Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/t2eWHO6r_kmQaoKvKqbpMacuacE.roa
File: t2eWHO6r_kmQaoKvKqbpMacuacE.roa (raw, json)
Hash identifier: FvpEwjPcGwIB6Jh0TDr3BNv2jGu+NiTIDWMXLmMwpi0=
Subject key identifier: B7:67:96:1C:EE:AB:FE:49:90:6A:82:AF:2A:A6:E9:31:A7:2E:69:C1
Certificate issuer: /CN=2369cf693efc102c937faca7ba09cccaec574948
Certificate serial: 01A153438F3CCD29A6B35B6A314785FAB8A2
Authority key identifier: 23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/t2eWHO6r_kmQaoKvKqbpMacuacE.roa
Signing time: Mon 19 Oct 2026 08:24:58 +0000
ROA not before: Mon 19 Oct 2026 08:24:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219100
IP address blocks: 2a0d:36c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:43:8f:3c:cd:29:a6:b3:5b:6a:31:47:85:fa:b8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2369cf693efc102c937faca7ba09cccaec574948
Validity
Not Before: Oct 19 08:24:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b767961ceeabfe49906a82af2aa6e931a72e69c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e9:2d:23:a1:f8:f3:e9:9a:64:1b:2b:19:d0:
d3:8d:80:82:af:ee:65:11:40:99:76:e5:a7:dd:70:
49:7e:2d:79:8b:e6:af:c7:d8:0b:04:c7:a4:77:a5:
95:a7:e5:77:5e:3f:70:cc:9d:2f:f4:27:52:39:62:
d7:81:5e:12:68:93:34:51:ac:e2:ae:05:f7:a2:73:
b8:ac:3a:3a:9d:eb:61:98:1c:d2:0e:7c:15:a5:b7:
93:51:35:8b:b8:75:f5:fd:7b:5d:94:a8:d6:4d:15:
ac:fb:b5:4d:df:3d:4a:11:1f:4a:6d:fe:31:d3:92:
27:4c:84:9f:86:cf:c6:aa:c3:cc:61:ab:06:e1:07:
cf:f3:9f:61:e1:38:aa:6b:42:3b:73:8c:be:53:6b:
67:bd:e9:1a:0c:a1:6c:c9:b7:ba:e7:a3:17:95:48:
20:db:ec:10:89:ac:23:67:55:bd:15:54:83:29:c6:
1f:7a:18:fe:c1:6d:6a:b5:e5:4c:2e:db:13:4e:08:
5a:19:5b:ba:0b:60:7a:6a:6e:40:21:5a:7e:e5:e6:
ed:2f:35:8f:c6:21:15:d6:8c:32:98:38:d5:fa:35:
c4:a6:c6:5d:29:e5:12:28:a9:31:11:ba:4a:9e:24:
35:92:01:34:5a:b7:d0:b1:f4:00:d4:10:41:78:58:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:67:96:1C:EE:AB:FE:49:90:6A:82:AF:2A:A6:E9:31:A7:2E:69:C1
X509v3 Authority Key Identifier:
keyid:23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/t2eWHO6r_kmQaoKvKqbpMacuacE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:36c0::/29
Signature Algorithm: sha256WithRSAEncryption
b7:9a:59:ec:e0:8b:3f:53:d6:49:4b:0b:cf:54:b1:e7:6b:54:
df:65:82:08:40:62:2e:e3:51:46:d2:7c:5c:aa:65:47:70:05:
56:b6:7c:7c:a4:60:62:d5:15:95:ad:37:f6:ef:e9:54:08:7a:
49:ce:0d:48:92:74:e7:fe:fa:5a:26:e4:4b:b7:a7:8a:2f:48:
a1:81:9f:92:db:4d:33:19:39:55:ef:8c:6e:80:b0:8c:1c:83:
ee:5c:73:33:70:84:67:87:80:ce:b6:5b:2f:42:63:90:c7:66:
38:52:4e:e1:bb:9c:61:e9:eb:13:7a:56:40:e7:21:e5:cb:cf:
ea:47:7f:41:b3:81:07:b3:48:70:a0:d0:30:99:1d:29:e5:b6:
63:26:e2:b9:57:36:63:63:96:e0:a8:aa:b5:b5:c3:60:3e:44:
cc:f6:6e:ae:86:be:80:39:32:d6:d2:9f:0c:ad:20:c0:5a:51:
f6:b3:ad:b0:77:b8:c0:98:ea:69:3c:53:c2:61:ea:b5:a4:96:
2b:4a:6b:13:25:25:2a:a7:0e:39:ae:ca:22:3c:07:28:1f:a4:
12:5e:98:91:e6:6b:3e:c3:b3:2f:77:23:34:4a:a9:a3:79:91:
92:f0:fb:41:38:99:e8:ae:2e:59:7e:31:87:4b:75:32:5a:dc:
88:ce:ee:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 07:58:28 2026 by rpki-client