Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/7vVe6YzQChrEWAKuVT1qWgZRT9Q.roa
File: 7vVe6YzQChrEWAKuVT1qWgZRT9Q.roa (raw, json)
Hash identifier: UJsxMXBvHzLGhrxHd5BXBufn6ERD/obUP4aV/utM4uA=
Subject key identifier: EE:F5:5E:E9:8C:D0:0A:1A:C4:58:02:AE:55:3D:6A:5A:06:51:4F:D4
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019FBDBC352FB4D48B2D78B2EA3EE5589E12
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/7vVe6YzQChrEWAKuVT1qWgZRT9Q.roa
Signing time: Sat 01 Aug 2026 14:30:55 +0000
ROA not before: Sat 01 Aug 2026 14:30:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213482
IP address blocks: 2a12:bec4:1780::/44 maxlen: 44
2a12:bec4:1c50::/44 maxlen: 44
2a12:bec4:1e40::/44 maxlen: 44
2a12:bec4:1e60::/44 maxlen: 44
2a12:bec4:1e70::/44 maxlen: 44
2a12:bec4:1e80::/44 maxlen: 44
2a12:bec4:1f40::/44 maxlen: 44
2a12:bec4:2030::/44 maxlen: 48
2a12:bec4:2040::/44 maxlen: 48
2a12:bec5::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bd:bc:35:2f:b4:d4:8b:2d:78:b2:ea:3e:e5:58:9e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Aug 1 14:30:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eef55ee98cd00a1ac45802ae553d6a5a06514fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a8:7e:27:ca:2d:c4:ef:80:45:c8:e7:03:a0:
f7:04:76:9c:ea:18:d9:46:85:03:15:d7:a8:41:bb:
e7:90:0f:10:ed:3f:3a:9b:7e:0a:35:e5:87:79:03:
22:21:bf:26:5d:2f:6a:e4:f6:83:e3:ec:b2:2e:27:
4c:87:32:30:2e:ce:37:94:b8:f8:61:42:3b:e3:9d:
5c:7e:c4:70:db:57:f4:a3:d7:a7:f3:f8:2c:4e:1b:
97:8c:3c:63:f5:3b:67:b2:9a:72:48:55:5e:d0:c2:
1a:d7:ff:38:a0:0b:ec:41:c4:0e:e0:37:b3:e2:6b:
18:d5:f7:1b:de:e1:df:0c:73:39:f1:4a:8d:33:b5:
55:c3:2e:75:dd:b7:f9:1a:b2:cd:14:56:f6:92:75:
b1:28:3d:68:1b:19:b0:e1:b1:cf:98:b9:0c:d3:7b:
dc:99:f2:84:25:c9:dc:f2:57:14:d1:93:2b:29:4f:
a5:6d:6f:d6:9e:dc:f7:36:5c:f7:47:0f:27:51:74:
17:a6:6f:62:be:49:7f:af:24:63:81:83:9a:1b:a3:
7c:14:8d:0e:00:59:32:57:f9:ae:59:ed:41:3a:f6:
0b:59:17:00:68:c3:72:11:32:b8:15:14:2e:aa:d4:
27:c5:9d:91:01:94:32:71:bd:14:27:15:b8:e0:2c:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F5:5E:E9:8C:D0:0A:1A:C4:58:02:AE:55:3D:6A:5A:06:51:4F:D4
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/7vVe6YzQChrEWAKuVT1qWgZRT9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1780::/44
2a12:bec4:1c50::/44
2a12:bec4:1e40::/44
2a12:bec4:1e60::-2a12:bec4:1e8f:ffff:ffff:ffff:ffff:ffff
2a12:bec4:1f40::/44
2a12:bec4:2030::-2a12:bec4:204f:ffff:ffff:ffff:ffff:ffff
2a12:bec5::/32
Signature Algorithm: sha256WithRSAEncryption
0d:bd:f6:0a:78:8a:ce:22:fa:bc:49:2a:01:d3:1f:46:31:f3:
76:95:41:30:03:5d:94:2f:26:3f:ca:a8:65:c8:41:39:55:28:
2f:3b:3e:5c:78:8c:62:17:da:cc:ac:e5:7c:75:e8:6d:c0:87:
19:f4:40:40:77:97:f5:6d:a7:82:b2:8d:29:db:25:29:b6:d3:
30:97:17:59:ee:02:9c:32:8d:dc:2d:e5:64:58:d5:f3:60:6a:
4a:91:94:89:64:7d:3d:8e:93:5d:4a:98:d5:07:58:ed:97:e8:
fc:0b:69:9d:cd:c0:48:f0:ac:d2:4f:a9:e9:76:4b:ee:c2:b9:
c9:65:71:cf:a8:1d:aa:a0:6c:a1:7c:88:eb:0a:50:84:36:ab:
42:3b:6f:3f:b8:2e:23:45:63:56:65:a6:2a:7c:d4:fb:ee:ac:
6d:ff:c3:55:19:eb:05:46:49:29:70:6d:34:56:52:a6:10:5e:
41:c5:c5:1f:f4:09:a7:be:9c:74:c4:3d:13:6b:a4:b8:08:47:
b2:23:ac:f2:77:c8:84:e0:75:6c:fc:ac:60:93:4c:b1:ee:ab:
c2:84:34:b0:e5:5e:b6:2e:de:a3:c1:6c:a2:7c:b6:06:97:c2:
d8:9e:79:2e:4e:a8:fe:68:eb:87:99:a4:01:b6:e1:1e:35:c8:
82:2e:d3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:46 2026 by rpki-client