Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/7d0P9doBZNnco0Uk-uyE95zYsRU.roa
File: 7d0P9doBZNnco0Uk-uyE95zYsRU.roa (raw, json)
Hash identifier: C0smtXlBUg5wv9v0wIvA4FN2yM+ZFAWopSk3eOTxr4A=
Subject key identifier: ED:DD:0F:F5:DA:01:64:D9:DC:A3:45:24:FA:EC:84:F7:9C:D8:B1:15
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 019EE76136309686A2501B0A7A2CB23E18E3
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/7d0P9doBZNnco0Uk-uyE95zYsRU.roa
Signing time: Sat 20 Jun 2026 23:32:48 +0000
ROA not before: Sat 20 Jun 2026 23:32:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198839
IP address blocks: 2a12:8ac0:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e7:61:36:30:96:86:a2:50:1b:0a:7a:2c:b2:3e:18:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Jun 20 23:32:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eddd0ff5da0164d9dca34524faec84f79cd8b115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:6f:4f:c7:0f:85:2a:22:53:33:21:40:60:
75:c4:7d:f6:e1:36:04:c1:6e:a3:7a:3f:d9:f0:f8:
0a:7f:9c:bd:2a:cf:a8:e1:5c:87:25:5c:1a:d4:07:
cc:ae:1a:c7:b4:56:ea:cc:0f:ab:a1:82:b7:0c:ef:
ff:e0:1c:7f:6b:7e:75:0a:06:ec:79:87:e7:d4:3b:
cc:31:c7:8a:af:2e:67:ee:7e:ca:f4:e3:b6:cc:5a:
a6:1d:4d:91:30:9e:5f:0b:63:9a:4c:9f:d4:2b:55:
a5:47:a3:90:0c:94:1d:ab:68:3b:06:a0:77:2b:17:
df:a4:be:9f:e4:b9:eb:7d:64:f8:29:d1:e6:5d:15:
dc:37:b1:5f:98:df:68:ae:a5:a0:bb:08:37:1f:17:
b8:ad:e9:7d:60:43:d4:c0:d2:d1:38:d3:69:68:1e:
30:a2:2d:b2:7c:4a:d5:30:6c:81:a9:c2:72:cb:85:
6c:39:92:de:55:49:6e:57:cf:b9:16:18:55:fe:17:
0d:26:48:9d:07:7a:70:19:8a:87:3e:0f:64:86:b7:
fb:ff:3a:4d:63:0a:ae:c0:78:58:49:de:cb:1b:89:
46:39:bc:e0:1e:8f:c4:6b:06:72:9e:29:31:fe:20:
ce:eb:63:6b:0f:cd:ef:3a:e6:fb:17:e5:15:37:d4:
e9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DD:0F:F5:DA:01:64:D9:DC:A3:45:24:FA:EC:84:F7:9C:D8:B1:15
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/7d0P9doBZNnco0Uk-uyE95zYsRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8ac0:1000::/40
Signature Algorithm: sha256WithRSAEncryption
1b:2c:cc:c7:ae:c6:c8:ef:2a:4e:8e:37:13:bc:d1:20:8d:83:
ea:05:1b:7a:e1:03:9e:9f:4f:95:80:63:83:42:dd:4b:05:f4:
38:06:41:f7:a8:15:40:83:b2:68:f5:67:db:76:df:30:9b:7a:
36:5c:11:0f:85:64:14:d2:0f:9c:72:0b:ef:03:20:72:46:75:
4b:13:02:c3:b5:2c:04:cb:4f:0e:fa:b6:af:a4:cc:99:24:8a:
bb:71:be:c1:32:6c:9b:c7:e0:e1:86:e3:a7:00:ed:44:55:2d:
26:22:23:1e:45:92:1f:0e:dd:5c:0f:e0:78:6d:da:12:95:c6:
64:63:b8:7c:0a:b6:23:00:78:b6:b8:dd:41:78:10:0f:8f:cf:
47:e4:20:ab:00:a6:98:4f:ef:7f:30:7c:cd:fb:65:b9:0f:8a:
bc:7e:53:2e:1d:70:2e:8c:dc:ad:2b:5a:23:8a:fa:0b:77:7a:
3b:8a:27:c1:aa:da:d5:74:f4:01:c9:8c:df:52:e8:03:72:b6:
1a:bc:44:3b:bd:0c:ad:a3:5e:20:90:c0:bc:71:be:fc:b5:57:
8f:56:df:db:e1:b8:2a:c1:08:f9:23:83:7c:e9:7c:1d:fa:a0:
5b:82:d1:db:3e:28:85:fa:4d:a6:1d:ff:e2:70:bf:77:26:8e:
13:97:28:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:51 2026 by rpki-client