Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/eHR4v1Vbv8ED8TuFf_p43np5qFw.roa
File: eHR4v1Vbv8ED8TuFf_p43np5qFw.roa (raw, json)
Hash identifier: 4xBPOl2DYEyw8AVqYUPC3MS1iG+FZTNxq9GGkkNvcF8=
Subject key identifier: 78:74:78:BF:55:5B:BF:C1:03:F1:3B:85:7F:FA:78:DE:7A:79:A8:5C
Certificate issuer: /CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
Certificate serial: 01A177F8DFAADA7D1C451DEB046C92B76A42
Authority key identifier: A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/eHR4v1Vbv8ED8TuFf_p43np5qFw.roa
Signing time: Mon 26 Oct 2026 11:29:21 +0000
ROA not before: Mon 26 Oct 2026 11:29:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200886
IP address blocks: 2a13:4140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:f8:df:aa:da:7d:1c:45:1d:eb:04:6c:92:b7:6a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
Validity
Not Before: Oct 26 11:29:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=787478bf555bbfc103f13b857ffa78de7a79a85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b2:f2:86:50:db:81:38:c2:56:0f:34:8a:9d:
ff:9f:ea:31:d4:03:8d:25:76:f4:89:0e:45:6a:a0:
2d:6b:97:0b:be:0d:f8:28:32:d5:02:ad:2d:2f:81:
0c:6f:90:29:b3:cc:07:3c:2d:18:00:3d:43:f5:99:
6e:e4:9a:dd:a6:db:86:79:0a:9b:f0:59:a0:5d:30:
0d:f0:38:de:cc:eb:df:d1:15:25:41:15:4b:98:6b:
02:5c:4a:5e:2c:6a:b4:29:10:25:d1:b4:13:f8:de:
61:fe:87:4d:40:8f:27:86:41:96:bf:57:45:b9:1b:
f8:67:21:f3:d3:c2:f1:a6:ce:ff:7a:29:42:bb:ad:
c6:ca:75:21:b2:14:d1:fe:8f:57:de:4e:50:a5:8c:
08:d4:af:37:b7:d1:cc:59:7b:7b:b4:35:a1:c4:e0:
a6:28:6d:a9:b8:b5:f2:88:01:d8:1f:48:8f:db:5e:
e1:9c:d7:1f:28:93:08:11:a9:c0:bd:e6:a7:06:dd:
1e:f2:ca:42:77:57:8a:b1:08:46:cb:5e:52:de:46:
f3:8c:d9:ba:48:9a:88:50:e0:06:ec:52:6d:4c:5a:
32:6c:08:79:38:11:27:1c:7e:cb:46:1e:e2:29:3e:
9d:47:50:51:3f:f2:ec:ca:56:6a:c5:5b:41:fe:db:
8a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:74:78:BF:55:5B:BF:C1:03:F1:3B:85:7F:FA:78:DE:7A:79:A8:5C
X509v3 Authority Key Identifier:
keyid:A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/eHR4v1Vbv8ED8TuFf_p43np5qFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:4140::/29
Signature Algorithm: sha256WithRSAEncryption
43:3d:42:db:fc:4d:1b:97:16:28:43:3c:77:b4:82:b2:e0:45:
b5:6f:ef:1e:08:87:35:5b:df:02:0b:3d:54:28:31:5d:c8:fe:
ad:cf:df:32:f3:a9:ee:ce:65:4a:5b:23:f2:72:f8:ab:d3:0b:
d6:92:3c:d6:55:a1:fe:55:74:da:95:a5:f7:0a:5b:e0:ea:5c:
bb:fb:83:48:94:10:86:f9:45:2f:41:bc:e2:23:c7:78:3d:a4:
23:d1:7f:f7:cb:16:d7:83:16:8b:d4:20:97:89:c2:e2:5d:08:
36:5f:f9:20:f2:53:9f:4c:25:d0:09:73:8b:ba:f1:34:a8:87:
43:b1:33:16:57:dc:93:69:df:ca:24:44:f5:37:84:7c:94:d8:
a8:42:f0:c5:17:d8:28:96:f0:e7:39:2d:b2:d2:d8:c5:00:04:
d0:63:e0:6b:e0:51:6e:73:7c:02:e8:d2:c8:6f:bd:3f:7f:b2:
5a:cc:48:e1:a2:4a:15:5c:41:40:32:57:9c:cb:0c:fa:20:4d:
b7:4d:bb:e0:9d:91:2c:2e:ee:1c:b7:b1:2c:7d:37:91:69:2d:
ea:1e:10:71:28:aa:f3:9c:d6:70:4d:bd:83:9a:cd:d7:54:93:
7f:68:f0:cf:c5:58:79:4f:0a:c5:2c:e9:d3:58:d3:5c:a0:7b:
da:fa:41:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:08:05 2026 by rpki-client