Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/6_srr9UDGCrrghI-kzMIH18RQ5s.roa
File: 6_srr9UDGCrrghI-kzMIH18RQ5s.roa (raw, json)
Hash identifier: rgEY62cCaL+uhCiwNn9Vj1LmIYbXJUPb3hsHRDdjamg=
Subject key identifier: EB:FB:2B:AF:D5:03:18:2A:EB:82:12:3E:93:33:08:1F:5F:11:43:9B
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 019FD5F8B5A7A8B77A4FEBCDE8D54EEF6724
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/6_srr9UDGCrrghI-kzMIH18RQ5s.roa
Signing time: Thu 06 Aug 2026 07:27:54 +0000
ROA not before: Thu 06 Aug 2026 07:27:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139057
IP address blocks: 2a0b:1880:15::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d5:f8:b5:a7:a8:b7:7a:4f:eb:cd:e8:d5:4e:ef:67:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Aug 6 07:27:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebfb2bafd503182aeb82123e9333081f5f11439b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:1b:e0:7b:7f:91:88:81:ac:1e:98:4c:4e:
8a:7e:9d:f2:ef:41:56:b2:d1:90:6c:e9:a0:a6:69:
49:05:06:cf:ba:20:d5:89:90:75:fa:4f:b8:93:b0:
a7:1d:7c:23:2a:6f:49:8c:ff:24:64:4e:ec:74:45:
11:dd:14:cd:e0:70:68:80:d0:8c:76:e4:4a:11:a5:
ea:64:51:e5:10:d1:24:17:db:e1:7f:29:72:eb:30:
3d:fd:ad:16:cd:27:3a:bd:70:67:af:b3:b3:0f:b7:
ac:69:4f:e3:eb:69:8d:fe:9d:9c:07:2b:e9:b0:93:
d8:ee:24:f4:8d:04:6a:a6:12:81:cd:8c:2d:f1:40:
77:7f:36:30:27:b2:7d:e2:cf:a7:7b:91:76:6b:f9:
e8:aa:23:f8:a6:3a:72:40:7e:08:a0:0d:6c:9a:1f:
c3:17:87:03:83:2c:c2:40:37:b1:a8:26:62:97:43:
0d:95:e1:bf:aa:78:38:2f:2a:e9:f6:dd:78:c2:05:
9a:0b:22:8f:00:7f:58:2b:13:3e:18:6b:d3:88:20:
eb:fa:f8:80:bb:e9:e0:06:13:3e:79:dc:3d:44:96:
3e:dd:f6:8a:1f:8d:37:fb:70:ef:18:b0:d3:00:52:
ed:1d:93:1a:45:85:0b:23:b9:f5:2a:d2:fc:53:e2:
42:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FB:2B:AF:D5:03:18:2A:EB:82:12:3E:93:33:08:1F:5F:11:43:9B
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/6_srr9UDGCrrghI-kzMIH18RQ5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:1880:15::/48
Signature Algorithm: sha256WithRSAEncryption
b7:40:b3:b4:e8:57:2d:42:f5:26:a5:5e:cf:1a:e9:ee:7a:c0:
f3:df:db:60:78:5b:0c:9e:e6:51:e7:54:2b:f4:27:15:b3:96:
ae:a1:39:66:10:af:e4:95:f3:3b:a3:9c:f6:3d:ed:83:6f:9b:
d3:85:20:8e:d9:66:3e:99:fe:01:02:2a:d1:fe:33:b6:55:e3:
09:62:f8:1c:b2:8d:cc:3c:64:4e:1d:2b:57:69:12:31:41:1b:
76:b5:d3:47:fd:f4:55:81:75:38:f2:c0:c5:63:58:46:b0:6f:
63:30:f3:f2:14:c3:70:de:01:d4:24:1f:0e:e5:39:49:8e:b2:
e1:c9:86:02:44:81:38:72:4b:c3:d2:44:52:6e:d9:61:bb:1a:
fb:e7:44:46:e0:e8:d1:4e:cb:86:e7:ca:40:52:01:cf:79:d4:
00:d3:80:93:f3:d3:34:dc:ed:3a:73:d4:48:54:df:ef:f0:10:
2b:5e:ee:9b:78:ce:27:95:7d:1d:a1:e3:d7:cc:b7:53:c6:ed:
e4:94:5c:f8:61:a5:ed:26:49:fa:d8:07:d2:61:01:6a:e0:af:
d7:0f:7a:a7:b2:af:06:3a:13:2f:9f:73:7e:e6:e2:dc:84:0e:
dc:f7:09:ef:08:3f:0c:4d:f0:c1:19:26:47:58:47:d3:35:0b:
6e:70:d5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:48:59 2026 by rpki-client