Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Et6PnTBJBARsc3IlyKiE8qN-8pg.roa
File: Et6PnTBJBARsc3IlyKiE8qN-8pg.roa (raw, json)
Hash identifier: 5VSWKAXKy2dgal6NA51kMlOzzyv8IixCLBR114HbwSk=
Subject key identifier: 12:DE:8F:9D:30:49:04:04:6C:73:72:25:C8:A8:84:F2:A3:7E:F2:98
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A061D9855BF13CF69A96B1F1268C04C7EA
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Et6PnTBJBARsc3IlyKiE8qN-8pg.roa
Signing time: Wed 02 Sep 2026 11:20:40 +0000
ROA not before: Wed 02 Sep 2026 11:20:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218868
IP address blocks: 2a0c:7440::/30 maxlen: 30
2a0c:7444::/30 maxlen: 30
2a0d:2cc0::/30 maxlen: 30
2a0d:2cc4::/30 maxlen: 30
2a0f:7100::/30 maxlen: 30
2a0f:7104::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:d9:85:5b:f1:3c:f6:9a:96:b1:f1:26:8c:04:c7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Sep 2 11:20:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12de8f9d304904046c737225c8a884f2a37ef298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ea:bb:eb:c0:40:98:00:57:8f:78:7e:e7:f9:
68:38:a0:de:1e:c1:d4:38:8e:aa:cb:b4:81:c9:de:
e7:6c:6e:4d:7c:4a:1b:94:a5:8c:2b:d2:58:33:e7:
6c:3d:8b:b7:04:ad:cc:69:76:46:c0:7e:a1:d6:af:
2e:9b:57:06:1e:a6:42:97:25:ac:a5:8e:29:15:58:
c8:99:70:8e:41:a0:78:d8:fd:67:dc:7d:38:af:ea:
ff:62:54:90:75:36:fa:67:06:58:b2:32:76:36:85:
86:b3:4b:7d:6a:4a:48:94:01:7d:17:8f:67:e0:2f:
7d:20:5d:75:89:09:e6:80:8b:35:13:9b:9f:7c:27:
0e:43:9f:58:5f:36:9c:ec:55:c2:07:10:ed:5a:55:
f2:e8:86:42:36:5f:ef:c1:a2:4f:8c:47:5d:e9:4b:
ac:e5:67:69:f2:03:39:82:1c:c9:1e:74:ae:94:af:
6b:fe:7f:84:22:b9:0e:94:20:0c:ac:08:cf:27:96:
20:23:f1:cf:b4:2c:f9:8e:42:d3:a3:0d:2a:3a:a2:
a2:3e:20:0a:43:59:21:46:eb:05:1f:af:fb:1c:95:
f8:d5:c5:16:a3:61:25:a2:e7:de:11:c0:b4:66:0c:
89:23:3d:e4:cd:01:9d:07:e4:fe:2a:43:53:4a:30:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DE:8F:9D:30:49:04:04:6C:73:72:25:C8:A8:84:F2:A3:7E:F2:98
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Et6PnTBJBARsc3IlyKiE8qN-8pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7440::/29
2a0d:2cc0::/29
2a0f:7100::/29
Signature Algorithm: sha256WithRSAEncryption
11:b4:40:fb:62:04:9f:07:57:8f:39:fa:f3:f9:c9:cc:ac:9f:
31:46:6f:c6:3a:38:67:83:4d:8d:67:76:18:69:67:9e:1b:b7:
36:74:0c:e1:ab:48:47:8e:9d:d4:20:c2:69:dc:54:bc:61:be:
4d:4d:0d:66:47:2f:d4:69:69:7a:5f:e5:92:ec:20:85:54:35:
cf:3a:d8:d0:ec:9d:be:94:c5:8c:d8:12:24:a7:fb:06:c4:ea:
81:6f:80:84:9c:8e:cc:e8:20:d9:f8:b6:a4:81:3b:30:b4:ce:
d6:4b:ee:e4:85:53:08:8a:0a:a0:fe:9c:5e:ac:64:46:f6:87:
94:1f:10:e1:08:13:84:35:cd:21:a9:32:a2:48:28:ab:6d:40:
9d:7c:09:56:a7:2d:d8:3b:55:e8:6d:34:83:2f:36:e7:cf:b3:
f2:14:c2:57:30:6a:dd:55:e2:0c:87:8e:29:1a:e8:f6:3e:1b:
51:49:ed:5d:a6:1a:fa:fc:df:87:56:49:8c:4e:30:62:ca:8b:
a1:15:99:01:64:df:75:29:ed:1a:db:cc:dd:c1:30:44:99:f8:
eb:95:43:eb:31:69:be:4c:c0:18:c2:b9:b3:b6:cc:0d:32:1d:
84:05:3e:3f:11:0a:c6:cb:8c:2b:81:76:b1:f5:39:8b:4f:98:
3e:bf:8b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:52:30 2026 by rpki-client