Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/Ha4FUbT-C5cfgzREP_qKmJdZdNU.roa
File: Ha4FUbT-C5cfgzREP_qKmJdZdNU.roa (raw, json)
Hash identifier: OWm/SoXebYfD0ymYVnkD6nJ1M+OinzGR+vHe5dJGhIk=
Subject key identifier: 1D:AE:05:51:B4:FE:0B:97:1F:83:34:44:3F:FA:8A:98:97:59:74:D5
Certificate issuer: /CN=7db10757cfa3917dbfa5b9be68e978653d414368
Certificate serial: 019ECFF2751484C157DCDABF8A46304703F2
Authority key identifier: 7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/Ha4FUbT-C5cfgzREP_qKmJdZdNU.roa
Signing time: Tue 16 Jun 2026 10:20:33 +0000
ROA not before: Tue 16 Jun 2026 10:20:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55201
IP address blocks: 2a0d:b140::/29 maxlen: 48
2a10:bc40::/29 maxlen: 48
2a12:5f40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:f2:75:14:84:c1:57:dc:da:bf:8a:46:30:47:03:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7db10757cfa3917dbfa5b9be68e978653d414368
Validity
Not Before: Jun 16 10:20:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1dae0551b4fe0b971f8334443ffa8a98975974d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:1f:75:97:e1:f3:6e:aa:09:45:eb:93:58:
80:f4:e5:68:75:ee:cd:5e:d9:46:83:b0:0a:6c:38:
59:c4:69:3d:cf:b4:3f:83:e9:d8:e3:b1:73:a3:07:
f6:97:01:41:3a:91:4a:c7:ab:51:fc:6b:23:70:a6:
b7:5c:59:ef:10:c9:1a:aa:bc:24:d1:d1:1e:87:17:
d8:06:df:b4:2c:7d:68:ff:d0:ed:63:58:5e:f7:4d:
3b:3f:64:55:e2:7a:f8:84:5e:3d:cb:4b:64:fc:3e:
87:f3:4f:25:1a:bf:3c:e8:cc:1e:59:75:69:10:c7:
89:20:8e:d2:a5:20:14:95:64:c2:b9:16:41:f7:53:
33:cc:96:9b:bc:88:9a:b4:1d:16:e4:34:81:d5:5f:
42:70:5b:67:b5:ec:e1:2f:1f:7b:24:09:ec:d5:2c:
bd:4d:c8:7d:87:16:93:9f:03:3e:45:6e:01:19:6e:
71:31:a3:a3:af:f3:c9:c1:12:78:16:4a:27:1b:ee:
c8:39:dc:33:5c:43:a7:f8:b0:bc:bb:45:4b:7c:e6:
33:3d:4f:04:d9:87:17:c5:43:54:eb:d6:f6:48:d4:
11:8f:2e:31:f7:5c:56:7e:79:e9:6e:5f:2f:85:bf:
4d:ba:66:57:6b:54:fd:97:49:65:40:08:74:e3:ed:
2c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AE:05:51:B4:FE:0B:97:1F:83:34:44:3F:FA:8A:98:97:59:74:D5
X509v3 Authority Key Identifier:
keyid:7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/Ha4FUbT-C5cfgzREP_qKmJdZdNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b140::/29
2a10:bc40::/29
2a12:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
ad:2c:f1:37:8e:b2:9d:ff:a0:51:48:02:c3:64:59:f9:3c:0a:
d4:7d:05:85:8b:41:a4:0a:18:60:ad:96:3c:86:f7:80:29:53:
e6:87:c7:97:7f:68:1b:68:ce:c6:90:6f:71:35:34:2f:18:42:
2b:0a:b4:f8:b7:d0:7c:2c:69:28:6f:e2:e9:ff:08:5d:0e:20:
88:fb:2c:6d:1d:49:91:35:f7:b8:dd:55:c9:8f:84:9d:d8:98:
0f:8d:1d:12:f8:d3:25:66:59:61:14:a9:2f:a5:8d:a5:a2:90:
8d:dc:1f:8a:72:56:28:92:6a:9c:95:da:76:53:9f:d6:51:68:
4d:e0:18:63:ee:c8:02:bc:a3:96:df:5d:d1:9c:fb:8a:16:86:
59:8c:a1:a5:b4:3f:b2:64:3c:f1:8a:a3:3f:fc:c5:a3:de:4c:
6a:b7:31:12:8d:dd:1b:3a:dc:86:f9:20:63:c9:4f:f7:99:a4:
e3:d7:1a:73:dc:1b:83:f0:86:53:ca:d4:17:8f:03:35:08:31:
5e:ec:0b:88:e7:b5:79:6e:a9:98:55:c7:96:4c:d0:f4:c8:c8:
76:e2:7b:ff:0c:86:e5:12:e2:1a:be:1d:ac:24:6f:ad:ee:e0:
d4:14:ab:58:25:cb:36:eb:3b:33:fa:e9:fc:bb:2d:49:d8:ce:
1a:95:cc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 21:03:19 2026 by rpki-client