Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/71WBxVro_Euo75ftGbOnYN6EUc4.roa
File: 71WBxVro_Euo75ftGbOnYN6EUc4.roa (raw, json)
Hash identifier: k6wuSYIpDhDq8ic6TWJjAZJOYAfdEDpyocKJsXVeM34=
Subject key identifier: EF:55:81:C5:5A:E8:FC:4B:A8:EF:97:ED:19:B3:A7:60:DE:84:51:CE
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A06260199C0047304E859C4321DE31FC0F
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/71WBxVro_Euo75ftGbOnYN6EUc4.roa
Signing time: Wed 02 Sep 2026 13:47:40 +0000
ROA not before: Wed 02 Sep 2026 13:47:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219208
IP address blocks: 2a0b:a300::/30 maxlen: 30
2a0b:a304::/30 maxlen: 30
2a0f:5580::/29 maxlen: 32
2a0f:9fc0::/29 maxlen: 32
2a0f:a140::/29 maxlen: 32
2a0f:a700::/30 maxlen: 30
2a0f:a704::/30 maxlen: 30
2a14:4380::/29 maxlen: 32
2a14:4980::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:60:19:9c:00:47:30:4e:85:9c:43:21:de:31:fc:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Sep 2 13:47:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef5581c55ae8fc4ba8ef97ed19b3a760de8451ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:49:2b:e9:42:38:f5:c9:69:11:a5:1c:cf:67:
1c:c7:56:e5:3b:ae:fc:b6:fe:a0:89:98:2a:79:46:
9f:cf:44:d5:3e:cd:87:43:91:d7:d3:8e:a8:33:71:
fa:1c:e8:dc:05:92:b7:73:26:cb:c9:26:c9:53:83:
99:74:69:58:bb:ab:fd:80:bc:51:42:23:e3:25:e0:
12:48:32:82:32:f9:f0:87:50:e8:5b:cb:0b:c7:2e:
cf:0a:b2:99:ea:19:5f:c3:1f:63:bb:26:a5:ed:35:
4b:8d:d3:2b:ea:bd:f4:6f:35:f9:bc:e5:ce:ae:fd:
aa:82:75:e0:bd:65:3f:17:dc:9f:ee:1b:eb:b2:f2:
3a:e7:58:7d:e5:fd:60:cf:6d:25:3d:26:48:b0:73:
ba:3b:4b:46:c1:1b:02:b0:79:9b:f3:5b:3a:9d:d8:
ba:3b:e3:25:d5:54:a0:f1:c5:8a:0e:85:36:46:e0:
f4:77:f7:f3:99:79:c2:a9:31:b4:f1:f4:d7:be:f4:
ab:8b:27:91:f8:d3:7a:98:46:0f:51:35:0a:31:32:
82:0f:9b:f0:f0:44:4c:e0:65:94:2c:30:23:4d:5f:
a3:65:35:80:71:62:13:84:e2:59:50:4f:ee:91:3c:
d8:a8:99:d0:05:07:f9:c4:e0:c0:26:1b:71:64:ec:
c9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:55:81:C5:5A:E8:FC:4B:A8:EF:97:ED:19:B3:A7:60:DE:84:51:CE
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/71WBxVro_Euo75ftGbOnYN6EUc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:a300::/29
2a0f:5580::/29
2a0f:9fc0::/29
2a0f:a140::/29
2a0f:a700::/29
2a14:4380::/29
2a14:4980::/29
Signature Algorithm: sha256WithRSAEncryption
50:5d:bb:a2:c4:25:77:35:a9:63:80:82:ec:b3:d6:25:b9:7b:
34:01:70:36:67:84:6a:d1:80:40:0d:bb:39:44:7d:2b:f4:e7:
0b:d2:db:12:ec:a7:16:de:09:f7:6a:1f:7c:5f:bf:4d:31:d3:
4e:5c:93:fb:2b:be:cd:40:76:d6:2c:69:bd:fb:25:c6:95:61:
ac:ee:a6:65:c7:dd:dd:fb:c4:b7:fd:1d:b0:99:ec:5d:94:51:
27:53:12:d4:e1:32:2e:61:19:f7:75:11:21:f4:a4:9b:c4:36:
17:1e:7d:c7:8e:2e:7e:ac:39:c8:17:d9:53:2f:5d:43:b2:a0:
28:8a:79:84:85:99:88:32:66:e2:b9:d9:15:2f:de:76:6d:bb:
23:ed:fb:ab:fe:e3:0e:2d:e3:33:fc:88:bd:ba:46:69:55:90:
f5:b4:1c:5d:57:49:4f:b5:dd:9a:b3:3f:ee:dd:97:ca:e7:9e:
98:89:dc:1a:d8:6c:f3:74:ba:67:e3:22:97:8d:d8:0f:85:4e:
91:e9:02:14:f7:c3:bc:e5:2e:af:b1:56:8b:37:07:b6:a0:24:
32:3e:e6:e1:8c:93:8f:e7:b0:ac:e7:63:b3:75:a2:fb:a5:48:
aa:b5:13:c3:06:bc:2b:a6:b6:cb:4f:77:86:dd:07:10:45:20:
b2:2d:84:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:20:33 2026 by rpki-client