Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/4mAC2e2naxP6ju3b8JY5KHGq5NQ.roa
File: 4mAC2e2naxP6ju3b8JY5KHGq5NQ.roa (raw, json)
Hash identifier: EtytVm/6AHxWfObsQVWGolI13NzE3vnrzO+hEwitye4=
Subject key identifier: E2:60:02:D9:ED:A7:6B:13:FA:8E:ED:DB:F0:96:39:28:71:AA:E4:D4
Certificate issuer: /CN=7db10757cfa3917dbfa5b9be68e978653d414368
Certificate serial: 019ECFF36089B3446EA1D6632207F410C3EA
Authority key identifier: 7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/4mAC2e2naxP6ju3b8JY5KHGq5NQ.roa
Signing time: Tue 16 Jun 2026 10:21:34 +0000
ROA not before: Tue 16 Jun 2026 10:21:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401163
IP address blocks: 2a0d:b140::/29 maxlen: 48
2a10:bc40::/29 maxlen: 48
2a12:5f40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:f3:60:89:b3:44:6e:a1:d6:63:22:07:f4:10:c3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7db10757cfa3917dbfa5b9be68e978653d414368
Validity
Not Before: Jun 16 10:21:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e26002d9eda76b13fa8eeddbf096392871aae4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:64:ce:1c:32:34:78:57:a8:21:5a:e8:c6:
fb:b7:08:ed:45:a3:1a:82:d7:39:27:88:03:22:74:
b3:b2:d5:a0:b5:fe:89:99:5c:bc:79:aa:de:30:ef:
75:ce:19:9c:66:67:03:9f:ce:09:11:23:e3:f7:32:
c9:4d:73:83:6a:71:49:25:ff:5d:6f:7f:d1:5d:33:
de:0e:ee:27:ab:81:64:8b:c5:bf:35:3e:1c:39:14:
0c:25:02:63:53:18:a0:f4:14:0f:6b:ab:0a:31:6a:
d2:bb:2d:e6:ce:25:a1:eb:54:ea:5d:bb:c2:64:75:
b6:a1:30:2a:e1:99:a8:52:58:df:e1:91:44:f4:6c:
4b:d2:07:09:ce:f2:9e:ab:43:96:18:a8:69:55:83:
f8:2b:bd:f6:3a:39:1d:9d:4b:71:b8:f6:37:1f:92:
05:63:83:f9:0c:b9:38:f7:9f:6e:db:98:5c:93:72:
b7:33:36:06:f1:78:55:82:29:66:c0:27:68:fd:bd:
71:a6:17:94:ef:ac:a8:c6:b0:27:65:d0:3c:6b:07:
6f:1b:1b:e7:3e:10:af:97:83:fe:2a:ec:59:c3:f2:
1b:5e:5c:cd:49:e2:f0:3c:30:38:a8:a6:3e:05:b5:
17:38:b4:62:74:84:4e:fd:a0:70:0d:25:fe:33:e8:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:60:02:D9:ED:A7:6B:13:FA:8E:ED:DB:F0:96:39:28:71:AA:E4:D4
X509v3 Authority Key Identifier:
keyid:7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/4mAC2e2naxP6ju3b8JY5KHGq5NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b140::/29
2a10:bc40::/29
2a12:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
4b:4d:1b:e0:8f:af:48:01:c1:b2:5f:f2:8a:47:ba:79:f9:32:
ed:eb:08:b7:9c:59:c4:dd:40:9d:dc:16:36:fe:b7:38:d9:4e:
41:bc:3e:62:49:8f:c4:fc:ec:98:9d:ee:9e:a2:0d:71:91:41:
dd:cc:63:f6:94:c6:0b:2b:f1:f9:da:d1:86:2a:45:7f:a5:96:
31:b3:b7:1e:93:79:b7:86:76:0a:59:1f:a7:28:0c:64:aa:59:
2c:8b:46:a4:9f:26:db:44:cb:22:c0:e2:b7:60:28:39:49:21:
b1:94:e3:bd:46:cb:6e:ba:87:3e:07:b2:27:ae:6e:94:61:f4:
60:fa:66:c4:42:19:60:8c:b2:8a:4a:f0:25:ee:9c:ca:af:75:
38:a2:13:78:74:66:c8:0e:cd:d3:56:d3:47:14:90:92:ef:c7:
a1:b4:64:0c:c1:fb:3a:43:ce:6f:f6:7f:f4:07:7b:ef:f1:6b:
25:06:df:46:5a:ef:ca:ff:52:49:04:58:2b:83:91:ba:bd:c0:
ce:79:d7:fa:b2:08:e7:2d:14:1d:15:8b:85:6e:54:9f:4a:a7:
93:ab:40:3a:85:1f:ac:4e:4c:62:1a:df:e2:e7:41:9f:78:16:
3a:41:09:d0:ab:ff:22:cd:ae:52:07:91:d0:06:74:3b:06:90:
10:8f:1b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 21:04:16 2026 by rpki-client