Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/ea-J5bW7cK-quuNuRi6CFgFcSLY.roa
File: ea-J5bW7cK-quuNuRi6CFgFcSLY.roa (raw, json)
Hash identifier: qIqvWSMcazfocJrExCZsZTdbNeOv46Qe1fgtgnWNwqY=
Subject key identifier: 79:AF:89:E5:B5:BB:70:AF:AA:BA:E3:6E:46:2E:82:16:01:5C:48:B6
Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Certificate serial: 01A0F99FDFE277F0D88EAE9CCCAEF1D3256B
Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/ea-J5bW7cK-quuNuRi6CFgFcSLY.roa
Signing time: Thu 01 Oct 2026 22:39:59 +0000
ROA not before: Thu 01 Oct 2026 22:39:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219498
IP address blocks: 2a10:ab80:3ed::/48 maxlen: 48
2a10:ab80:456::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:9f:df:e2:77:f0:d8:8e:ae:9c:cc:ae:f1:d3:25:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Validity
Not Before: Oct 1 22:39:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79af89e5b5bb70afaabae36e462e8216015c48b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:52:6b:26:c6:e9:4c:ee:2b:c3:a6:7f:7f:de:
54:92:17:db:10:02:dc:12:47:cb:77:a0:fb:de:24:
b2:41:43:99:80:f5:95:06:d1:ab:f9:c5:45:96:42:
ee:65:a8:9b:3f:09:6f:8b:28:c9:4f:20:7a:49:dc:
2c:ef:3a:85:89:e9:2f:92:4c:c1:c4:95:38:26:a1:
a8:18:6a:b6:cd:37:4e:c7:b5:5e:ce:db:34:22:86:
a3:44:81:7b:6d:da:80:75:bc:c5:10:08:5f:de:76:
16:51:0f:ca:25:d2:95:42:ec:58:3c:ee:c9:2b:7c:
31:cb:64:61:6f:d1:68:9c:73:7b:64:83:ba:11:ad:
d2:46:07:49:52:5a:40:2f:e9:c0:6a:d5:e5:33:0e:
ef:fb:0a:6a:13:45:81:68:e2:bb:7a:5e:a1:06:b8:
78:2b:57:09:c1:ac:fc:d0:02:94:5f:36:97:c5:9e:
f2:f0:69:23:ee:fb:62:55:ff:0f:1f:e6:bd:a7:27:
a4:2c:c5:79:08:44:7b:c0:77:ba:d4:6a:24:e0:4f:
99:62:9b:6c:a8:fe:57:23:31:38:42:d3:d4:4c:c7:
aa:62:ab:8e:3b:53:79:24:11:4e:c9:1d:d1:7e:65:
c4:56:fc:4b:52:b2:8d:24:e0:cd:87:ea:55:f2:8c:
0e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AF:89:E5:B5:BB:70:AF:AA:BA:E3:6E:46:2E:82:16:01:5C:48:B6
X509v3 Authority Key Identifier:
keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/ea-J5bW7cK-quuNuRi6CFgFcSLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ab80:3ed::/48
2a10:ab80:456::/48
Signature Algorithm: sha256WithRSAEncryption
33:30:41:c2:f0:c6:54:21:d6:ad:af:3d:84:35:9b:60:e9:a5:
d5:68:63:fa:f1:be:34:65:cc:52:f7:71:3a:8a:81:83:c9:fb:
53:94:03:e1:90:66:3d:12:8a:b9:02:97:b6:7a:d2:14:01:bc:
e6:f0:44:20:ff:ec:53:27:6b:a5:ac:52:b3:c0:69:0f:3a:47:
06:db:4c:51:e1:33:00:29:d2:24:c8:70:a8:89:5d:df:e6:78:
bc:3c:a8:f9:78:58:68:df:1f:51:e2:84:16:c9:c1:67:cb:2b:
c0:0d:0a:f9:b6:63:3f:a8:d9:e9:28:44:40:bf:fe:df:33:0e:
b3:5e:ca:1e:0e:c0:56:de:fa:ad:25:69:30:db:0f:32:7b:9b:
2f:f1:fa:27:da:c9:f5:be:5a:c9:3c:27:65:af:b7:9b:a2:76:
be:85:69:61:81:49:b6:cc:5c:10:12:fc:f5:6a:d7:96:8d:1a:
42:67:a4:58:fc:fd:fd:dc:1f:b4:97:5f:70:90:75:88:31:9e:
35:f1:3d:9e:97:38:31:d7:c3:e3:b3:7f:1e:02:68:1a:1e:8b:
d7:c2:a2:e3:4b:36:d2:35:2f:8d:0a:d2:42:1c:22:04:a9:2d:
a6:96:a7:a2:ec:70:58:bc:e2:3a:34:46:8b:95:6f:d6:d3:42:
67:b4:45:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:02:52 2026 by rpki-client