Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/67JDNfAtP9yEkJbfUjQ3vr0JanQ.roa
File: 67JDNfAtP9yEkJbfUjQ3vr0JanQ.roa (raw, json)
Hash identifier: TMkj0G/KqGW0hoDAPTbK60VfZv79MVnxbAmNA4wAIxY=
Subject key identifier: EB:B2:43:35:F0:2D:3F:DC:84:90:96:DF:52:34:37:BE:BD:09:6A:74
Certificate issuer: /CN=7db10757cfa3917dbfa5b9be68e978653d414368
Certificate serial: 019ECFF2761A70E57E5AE057B2B49484ABA1
Authority key identifier: 7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/67JDNfAtP9yEkJbfUjQ3vr0JanQ.roa
Signing time: Tue 16 Jun 2026 10:20:34 +0000
ROA not before: Tue 16 Jun 2026 10:20:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202736
IP address blocks: 2a0d:b140::/29 maxlen: 48
2a10:bc40::/29 maxlen: 48
2a12:5f40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:f2:76:1a:70:e5:7e:5a:e0:57:b2:b4:94:84:ab:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7db10757cfa3917dbfa5b9be68e978653d414368
Validity
Not Before: Jun 16 10:20:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebb24335f02d3fdc849096df523437bebd096a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:7c:0f:91:c6:29:44:aa:f7:0f:d8:18:63:
b8:30:b8:81:b6:6b:c8:ef:17:c0:f9:2a:49:04:33:
62:3e:3f:2f:61:72:21:41:27:01:3e:62:5a:bb:16:
48:9c:f1:17:1b:70:ae:4d:09:69:8b:e1:2a:75:19:
8c:94:74:5f:b7:b0:2c:b6:92:ce:4d:2c:47:2f:49:
95:be:c4:57:b8:b4:c8:b9:0f:06:12:e9:78:83:ed:
64:c8:14:31:65:c0:23:d4:ef:22:81:7a:37:b4:85:
a6:77:ed:1d:21:7a:8e:c2:04:44:bd:4a:60:65:09:
ff:d3:71:9f:66:4a:29:c3:9d:fe:92:7a:94:2c:ea:
57:1d:21:f5:06:10:2a:ad:85:5c:01:9b:08:e1:4b:
b7:c5:3c:2c:f8:f9:58:35:2b:fa:ee:1e:76:f7:bf:
e4:86:87:f4:b5:68:d6:50:55:f6:f0:fa:87:76:d5:
5e:38:ff:ee:61:3b:e5:b6:d8:55:40:b9:21:d9:64:
f5:93:79:1e:cf:4e:b5:18:bc:b9:6b:cf:90:9a:d5:
f5:34:c1:12:be:4c:94:67:5f:00:b1:8f:da:c3:d8:
f2:8a:17:37:1d:d3:02:3b:7c:05:ec:3e:7a:4e:f8:
71:db:ad:f1:8f:74:d8:be:98:de:1f:cc:6e:8a:84:
b3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B2:43:35:F0:2D:3F:DC:84:90:96:DF:52:34:37:BE:BD:09:6A:74
X509v3 Authority Key Identifier:
keyid:7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/67JDNfAtP9yEkJbfUjQ3vr0JanQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b140::/29
2a10:bc40::/29
2a12:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
30:05:7d:75:6c:22:32:d7:14:14:cb:f2:c6:69:14:07:f1:48:
a4:7c:33:a9:35:92:aa:ea:37:7c:45:87:fe:29:c8:05:e4:bb:
e5:ac:27:f7:95:64:36:9d:82:4e:8b:23:00:17:e2:42:28:a6:
07:11:11:14:ae:4f:2a:87:3b:5b:ba:07:23:4a:7f:1b:18:48:
5c:a1:99:c7:96:41:7e:7f:91:4f:1b:19:54:8b:fa:ef:b4:76:
2c:42:3c:4e:d7:94:2e:22:98:8c:8b:1f:b4:39:bf:2c:ec:35:
74:a7:e2:14:fa:f8:56:04:60:df:e7:43:5d:2a:19:86:f4:0d:
36:c7:09:ef:f9:a4:ce:ae:f3:bd:34:95:9a:e9:58:e5:fe:38:
26:5b:30:01:45:07:b5:20:7e:f7:4a:bc:ba:87:a3:c4:cb:69:
1c:ca:5c:ae:32:1a:ab:3b:ab:47:77:04:24:c3:8c:91:48:58:
f0:fe:5f:57:e3:13:e4:f9:71:13:8a:6b:28:6c:e0:fb:7b:14:
02:53:9e:90:e0:e6:d7:68:73:04:f4:1e:88:8a:e2:44:78:19:
e2:f6:68:77:fd:ca:f8:79:cc:77:5f:07:e6:9e:82:c2:25:a0:
3c:68:ca:c6:49:ee:32:37:69:02:8b:67:44:07:5a:d8:60:f8:
9f:87:95:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 21:03:19 2026 by rpki-client