Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/R0lbPN66JhHTAlizwtgpkO4cz3Y.roa
File: R0lbPN66JhHTAlizwtgpkO4cz3Y.roa (raw, json)
Hash identifier: X9vNqzFtl+nRCTrfZFlpEmLshxNhNE7U0YtwgkXsL6o=
Subject key identifier: 47:49:5B:3C:DE:BA:26:11:D3:02:58:B3:C2:D8:29:90:EE:1C:CF:76
Certificate issuer: /CN=7db10757cfa3917dbfa5b9be68e978653d414368
Certificate serial: 019ECFF18AEF6C8602D02F0A3E5CFA28A968
Authority key identifier: 7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/R0lbPN66JhHTAlizwtgpkO4cz3Y.roa
Signing time: Tue 16 Jun 2026 10:19:33 +0000
ROA not before: Tue 16 Jun 2026 10:19:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213507
IP address blocks: 2a0d:b140::/29 maxlen: 48
2a10:bc40::/29 maxlen: 48
2a12:5f40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:f1:8a:ef:6c:86:02:d0:2f:0a:3e:5c:fa:28:a9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7db10757cfa3917dbfa5b9be68e978653d414368
Validity
Not Before: Jun 16 10:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47495b3cdeba2611d30258b3c2d82990ee1ccf76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:4d:ec:f8:ef:37:44:a9:f1:57:87:fb:48:
1f:73:83:8a:57:b7:49:7f:d4:0b:00:95:ee:bd:49:
0a:44:3c:35:08:ac:b2:2e:44:f6:bb:d1:65:52:e0:
49:de:64:11:ce:0d:a4:79:0f:8c:0d:e3:fe:3c:90:
04:a5:54:a1:34:63:a1:8f:9d:34:df:e0:66:53:a9:
02:59:65:bb:95:a6:1a:65:f8:5c:e0:6e:48:4d:77:
ea:e5:42:c7:c0:46:06:b4:dd:a9:a1:1d:28:3f:89:
7d:aa:93:7f:8d:f5:76:d2:2b:cd:a3:c6:a1:4d:01:
db:95:a4:a1:19:aa:3d:e6:93:cb:85:b0:62:77:95:
d2:40:10:e5:f1:da:eb:37:d5:6d:b7:db:d5:77:25:
af:b7:a1:64:ea:81:4a:05:dc:d7:43:bc:2b:a5:75:
4f:11:4e:25:59:61:5a:72:05:82:15:5d:5e:82:d9:
c3:d4:93:f2:ae:3d:6e:3f:45:a0:dc:b6:a1:d5:79:
8b:90:19:10:ce:07:aa:63:4b:e9:ea:a4:92:0f:8c:
1d:e5:d4:44:56:78:8c:2b:07:51:6a:f6:f1:eb:47:
e7:5d:76:75:95:08:82:02:6e:dc:5c:6f:0c:74:16:
e0:78:02:02:f2:54:40:97:47:97:d0:ff:e9:d3:3b:
51:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:49:5B:3C:DE:BA:26:11:D3:02:58:B3:C2:D8:29:90:EE:1C:CF:76
X509v3 Authority Key Identifier:
keyid:7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/R0lbPN66JhHTAlizwtgpkO4cz3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b140::/29
2a10:bc40::/29
2a12:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
7c:c0:66:68:51:24:69:2f:1b:ac:9e:3e:75:19:4b:0b:b4:4f:
74:4d:d0:3a:1c:cb:41:f5:22:e2:d1:e1:64:c2:b3:05:d0:d6:
17:bf:f2:e6:2d:ac:5b:68:8f:7f:c0:49:e9:c1:6e:a0:89:e9:
6d:25:3c:53:a0:48:02:f3:0b:dd:1b:e6:22:ea:9c:39:f4:35:
06:ee:15:7d:29:d5:49:8f:3c:06:9b:40:4b:2e:db:ae:44:0b:
b4:02:7d:6f:a7:e0:3a:94:25:84:32:c0:ae:6e:25:7e:d5:15:
2d:52:58:d8:a7:f1:68:66:ee:87:0f:7f:23:1e:a4:52:dd:eb:
f1:8e:c3:cf:68:75:94:3f:20:0e:98:39:b6:43:a9:0e:5e:e6:
be:f3:24:3a:dd:76:c7:99:ae:ae:86:f1:b7:26:e4:4d:6e:b5:
80:23:63:1c:0d:1d:51:64:a8:b1:7e:11:21:97:a5:d8:09:36:
92:a1:4f:8f:a9:89:bb:be:57:06:12:ba:c2:4c:37:57:75:79:
b9:a0:87:19:ab:15:43:b2:81:bd:63:35:12:2e:b9:a2:07:a5:
55:4e:ab:ab:e2:be:95:39:9a:2c:bf:7f:3e:f4:f7:81:b0:9d:
a0:2a:c9:b8:49:6c:4a:23:51:29:f8:c9:3e:9d:b8:27:4e:c4:
b9:24:ab:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 21:04:16 2026 by rpki-client