Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/7vpwKA_xkK2KFRVK-1Bl0paJeQo.roa
File: 7vpwKA_xkK2KFRVK-1Bl0paJeQo.roa (raw, json)
Hash identifier: VRkqBPN/9BIZfGsddu7EhNguv5Ir9sO9OazfQFdIK6s=
Subject key identifier: EE:FA:70:28:0F:F1:90:AD:8A:15:15:4A:FB:50:65:D2:96:89:79:0A
Certificate issuer: /CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Certificate serial: 019C6684EB6F90B31817764E58E0620ED699
Authority key identifier: B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/7vpwKA_xkK2KFRVK-1Bl0paJeQo.roa
Signing time: Mon 16 Feb 2026 12:55:12 +0000
ROA not before: Mon 16 Feb 2026 12:55:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201159
IP address blocks: 2001:67c:2dd4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:84:eb:6f:90:b3:18:17:76:4e:58:e0:62:0e:d6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Validity
Not Before: Feb 16 12:55:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eefa70280ff190ad8a15154afb5065d29689790a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:d6:74:19:19:e8:61:15:d6:7b:83:0b:40:
e5:75:ce:29:e0:37:5f:2f:bc:47:96:e7:4c:35:aa:
0b:40:b8:5b:6b:fe:f5:f8:b3:95:75:96:e3:4d:b0:
d5:81:d0:4c:ac:20:50:0e:43:7b:8a:76:46:14:d0:
ff:31:b9:71:ce:bc:61:17:46:ab:be:34:6e:1b:83:
36:a6:14:1d:e3:8c:c7:49:97:f5:d6:57:15:a7:27:
b1:c9:4f:0a:77:41:9d:20:f2:b2:fd:e4:60:ed:50:
df:90:c3:81:bc:24:29:f2:94:d8:61:93:a3:3e:23:
a7:11:80:b9:93:0c:3f:93:a8:95:76:d1:cd:16:57:
0b:37:fa:e2:a8:f5:08:e6:8a:d5:74:0a:43:d3:c1:
7d:97:d4:93:6a:fb:5a:13:77:89:cf:d9:01:19:37:
30:93:75:cf:f9:e3:2d:ce:44:b5:d9:47:b9:a4:6a:
38:6f:f8:8f:62:66:74:cc:f9:ae:e7:2f:26:ae:e2:
fa:e2:2a:29:9f:b0:7e:99:b1:42:19:16:5f:1c:a6:
15:f3:ed:cd:68:d7:64:5d:6a:69:93:43:37:e3:8f:
39:52:a8:72:ff:14:52:f4:3f:3d:16:7f:19:96:48:
7a:13:16:53:06:6d:e5:d0:74:f0:82:34:2e:9c:5d:
fb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FA:70:28:0F:F1:90:AD:8A:15:15:4A:FB:50:65:D2:96:89:79:0A
X509v3 Authority Key Identifier:
keyid:B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/7vpwKA_xkK2KFRVK-1Bl0paJeQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2dd4::/48
Signature Algorithm: sha256WithRSAEncryption
51:1d:2b:07:9a:e8:4c:cb:9e:e4:ce:fc:bd:c8:84:59:ad:6a:
07:03:d3:ca:17:0b:9c:ea:27:10:8d:0e:33:09:d9:58:98:93:
55:fa:f3:c6:b5:4f:68:0b:9c:cd:6f:07:2c:39:e4:0c:bb:91:
56:62:fe:a4:a0:3f:e5:2c:3c:9c:8f:5c:93:29:f6:ce:f6:a8:
5c:7d:77:c6:0a:cb:ad:14:eb:8b:f0:c4:29:ce:f0:ac:09:de:
10:f4:d9:e5:da:92:3a:87:5c:c4:14:ac:c7:65:3f:39:f7:bd:
9a:10:0f:18:4e:67:62:65:00:fa:ea:fa:18:ad:5d:93:ac:7f:
d9:a1:b3:91:14:8e:ba:1d:5c:6e:ed:89:b3:d5:8f:48:a1:c5:
0e:0c:b4:76:27:61:44:55:ed:d6:07:d0:7b:c9:03:2e:40:fd:
cc:f8:f9:74:d3:50:57:93:bd:ee:54:27:fc:88:10:4a:9b:85:
2e:95:36:7c:c6:07:52:83:f5:2f:d8:2f:41:1c:0d:8f:9d:7b:
c4:c2:1d:ac:92:5e:13:59:55:2a:b0:51:ab:fe:97:95:fc:d1:
9d:22:5b:3c:20:47:76:52:da:1f:1c:07:c7:52:ed:eb:04:65:
06:e7:cf:c2:cd:3d:e6:37:ca:d4:cb:ab:82:fc:ed:6b:45:ed:
f0:04:8f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:09:57 2026 by rpki-client