Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/ObEFLA71GS6PBSPXvLN1tQxOPjg.roa
File: ObEFLA71GS6PBSPXvLN1tQxOPjg.roa (raw, json)
Hash identifier: CQurRH2QtNh+H5vZ26uy12WpU20lxprNhR0FVldn9Ok=
Subject key identifier: 39:B1:05:2C:0E:F5:19:2E:8F:05:23:D7:BC:B3:75:B5:0C:4E:3E:38
Certificate issuer: /CN=7db10757cfa3917dbfa5b9be68e978653d414368
Certificate serial: 019ECFF36052CAAAB7D6703DA1DFD0E70C4F
Authority key identifier: 7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/ObEFLA71GS6PBSPXvLN1tQxOPjg.roa
Signing time: Tue 16 Jun 2026 10:21:34 +0000
ROA not before: Tue 16 Jun 2026 10:21:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400342
IP address blocks: 2a0d:b140::/29 maxlen: 48
2a10:bc40::/29 maxlen: 48
2a12:5f40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:f3:60:52:ca:aa:b7:d6:70:3d:a1:df:d0:e7:0c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7db10757cfa3917dbfa5b9be68e978653d414368
Validity
Not Before: Jun 16 10:21:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39b1052c0ef5192e8f0523d7bcb375b50c4e3e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e5:b0:83:0c:c1:b7:3b:88:83:b9:0f:c5:04:
a8:ba:1e:fe:43:df:4b:08:26:c9:59:ef:0e:5d:81:
a9:7c:04:c7:b5:ec:0f:54:3f:74:0f:64:b6:6f:27:
30:47:14:6a:ec:30:94:55:ae:12:03:9e:b7:85:43:
da:72:da:3c:2e:c9:83:93:11:0a:12:68:48:60:06:
8b:02:d0:2d:5a:49:bf:5e:4e:90:71:13:7d:5c:ee:
6a:9c:b8:c9:74:6c:b6:92:53:f7:9a:a5:86:d8:47:
1f:8d:b7:53:0e:93:62:9e:93:8a:4a:30:40:de:5a:
c7:52:01:29:44:c8:c1:0c:52:7b:0e:2d:65:e8:8f:
45:89:f3:93:30:7c:d4:37:2d:fa:6c:1c:51:9e:06:
6f:ff:be:c5:a6:08:80:b2:2d:74:b2:c1:95:d1:46:
18:42:66:c7:a2:5c:1f:a4:19:78:03:c1:2f:73:2c:
05:4f:3c:af:83:ac:f0:28:de:66:69:27:98:b9:01:
c9:cf:f3:2c:c6:a9:bb:ed:9c:54:25:a2:04:23:90:
fd:d7:c2:30:82:8f:de:0a:c7:42:b3:40:bf:69:ef:
e1:ff:82:a5:79:c2:cd:98:2b:d1:89:46:60:29:77:
69:16:83:c5:ff:5f:62:b6:04:4c:c4:d2:f0:7d:bf:
01:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B1:05:2C:0E:F5:19:2E:8F:05:23:D7:BC:B3:75:B5:0C:4E:3E:38
X509v3 Authority Key Identifier:
keyid:7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/ObEFLA71GS6PBSPXvLN1tQxOPjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b140::/29
2a10:bc40::/29
2a12:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
bc:20:75:86:d7:f7:bf:ca:3a:4b:72:ff:c4:3d:80:ce:ff:db:
8d:36:ce:4e:a4:06:e4:55:d0:31:7d:a6:44:6e:6a:1a:0d:23:
69:39:0b:68:bc:15:91:40:4a:13:09:18:18:72:74:46:94:48:
7f:41:35:63:b0:aa:b1:27:17:a2:f3:1f:20:a8:04:d6:da:ba:
7e:93:c7:ad:de:0e:43:51:37:9d:37:15:36:cb:a5:d0:76:9f:
cf:5d:e0:20:1c:5b:10:dd:d0:dd:45:48:8e:da:44:00:96:23:
a8:6d:cd:64:10:56:c9:4c:bf:c5:a2:1d:30:75:c8:a7:19:bd:
96:1b:90:76:20:97:d8:15:57:2e:c4:b0:4a:1a:b5:9b:64:9d:
04:75:23:0f:9a:de:20:8b:db:7d:9e:1c:50:83:d8:91:d2:2c:
71:e0:bf:66:6b:84:45:50:eb:9c:47:b9:53:8e:54:23:48:07:
6f:98:dd:ec:0c:b2:5e:7d:72:93:d2:06:ed:5e:b7:7d:2a:f7:
d5:20:4a:63:51:4d:f7:3b:c1:78:c2:a0:28:4b:4d:ae:c6:d2:
70:98:49:fc:97:99:29:78:b6:69:99:c5:9c:e8:f0:52:56:73:
41:87:37:43:55:45:c2:c5:1d:e5:83:ba:6b:19:69:2d:3b:73:
9e:1d:c6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 21:03:52 2026 by rpki-client