Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ezRETv7s78VjJ3A9nxoHMsX63dU.roa
File: ezRETv7s78VjJ3A9nxoHMsX63dU.roa (raw, json)
Hash identifier: KyjWulT+BxUWgXDbn994zfCOIwhz3+2ZaZbrTcGiag8=
Subject key identifier: 7B:34:44:4E:FE:EC:EF:C5:63:27:70:3D:9F:1A:07:32:C5:FA:DD:D5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A04743A8B97808767648F71F12011D5B1E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ezRETv7s78VjJ3A9nxoHMsX63dU.roa
Signing time: Fri 28 Aug 2026 07:26:51 +0000
ROA not before: Fri 28 Aug 2026 07:26:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214243
IP address blocks: 2a06:de00:7f1::/48 maxlen: 48
2a0e:97c0:471::/48 maxlen: 48
2a0e:97c0:4c0::/44 maxlen: 48
2a0e:97c0:4c1::/48 maxlen: 48
2a0e:97c0:4c2::/48 maxlen: 48
2a0e:97c0:4c3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 07:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:43:a8:b9:78:08:76:76:48:f7:1f:12:01:1d:5b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 28 07:26:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b34444efeecefc56327703d9f1a0732c5faddd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f0:90:06:a2:9f:f8:9a:de:1c:5e:7b:76:0d:
9b:94:c7:9f:83:50:13:7b:28:77:0d:99:a0:f6:b5:
4a:7f:24:6d:a8:13:3d:ec:b7:dc:be:a9:49:8c:cb:
f2:cd:f5:d6:f7:b4:29:8b:89:0b:86:79:4b:1a:87:
5f:64:e6:d9:f7:52:f8:02:b6:4f:2e:6c:64:97:a1:
67:3b:21:4c:fb:69:82:71:59:2b:6e:a4:9b:8b:57:
3a:58:49:ce:6d:3c:46:c6:7d:5f:df:44:2d:4d:2e:
71:bd:68:75:96:87:92:6d:a8:db:b7:a4:9a:41:d4:
1c:26:16:1c:a1:42:af:9f:dd:00:95:0b:25:54:55:
79:15:0c:c4:8f:03:90:e1:e0:c2:f3:37:83:67:0c:
5a:41:96:1f:88:ba:58:83:55:3d:96:05:dd:8c:ee:
5f:03:cc:31:71:15:7f:0b:97:00:2d:34:54:2a:1d:
e9:4c:05:9e:69:c8:96:b4:66:98:5e:df:c6:04:e1:
1b:90:82:1e:b6:26:17:51:68:1e:eb:29:51:13:7e:
26:f7:3d:71:95:9e:6d:5c:91:c7:9f:93:c6:d0:dc:
a6:8e:33:4a:17:ec:eb:28:b9:6d:89:3f:81:00:6b:
34:7f:ae:5f:0b:79:40:8a:53:97:6a:1c:9a:15:51:
8c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:34:44:4E:FE:EC:EF:C5:63:27:70:3D:9F:1A:07:32:C5:FA:DD:D5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ezRETv7s78VjJ3A9nxoHMsX63dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:7f1::/48
2a0e:97c0:471::/48
2a0e:97c0:4c0::/44
Signature Algorithm: sha256WithRSAEncryption
13:10:ad:50:ea:2f:dc:95:34:f6:e6:9e:0f:62:a8:fb:f4:38:
78:fc:f2:bf:13:eb:55:e5:ee:c1:45:61:d4:17:1b:6f:84:e1:
45:2b:cb:5b:11:20:86:1f:20:80:1e:8a:3b:2e:a9:59:6a:a0:
4c:26:c0:6e:3c:48:d4:39:e9:46:b1:a2:70:c1:4b:08:6e:3a:
e4:dd:95:74:c9:7b:6c:72:37:79:58:04:92:42:2b:4f:99:03:
55:e5:d5:2b:ac:ba:d6:fb:5a:88:26:30:9d:54:8b:fd:09:0e:
cc:9c:af:23:5d:93:8b:1a:99:e2:02:36:e9:2c:a1:33:c8:8f:
13:4d:d4:7e:fb:0b:8f:a1:86:d2:57:7c:d7:1c:0d:1f:39:5f:
e7:0b:97:bf:ef:a1:91:ff:10:8a:c1:97:f9:96:89:e5:a6:f1:
86:70:0a:46:d3:b4:03:81:07:23:15:24:64:94:d1:15:28:50:
29:4b:3f:42:b1:36:66:a0:e8:77:f2:7d:2c:f2:c8:46:4e:96:
36:ca:4a:7e:47:52:de:e1:81:3b:a1:4f:31:93:13:e0:c7:c5:
34:a0:55:30:04:dc:68:4d:a1:0e:88:67:1a:55:41:60:bf:24:
c4:32:4b:9c:70:c0:7e:0b:e7:2c:78:bd:99:de:67:eb:63:4c:
c1:30:8c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 11:52:28 2026 by rpki-client