Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ey2s5NQ3Cf-S5L5pP-WbEfppqKQ.roa
File: ey2s5NQ3Cf-S5L5pP-WbEfppqKQ.roa (raw, json)
Hash identifier: 0DQKeXsBEpb15AOkNTfy83t7pWcY8GR84bz59XPLSXI=
Subject key identifier: 7B:2D:AC:E4:D4:37:09:FF:92:E4:BE:69:3F:E5:9B:11:FA:69:A8:A4
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019FCF04F2AB3C5FCE010ACD85062DC17228
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ey2s5NQ3Cf-S5L5pP-WbEfppqKQ.roa
Signing time: Tue 04 Aug 2026 23:03:55 +0000
ROA not before: Tue 04 Aug 2026 23:03:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34567
IP address blocks: 2a0d:8cc0::/29 maxlen: 29
2a0d:b840::/29 maxlen: 29
2a0e:af40::/29 maxlen: 29
2a0e:e9c0::/29 maxlen: 29
2a0f:e180::/29 maxlen: 29
2a11:17c0::/29 maxlen: 29
2a11:1c80::/29 maxlen: 29
2a11:2d00::/29 maxlen: 29
2a11:4540::/29 maxlen: 29
2a11:4f00::/29 maxlen: 29
2a11:64c0::/29 maxlen: 29
2a11:6b80::/29 maxlen: 29
2a11:81c0::/29 maxlen: 29
2a11:86c0::/29 maxlen: 29
2a11:8740::/29 maxlen: 29
2a11:8980::/29 maxlen: 29
2a11:9580::/29 maxlen: 29
2a11:9640::/29 maxlen: 29
2a11:9f00::/29 maxlen: 29
2a11:a040::/29 maxlen: 29
2a11:a140::/29 maxlen: 29
2a11:b0c0::/29 maxlen: 29
2a11:b700::/29 maxlen: 29
2a11:bb00::/29 maxlen: 29
2a11:bbc0::/29 maxlen: 29
2a11:be40::/29 maxlen: 29
2a11:bf80::/29 maxlen: 29
2a11:c240::/29 maxlen: 29
2a11:c580::/29 maxlen: 29
2a11:c680::/29 maxlen: 29
2a11:cec0::/29 maxlen: 29
2a11:d340::/29 maxlen: 29
2a11:d880::/29 maxlen: 29
2a11:dac0::/29 maxlen: 29
2a11:df00::/29 maxlen: 29
2a11:e640::/29 maxlen: 29
2a11:e6c0::/29 maxlen: 29
2a11:e8c0::/29 maxlen: 29
2a11:eac0::/29 maxlen: 29
2a11:fa40::/29 maxlen: 29
2a11:fc40::/29 maxlen: 29
2a11:ff40::/29 maxlen: 29
2a12:580::/29 maxlen: 29
2a12:900::/29 maxlen: 29
2a12:dc0::/29 maxlen: 29
2a12:e40::/29 maxlen: 29
2a12:11c0::/29 maxlen: 29
2a12:12c0::/29 maxlen: 29
2a12:1a80::/29 maxlen: 29
2a12:2b80::/29 maxlen: 29
2a12:2e80::/29 maxlen: 29
2a12:3c00::/29 maxlen: 29
2a12:8380::/29 maxlen: 29
2a12:8480::/29 maxlen: 29
2a12:8a00::/29 maxlen: 29
2a12:9200::/29 maxlen: 29
2a12:aa00::/29 maxlen: 29
2a12:af00::/29 maxlen: 29
2a12:b400::/29 maxlen: 29
2a12:b700::/29 maxlen: 29
2a12:bb00::/29 maxlen: 29
2a12:c980::/29 maxlen: 29
2a12:d080::/29 maxlen: 29
2a12:d200::/29 maxlen: 29
2a12:f980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cf:04:f2:ab:3c:5f:ce:01:0a:cd:85:06:2d:c1:72:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 4 23:03:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b2dace4d43709ff92e4be693fe59b11fa69a8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:65:f3:3d:4f:88:b0:01:8b:69:f8:76:ed:53:
f5:38:4b:2a:15:6e:c6:99:2b:58:d8:49:cb:90:f3:
67:5c:ef:93:c6:f1:56:28:63:a5:f4:92:4c:d7:5e:
