Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/rWasBVDHvsqj4v2uLYcJlh-zJcA.roa
File: rWasBVDHvsqj4v2uLYcJlh-zJcA.roa (raw, json)
Hash identifier: AHm58a0dKpbPUQ+mFbxnQgJLrHNnbCshAcDg6s8c+wI=
Subject key identifier: AD:66:AC:05:50:C7:BE:CA:A3:E2:FD:AE:2D:87:09:96:1F:B3:25:C0
Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial: 019F746E0263407C42B19CE1E70AEDC6452A
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/rWasBVDHvsqj4v2uLYcJlh-zJcA.roa
Signing time: Sat 18 Jul 2026 08:53:14 +0000
ROA not before: Sat 18 Jul 2026 08:53:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 2a0c:2e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:6e:02:63:40:7c:42:b1:9c:e1:e7:0a:ed:c6:45:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Validity
Not Before: Jul 18 08:53:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad66ac0550c7becaa3e2fdae2d8709961fb325c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f7:c8:50:99:37:0b:fb:73:81:95:c9:c1:6e:
fc:e3:c4:03:9b:9e:bd:9b:6e:56:aa:f7:fe:67:74:
f2:9b:5c:d5:78:d5:c8:12:51:a6:9d:90:40:17:c5:
07:23:ef:54:f0:2a:b8:2a:80:d6:91:54:e0:0c:46:
30:17:ff:d3:a1:05:52:39:a8:04:16:9a:14:4d:b3:
f4:a0:6f:1f:7d:9a:12:06:65:b4:82:ad:e0:00:ee:
17:60:fc:b4:7b:a1:f6:03:5c:a6:79:c8:20:aa:0f:
7e:06:69:ed:96:7b:d2:ff:84:f6:cf:86:1e:38:c9:
6c:b6:08:ed:97:9c:0a:8c:f2:c4:cb:c8:e2:2e:b5:
ed:45:d9:14:b2:26:39:d4:94:39:ee:e4:76:e5:89:
f6:e2:9b:ee:e0:9d:87:59:53:a3:3c:d8:9e:5b:93:
c4:f1:62:ae:33:1d:e9:bc:bd:d6:be:4c:0d:f9:f8:
8a:2a:aa:e8:83:0b:d4:ea:57:2a:2f:e4:78:3e:4c:
4d:ab:14:72:42:74:97:54:15:b2:01:b9:bc:ac:83:
51:a7:3f:11:cd:67:df:21:a7:f4:f3:7c:21:42:d3:
3c:45:10:b0:75:34:79:79:f3:93:e5:0a:34:b3:d7:
79:2e:a5:d6:0b:83:63:44:8f:8f:7b:c1:f2:04:7c:
85:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:66:AC:05:50:C7:BE:CA:A3:E2:FD:AE:2D:87:09:96:1F:B3:25:C0
X509v3 Authority Key Identifier:
keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/rWasBVDHvsqj4v2uLYcJlh-zJcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:2e00::/29
Signature Algorithm: sha256WithRSAEncryption
3e:8b:71:99:f4:76:e3:95:ba:97:d2:49:d3:ec:b9:63:34:9a:
69:ad:db:85:2a:f2:4c:1d:52:4d:63:42:06:7b:4d:01:ad:80:
22:05:2b:6e:b0:ca:ca:f5:76:04:ed:c2:f3:06:7a:e4:14:95:
1a:86:ec:1f:a7:6d:49:f0:76:a3:76:58:cf:a8:ff:ed:72:c9:
c5:4a:78:6d:3e:60:da:5a:b0:bd:a3:73:7a:2a:be:e6:42:df:
b0:b2:86:af:ef:3e:b4:90:dd:20:c9:98:77:90:bf:f9:31:38:
92:fe:e0:e4:eb:d7:91:31:50:76:fe:02:46:0e:e4:9a:57:f8:
7c:3d:bf:8e:18:9d:53:06:82:92:5c:3b:6e:a2:de:59:2c:06:
24:d2:c3:b3:1c:d6:8c:30:b3:15:a3:fa:5c:14:6e:5c:f4:5b:
f5:2f:13:e2:a5:7b:02:4b:3e:fd:ab:90:92:3b:39:64:e5:fc:
3a:d0:25:de:d5:b3:d1:91:ec:df:bc:0e:3e:49:aa:2a:c3:55:
8e:8b:4e:d5:f6:3f:9d:50:40:31:09:60:cb:38:5d:28:43:5f:
5f:f4:11:c7:6d:89:32:ba:e0:d8:8c:db:75:83:29:7d:6d:cc:
e2:a7:19:37:39:f1:37:5c:3c:e9:f4:0f:33:1b:52:76:21:43:
54:e1:0d:99
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ90bgJjQHxCsZzh5wrtxkUqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkY2MyZDI3OTEzMGQxYTFiYjNlZTVhM2I1ZjMzMjMwNTdi
M2M0ZmQwHhcNMjYwNzE4MDg1MzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDY2YWMwNTUwYzdiZWNhYTNlMmZkYWUyZDg3MDk5NjFmYjMyNWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PfIUJk3C/tzgZXJwW7848QDm569
m25Wqvf+Z3Tym1zVeNXIElGmnZBAF8UHI+9U8Cq4KoDWkVTgDEYwF//ToQVSOagE
FpoUTbP0oG8ffZoSBmW0gq3gAO4XYPy0e6H2A1ymecggqg9+BmntlnvS/4T2z4Ye
OMlstgjtl5wKjPLEy8jiLrXtRdkUsiY51JQ57uR25Yn24pvu4J2HWVOjPNieW5PE
8WKuMx3pvL3WvkwN+fiKKqrogwvU6lcqL+R4PkxNqxRyQnSXVBWyAbm8rINRpz8R
zWffIaf083whQtM8RRCwdTR5efOT5Qo0s9d5LqXWC4NjRI+Pe8HyBHyFxwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFK1mrAVQx77Ko+L9ri2HCZYfsyXAMB8GA1UdIwQY
MBaAFO3MLSeRMNGhuz7lo7XzMjBXs8T9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2N3dEo1RXcwYUc3UHVXanRmTXlNRmV6eFAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MjQzYjgtYThmOS00NTIwLTgwYzEt
MDU2NWYzMzdkY2JlLzEvcldhc0JWREh2c3FqNHYydUxZY0psaC16SmNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83MjQzYjgtYThmOS00NTIwLTgwYzEtMDU2NWYzMzdkY2Jl
LzEvN2N3dEo1RXcwYUc3UHVXanRmTXlNRmV6eFAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgwuADAN
BgkqhkiG9w0BAQsFAAOCAQEAPotxmfR245W6l9JJ0+y5YzSaaa3bhSryTB1STWNC
BntNAa2AIgUrbrDKyvV2BO3C8wZ65BSVGobsH6dtSfB2o3ZYz6j/7XLJxUp4bT5g
2lqwvaNzeiq+5kLfsLKGr+8+tJDdIMmYd5C/+TE4kv7g5OvXkTFQdv4CRg7kmlf4
fD2/jhidUwaCklw7bqLeWSwGJNLDsxzWjDCzFaP6XBRuXPRb9S8T4qV7Aks+/auQ
kjs5ZOX8OtAl3tWz0ZHs37wOPkmqKsNVjotO1fY/nVBAMQlgyzhdKENfX/QRx22J
Mrrg2IzbdYMpfW3M4qcZNznxN1w86fQPMxtSdiFDVOENmQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:53 2026 by rpki-client