c:9b:4c:81:ac:68:1a:
ec:91:3c:9b:f4:36:da:38:d7:e7:b9:0f:ac:d0:c9:6b:67:9d:
d9:e7:6a:f1:19:a4:27:ae:e2:c1:22:ee:d4:ea:4e:e4:1a:6f:
8d:17:90:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:31:05 2026 by rpki-client