Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/11GxtSy7oVessoMzmqoa6-GVaFM.roa
File: 11GxtSy7oVessoMzmqoa6-GVaFM.roa (raw, json)
Hash identifier: dEcJU2H7eMFkWZ5hiqB+aM7WjgMaOQg3rLiI2kSrzMA=
Subject key identifier: D7:51:B1:B5:2C:BB:A1:57:AC:B2:83:33:9A:AA:1A:EB:E1:95:68:53
Certificate issuer: /CN=7db10757cfa3917dbfa5b9be68e978653d414368
Certificate serial: 019ECFF18A7DF8F746B60581A6AF85D28DF7
Authority key identifier: 7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/11GxtSy7oVessoMzmqoa6-GVaFM.roa
Signing time: Tue 16 Jun 2026 10:19:33 +0000
ROA not before: Tue 16 Jun 2026 10:19:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204936
IP address blocks: 2a0d:b140::/29 maxlen: 48
2a10:bc40::/29 maxlen: 48
2a12:5f40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:f1:8a:7d:f8:f7:46:b6:05:81:a6:af:85:d2:8d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7db10757cfa3917dbfa5b9be68e978653d414368
Validity
Not Before: Jun 16 10:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d751b1b52cbba157acb283339aaa1aebe1956853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f4:e7:b8:24:1c:b5:25:8c:30:5a:68:5b:91:
8f:89:f9:a6:a9:50:56:b3:2c:31:b6:40:ab:5d:d2:
13:be:52:e5:6a:9c:39:2f:4b:c0:98:bc:cc:8f:dd:
76:f0:ca:65:e4:7e:0c:88:11:05:f9:62:b3:c7:dc:
bd:5b:ee:58:95:3b:7c:f2:0f:48:69:14:94:0c:a0:
0e:46:11:da:b0:e0:3a:d6:f6:0e:9c:6f:50:29:c4:
41:6d:38:17:3e:20:5d:60:c5:6d:d6:42:aa:02:6f:
34:ca:ee:a1:25:d2:52:1c:0e:b0:29:91:df:d3:5d:
0c:1c:ee:2d:74:79:40:69:d9:16:9d:78:c3:c4:b8:
22:93:18:17:4d:63:66:87:ab:dd:7a:6d:f5:63:b0:
53:c0:ae:cf:7e:43:a0:3c:3e:3a:56:5e:3e:72:0e:
94:43:b6:16:e6:db:2d:b3:1a:e6:23:7a:54:9d:74:
a4:24:34:1c:2c:1c:31:24:e9:1b:45:ed:9b:3f:2b:
9b:82:fc:16:ac:c3:39:49:d4:24:dd:80:4d:5e:10:
9c:8f:63:cb:85:5a:79:cd:df:32:33:97:f9:24:17:
77:2d:3b:f7:d6:74:a8:ba:da:b2:bc:8c:1d:83:7a:
dd:7f:b5:bd:b6:67:eb:f3:a8:ee:08:6a:f0:53:5d:
d5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:51:B1:B5:2C:BB:A1:57:AC:B2:83:33:9A:AA:1A:EB:E1:95:68:53
X509v3 Authority Key Identifier:
keyid:7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/11GxtSy7oVessoMzmqoa6-GVaFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b140::/29
2a10:bc40::/29
2a12:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
7e:e1:83:df:a8:6d:f9:60:42:de:c0:02:be:b3:7c:a1:63:3d:
e5:a6:96:49:ef:a4:e9:95:9b:e0:4a:cc:18:e1:82:b9:30:b1:
08:fe:d7:a1:0c:25:43:b8:66:dc:82:4b:16:b4:2e:51:b6:be:
1d:80:a0:82:bf:f7:25:96:28:a1:84:e9:25:5c:b0:3e:e2:97:
6a:de:5e:9b:01:af:de:72:79:22:0d:5e:0d:8c:12:4b:fa:4f:
fe:ff:40:e5:46:39:c4:83:6a:94:e7:5e:fb:b0:83:3b:4a:6e:
11:2a:9a:5f:2f:79:d3:86:6e:e5:94:d0:ba:8b:9d:a2:3a:7d:
ae:69:a0:8d:d8:7e:a9:4e:c7:90:c3:fd:77:53:0c:b0:f5:63:
3e:85:b7:b4:77:54:81:ce:7c:6f:92:6a:5a:47:02:84:b3:e4:
00:ed:91:43:27:2e:a1:71:d3:f5:90:46:fc:2d:bf:05:02:44:
c3:b9:b6:c7:b1:14:fa:bd:bd:af:44:e6:e2:70:fd:c9:40:62:
01:94:51:60:a3:dc:b2:6d:5c:cb:88:cf:df:58:91:cf:2d:3d:
83:e7:cf:39:df:ad:ae:c0:7d:c9:f5:78:15:25:11:ca:0b:3d:
8d:17:d5:fb:27:2a:64:5d:e4:be:8b:b6:7a:8d:93:13:6a:01:
7c:9e:06:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 21:03:52 2026 by rpki-client