Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/feyMESOqetwCZUF8IdNtcfhPC_Y.roa
File: feyMESOqetwCZUF8IdNtcfhPC_Y.roa (raw, json)
Hash identifier: ITviOUeatSgCHfCKmDsBy65xvO18rWdC6Rd+LxZIz+Y=
Subject key identifier: 7D:EC:8C:11:23:AA:7A:DC:02:65:41:7C:21:D3:6D:71:F8:4F:0B:F6
Certificate issuer: /CN=58ff89023b87c0bf8479b9ff4725258613e4f0b5
Certificate serial: 019E64021275AC7E9D7541C6444BC4F1E23D
Authority key identifier: 58:FF:89:02:3B:87:C0:BF:84:79:B9:FF:47:25:25:86:13:E4:F0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WP-JAjuHwL-Eebn_RyUlhhPk8LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/feyMESOqetwCZUF8IdNtcfhPC_Y.roa
Signing time: Tue 26 May 2026 11:18:37 +0000
ROA not before: Tue 26 May 2026 11:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49581
IP address blocks: 2a12:b200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WP-JAjuHwL-Eebn_RyUlhhPk8LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:02:12:75:ac:7e:9d:75:41:c6:44:4b:c4:f1:e2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ff89023b87c0bf8479b9ff4725258613e4f0b5
Validity
Not Before: May 26 11:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7dec8c1123aa7adc0265417c21d36d71f84f0bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:53:a4:50:ff:7b:10:67:f6:49:00:d2:05:
21:d1:4d:25:1f:f3:72:1a:2e:d6:b4:89:3e:a0:97:
19:d9:f1:ee:a2:26:28:64:fc:12:da:b3:17:b7:41:
17:0f:65:42:00:df:c0:a7:8f:35:4c:b4:c1:43:a2:
fb:02:e3:d0:7c:8e:21:43:27:07:87:eb:e7:03:e9:
f1:9d:b4:4a:84:f1:12:6b:34:96:99:48:da:fa:01:
01:87:01:3f:6a:92:13:13:1e:bc:2f:85:e0:27:e5:
5c:48:ce:0e:aa:53:e6:18:6f:a8:46:6b:fa:be:f7:
7b:fc:5f:0e:e8:59:99:24:47:1f:5a:83:a7:01:7d:
c2:41:33:80:0a:07:ad:81:ed:b7:43:f1:9d:c6:3f:
0a:cf:53:e2:1b:22:0e:6b:b3:75:94:15:6c:aa:58:
46:3d:4b:78:5d:6a:4f:47:0e:0e:b4:f4:55:ce:69:
49:75:c1:eb:78:6c:43:70:e8:f8:3b:0d:eb:f7:af:
62:6f:4c:a9:c3:f6:63:66:27:e7:5a:bb:be:e6:b2:
e0:33:01:a1:67:5b:c7:2b:dc:ff:e8:17:67:e1:3b:
03:a3:20:5c:c0:0a:51:b0:6b:14:23:0d:84:aa:b4:
5c:66:41:53:a8:10:b3:43:e2:4c:31:6a:11:38:bb:
31:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EC:8C:11:23:AA:7A:DC:02:65:41:7C:21:D3:6D:71:F8:4F:0B:F6
X509v3 Authority Key Identifier:
keyid:58:FF:89:02:3B:87:C0:BF:84:79:B9:FF:47:25:25:86:13:E4:F0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP-JAjuHwL-Eebn_RyUlhhPk8LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/feyMESOqetwCZUF8IdNtcfhPC_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:b200::/29
Signature Algorithm: sha256WithRSAEncryption