9b:76:87:3d:2b:6a:ce:fa:e1:95:72:41:21:b4:37:
fc:76:40:bd:80:a1:af:c6:bb:89:94:51:0e:bb:c1:
cc:c4:d4:3a:da:71:d1:db:71:f4:94:4a:17:40:85:
1a:01:de:be:28:c9:cc:b3:86:aa:36:56:11:1f:83:
f3:fa:46:37:23:60:1b:25:d1:7e:1c:87:3d:d4:6a:
2a:00:a1:9f:99:1d:cf:06:11:93:02:9e:d6:79:96:
d6:0f:8e:01:45:66:9a:1d:6c:16:f3:0f:01:f6:24:
7e:a8:80:2d:a2:6d:f8:1a:2c:bf:64:90:de:85:be:
fb:1b:8a:38:38:69:8a:98:5d:da:d4:38:9f:17:89:
ec:8d:d0:ca:ed:ff:61:ef:d4:6b:c5:f2:ae:5a:94:
fa:45:15:44:70:d8:1b:3d:75:89:af:26:31:ca:e1:
e4:cf:e2:0b:b6:a9:bd:96:61:4f:ed:39:e2:f1:65:
d1:f4:3c:c4:2b:ae:bf:c2:ff:02:d0:10:55:3d:90:
1f:42:8b:59:b3:92:ea:9d:21:07:a3:b8:4f:a7:a3:
fa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2D:AC:E4:D4:37:09:FF:92:E4:BE:69:3F:E5:9B:11:FA:69:A8:A4
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ey2s5NQ3Cf-S5L5pP-WbEfppqKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:8cc0::/29
2a0d:b840::/29
2a0e:af40::/29
2a0e:e9c0::/29
2a0f:e180::/29
2a11:17c0::/29
2a11:1c80::/29
2a11:2d00::/29
2a11:4540::/29
2a11:4f00::/29
2a11:64c0::/29
2a11:6b80::/29
2a11:81c0::/29
2a11:86c0::/29
2a11:8740::/29
2a11:8980::/29
2a11:9580::/29
2a11:9640::/29
2a11:9f00::/29
2a11:a040::/29
2a11:a140::/29
2a11:b0c0::/29
2a11:b700::/29
2a11:bb00::/29
2a11:bbc0::/29
2a11:be40::/29
2a11:bf80::/29
2a11:c240::/29
2a11:c580::/29
2a11:c680::/29
2a11:cec0::/29
2a11:d340::/29
2a11:d880::/29
2a11:dac0::/29
2a11:df00::/29
2a11:e640::/29
2a11:e6c0::/29
2a11:e8c0::/29
2a11:eac0::/29
2a11:fa40::/29
2a11:fc40::/29
2a11:ff40::/29
2a12:580::/29
2a12:900::/29
2a12:dc0::/29
2a12:e40::/29
2a12:11c0::/29
2a12:12c0::/29
2a12:1a80::/29
2a12:2b80::/29
2a12:2e80::/29
2a12:3c00::/29
2a12:8380::/29
2a12:8480::/29
2a12:8a00::/29
2a12:9200::/29
2a12:aa00::/29
2a12:af00::/29
2a12:b400::/29
2a12:b700::/29
2a12:bb00::/29
2a12:c980::/29
2a12:d080::/29
2a12:d200::/29
2a12:f980::/29
Signature Algorithm: sha256WithRSAEncryption
68:45:88:b5:68:b2:f9:0d:31:35:ca:26:df:c0:6c:f5:47:5b:
5b:13:91:15:08:d6:c7:ca:b9:94:23:ed:a8:04:62:3f:46:c0:
42:53:eb:ea:9a:76:b7:c0:b3:6d:e1:7d:2c:f0:93:16:6b:f6:
75:53:18:fa:dd:9b:c8:06:45:3b:57:90:8c:a8:a3:3b:f4:14:
c2:95:d5:b7:cd:90:25:00:be:5b:b5:7c:2a:d3:ec:cc:7b:af:
10:d9:f6:61:33:e7:ed:e2:34:7e:a1:94:39:5e:12:0e:e6:3c:
46:21:21:a2:3c:02:32:6f:20:6c:1e:bd:4e:f5:38:70:f8:ea:
b6:78:d6:d6:cd:d9:4d:2a:09:98:b1:c3:21:59:75:c2:0f:81:
5e:cb:6f:a1:e8:98:bb:aa:5e:11:75:27:1b:97:02:94:7f:6a:
c2:b1:bf:32:90:60:7a:80:ea:fd:12:1c:ef:15:55:92:d2:74:
46:26:b2:9a:8f:24:aa:91:ef:de:00:98:7e:18:8e:68:9a:04:
ca:84:5a:30:ef:cd:81:8b:73:87:46:bf:cc:8e:91:f2:11:12:
4d:eb:47:88:b7:2e:41:c6:73:48:70:de:01:7e:90:a3:9f:7a:
4f:d0:27:25:50:11:ce:46:cf:6b:2e:37:0e:1f:fc:63:cd:ce:
cf:1e:49:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:16:53 2026 by rpki-client