Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/ru7hTHED5bacQX5NiNWyNtNkE6E.roa
File: ru7hTHED5bacQX5NiNWyNtNkE6E.roa (raw, json)
Hash identifier: Kxyrq99WXIYtPAR/nabYKrZwHSHfCnBmfTWCGs/Kt3A=
Subject key identifier: AE:EE:E1:4C:71:03:E5:B6:9C:41:7E:4D:88:D5:B2:36:D3:64:13:A1
Certificate issuer: /CN=2ed9b0ee387c9afd15c7b7784005e86cc97e8818
Certificate serial: 019F22DEF15BB5C3BAA8700EB263A0951B8B
Authority key identifier: 2E:D9:B0:EE:38:7C:9A:FD:15:C7:B7:78:40:05:E8:6C:C9:7E:88:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/ru7hTHED5bacQX5NiNWyNtNkE6E.roa
Signing time: Thu 02 Jul 2026 12:47:43 +0000
ROA not before: Thu 02 Jul 2026 12:47:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216246
IP address blocks: 2a01:e5c0::/36 maxlen: 36
2a01:e5c0:1000::/36 maxlen: 36
2a01:e5c0:8000::/48 maxlen: 48
2a01:e5c0:8003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:de:f1:5b:b5:c3:ba:a8:70:0e:b2:63:a0:95:1b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed9b0ee387c9afd15c7b7784005e86cc97e8818
Validity
Not Before: Jul 2 12:47:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aeeee14c7103e5b69c417e4d88d5b236d36413a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e3:0a:e2:7e:9e:d8:7f:cb:24:e5:c2:10:7f:
66:1c:2c:91:9e:6b:bb:c5:26:9b:69:10:09:33:10:
24:df:e9:fd:18:22:ce:2b:49:48:99:05:66:87:01:
bc:18:ad:8a:25:c3:03:80:4d:fd:60:90:32:75:10:
31:34:61:64:70:b9:4d:ce:bb:4c:e9:3e:53:94:64:
19:b1:51:d0:43:2a:e4:32:5d:78:d3:8d:f9:7c:5f:
c0:a3:63:3f:b6:f2:e5:1f:64:30:65:fc:32:b2:c4:
15:e4:eb:05:42:c4:12:f3:5b:d2:8a:07:56:a0:00:
92:72:96:eb:e9:ad:be:c7:de:46:9b:ed:42:61:7f:
34:1e:43:d9:8f:70:07:a1:c0:96:68:82:cf:38:7e:
03:6c:2b:46:ce:10:ca:bf:06:b9:6e:d1:25:a9:3a:
2f:ee:64:2e:21:a2:1e:59:6d:f6:c8:fb:dd:33:50:
00:ec:2d:16:5a:06:59:e2:2d:1f:09:1f:3c:83:47:
e0:df:b7:64:d2:8a:ac:06:e0:9a:78:e7:db:3b:1d:
85:83:da:88:03:8c:a0:76:47:1c:25:ae:57:b7:cc:
cf:1a:52:a3:dc:7a:87:d5:df:1c:7c:22:4f:7b:ed:
14:b4:c7:a2:dc:cc:04:2b:83:63:ac:0f:82:cc:d0:
6e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EE:E1:4C:71:03:E5:B6:9C:41:7E:4D:88:D5:B2:36:D3:64:13:A1
X509v3 Authority Key Identifier:
keyid:2E:D9:B0:EE:38:7C:9A:FD:15:C7:B7:78:40:05:E8:6C:C9:7E:88:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/ru7hTHED5bacQX5NiNWyNtNkE6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e5c0::/35
2a01:e5c0:8000::/48
2a01:e5c0:8003::/48
Signature Algorithm: sha256WithRSAEncryption
71:c2:50:32:e4:b0:32:46:b3:1d:14:9c:64:0c:d5:8d:27:3a:
c3:d3:84:44:93:54:67:32:ce:1f:d6:35:82:28:f1:45:48:a5:
c2:6e:1f:e2:13:3f:90:3f:56:d1:e3:7d:9e:f0:b6:34:4b:ec:
99:43:3c:b5:5f:1b:57:6e:22:8f:c2:a0:ec:a8:89:f7:45:e5:
48:a9:82:12:ad:88:5d:52:28:8f:ff:af:2e:ac:eb:4c:65:80:
b3:39:bc:e8:7a:4f:1f:6a:2b:fa:4b:62:4a:45:82:7e:43:83:
a8:ff:4d:b1:08:73:bb:fa:05:36:76:6c:f8:13:7a:b1:a3:ab:
73:84:21:83:7f:50:56:74:9f:f5:cc:c7:b0:2d:f9:5a:49:f6:
fa:6e:dc:bc:ff:84:b2:35:18:85:05:51:94:40:f9:e2:78:43:
28:51:56:6f:b3:5f:12:41:95:29:ec:6a:72:13:f7:d9:fb:a6:
b2:42:26:dc:a2:02:3c:b9:06:b9:b2:fe:0a:78:c1:a2:d4:ad:
bb:30:ba:7e:41:a7:d9:fe:ea:d5:e5:6a:c8:bb:c6:94:f2:97:
c6:af:84:4f:dc:26:75:45:f4:04:b7:91:30:e1:f8:12:ae:7b:
af:f7:7b:8a:6d:0b:cb:aa:49:a6:f3:5f:7e:01:06:1c:ce:12:
81:1e:07:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:45:32 2026 by rpki-client