71:e6:d9:f4:3f:ce:67:df:b3:db:5f:19:c4:a9:2f:3f:06:91:
b9:78:a7:4d:f7:e6:3b:54:45:76:f4:0a:e4:41:4f:a4:72:93:
5b:a4:11:af:04:11:97:a8:09:8b:57:4d:98:d2:a9:92:3e:af:
04:11:98:79:aa:a3:98:70:69:b6:01:bd:b7:34:85:b4:5e:f6:
97:51:a4:eb:f3:f5:8e:59:f0:7f:ac:39:d6:32:45:b5:6a:22:
7b:29:d8:bc:f5:b1:1b:a3:b7:9c:dd:39:b2:aa:9f:d7:e6:1c:
30:fb:2a:6d:f6:20:df:23:0c:1d:2b:4f:86:c0:b1:67:f6:73:
0d:0d:bc:2b:4a:98:f0:68:23:55:99:49:ba:cf:09:cd:02:4a:
4f:68:5b:1b:5e:6e:c6:a3:d6:08:24:74:23:79:b0:fa:3d:b9:
2c:65:0c:6f:16:be:61:66:16:20:72:43:ab:a2:ba:a8:9e:10:
84:36:ee:35:0a:b0:32:b1:c7:ff:41:ca:f9:10:46:a2:1d:12:
b6:53:5e:8f:63:e5:a1:59:02:e9:0f:01:a0:28:94:17:81:cc:
a4:1d:b4:7e:82:ba:e2:82:4d:b2:a3:ff:59:4b:e1:4a:04:98:
ce:5c:04:3e:67:50:6b:b1:92:77:d3:b3:ed:07:e5:c6:b4:3a:
d5:b9:90:2a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ5kAhJ1rH6ddUHGREvE8eI9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZmY4OTAyM2I4N2MwYmY4NDc5YjlmZjQ3MjUyNTg2MTNl
NGYwYjUwHhcNMjYwNTI2MTExODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGVjOGMxMTIzYWE3YWRjMDI2NTQxN2MyMWQzNmQ3MWY4NGYwYmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4RTpFD/exBn9kkA0gUh0U0lH/Ny
Gi7WtIk+oJcZ2fHuoiYoZPwS2rMXt0EXD2VCAN/Ap481TLTBQ6L7AuPQfI4hQycH
h+vnA+nxnbRKhPESazSWmUja+gEBhwE/apITEx68L4XgJ+VcSM4OqlPmGG+oRmv6
vvd7/F8O6FmZJEcfWoOnAX3CQTOACgetge23Q/Gdxj8Kz1PiGyIOa7N1lBVsqlhG
PUt4XWpPRw4OtPRVzmlJdcHreGxDcOj4Ow3r969ib0ypw/ZjZifnWru+5rLgMwGh
Z1vHK9z/6Bdn4TsDoyBcwApRsGsUIw2EqrRcZkFTqBCzQ+JMMWoROLsxzQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFH3sjBEjqnrcAmVBfCHTbXH4Twv2MB8GA1UdIwQY
MBaAFFj/iQI7h8C/hHm5/0clJYYT5PC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1AtSkFqdUh3TC1FZWJuX1J5VWxoaFBrOExVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iZWJiNmYtOTQ3YS00ZWFjLTg1YjEt
MzYzMTNjNTMyZDA0LzEvZmV5TUVTT3FldHdDWlVGOElkTnRjZmhQQ19ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9iZWJiNmYtOTQ3YS00ZWFjLTg1YjEtMzYzMTNjNTMyZDA0
LzEvV1AtSkFqdUh3TC1FZWJuX1J5VWxoaFBrOExVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhKyADAN
BgkqhkiG9w0BAQsFAAOCAQEAcebZ9D/OZ9+z218ZxKkvPwaRuXinTffmO1RFdvQK
5EFPpHKTW6QRrwQRl6gJi1dNmNKpkj6vBBGYeaqjmHBptgG9tzSFtF72l1Gk6/P1
jlnwf6w51jJFtWoieynYvPWxG6O3nN05sqqf1+YcMPsqbfYg3yMMHStPhsCxZ/Zz
DQ28K0qY8GgjVZlJus8JzQJKT2hbG15uxqPWCCR0I3mw+j25LGUMbxa+YWYWIHJD
q6K6qJ4QhDbuNQqwMrHH/0HK+RBGoh0StlNej2PloVkC6Q8BoCiUF4HMpB20foK6
4oJNsqP/WUvhSgSYzlwEPmdQa7GSd9Oz7QflxrQ61bmQKg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 05:21:31 2026 by rpki-client