Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/7c8InHTsEBevPOjdkP-TJBpT-_Q.roa
File: 7c8InHTsEBevPOjdkP-TJBpT-_Q.roa (raw, json)
Hash identifier: lote4uUt2yikqJntx3kTFHEIvQzeTzLGNozlTbQ+Rq8=
Subject key identifier: ED:CF:08:9C:74:EC:10:17:AF:3C:E8:DD:90:FF:93:24:1A:53:FB:F4
Certificate issuer: /CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Certificate serial: 019E9742FC0DC5CE1502D7636F5C65B2610F
Authority key identifier: B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/7c8InHTsEBevPOjdkP-TJBpT-_Q.roa
Signing time: Fri 05 Jun 2026 10:10:09 +0000
ROA not before: Fri 05 Jun 2026 10:10:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40994
IP address blocks: 2a01:ef40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:42:fc:0d:c5:ce:15:02:d7:63:6f:5c:65:b2:61:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Validity
Not Before: Jun 5 10:10:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edcf089c74ec1017af3ce8dd90ff93241a53fbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:0a:b7:0b:d7:a7:23:bd:7b:73:00:d2:17:
e8:d6:0e:e3:fc:0e:79:47:b8:66:98:54:84:9e:36:
0f:3b:10:39:0a:dc:39:00:64:3e:47:73:42:fb:53:
8a:36:7c:b2:ec:7b:24:13:0b:6d:70:4f:4a:7b:5f:
0c:81:4b:48:a2:f8:37:08:1f:d0:c1:54:6f:95:a0:
d1:a1:8d:74:2c:f7:b8:eb:49:79:2c:3a:5d:5e:09:
8d:0e:77:5f:12:8a:3b:a7:e5:50:99:23:59:91:50:
5f:66:91:a9:f1:77:5e:ab:49:0f:fb:fc:37:88:0b:
e9:54:33:cc:30:3d:5e:1e:9d:6a:24:4f:1a:6f:28:
e7:a0:2f:ac:86:66:5d:e4:52:45:15:49:11:04:bf:
87:ee:b7:05:e2:b5:93:b9:bb:83:99:d1:82:e6:d9:
b7:fd:e5:11:ca:4d:d3:87:19:b1:ce:f7:f8:d2:27:
0b:8c:23:f0:1f:f8:94:47:29:05:fe:22:8b:b3:64:
2e:83:f6:6d:ba:ff:24:14:20:2d:6c:76:ac:0f:9e:
bb:8c:12:5b:03:3a:63:c4:43:1e:c1:95:b6:fb:04:
61:31:b3:98:74:e6:a2:69:fa:77:3b:c9:7b:0e:22:
56:28:88:e9:a8:c3:ad:a4:8b:6c:f9:5b:72:ed:32:
33:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CF:08:9C:74:EC:10:17:AF:3C:E8:DD:90:FF:93:24:1A:53:FB:F4
X509v3 Authority Key Identifier:
keyid:B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/7c8InHTsEBevPOjdkP-TJBpT-_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ef40::/29
Signature Algorithm: sha256WithRSAEncryption
13:a9:3a:81:01:cf:bd:bb:2d:2f:a0:5d:36:71:b4:fc:e8:62:
5f:1d:9a:fd:a1:8f:ba:f9:91:ce:cf:29:f1:05:28:71:4e:db:
5a:25:15:27:f2:18:45:df:25:62:4f:25:6e:1a:94:cc:ed:2e:
af:a9:12:35:d3:fd:4e:ad:cf:c5:50:0a:a8:37:88:69:66:fb:
3d:3a:1c:4c:8b:8f:7c:d2:4f:db:3c:a1:2d:20:41:0c:24:ff:
69:b1:17:66:4f:b0:31:58:c8:5e:25:7b:c0:bf:f4:91:4b:12:
d7:85:15:51:a4:99:41:02:be:f0:4f:08:0f:0f:38:86:87:84:
bf:de:d3:eb:d2:db:01:80:e8:65:b6:e6:0f:43:06:f3:c7:44:
92:b1:3c:62:ea:39:20:f8:17:aa:24:04:7b:5b:74:11:10:87:
83:3f:6b:22:6b:c1:58:41:70:b0:97:1c:a6:d7:9f:f6:ee:5d:
fe:a6:48:99:8e:ae:ac:ed:7f:f4:8f:3b:87:1c:4a:06:c7:4e:
42:65:1a:fa:51:7c:1b:ec:00:c4:83:ef:56:f9:bc:a2:5b:fa:
5c:d3:9c:4a:d9:fa:d2:e9:82:cd:7a:a4:3f:f4:f7:92:5d:c6:
06:3d:19:6d:60:50:b4:3d:6d:ec:1e:17:a8:9b:ff:2e:99:22:
e1:7d:d0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:19:41 2026 by rpki-client