Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/d7Aas885l3KjzbxzDRzrGQP7qlo.roa
File: d7Aas885l3KjzbxzDRzrGQP7qlo.roa (raw, json)
Hash identifier: 49B2bk75lbQU3fm+06dc2qLUyXkN1RUhU0NMkmUUNbQ=
Subject key identifier: 77:B0:1A:B3:CF:39:97:72:A3:CD:BC:73:0D:1C:EB:19:03:FB:AA:5A
Certificate issuer: /CN=eee49dd9619dbcfe0e7c497d679c8a0e99b45a69
Certificate serial: 019F2368EBAD337EA59C5C7EEBCE4CB1C695
Authority key identifier: EE:E4:9D:D9:61:9D:BC:FE:0E:7C:49:7D:67:9C:8A:0E:99:B4:5A:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/d7Aas885l3KjzbxzDRzrGQP7qlo.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51396
IP address blocks: 2a0a:7740::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:eb:ad:33:7e:a5:9c:5c:7e:eb:ce:4c:b1:c6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee49dd9619dbcfe0e7c497d679c8a0e99b45a69
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77b01ab3cf399772a3cdbc730d1ceb1903fbaa5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d2:45:27:de:4f:60:bd:1f:ad:ef:b4:7a:08:
89:8b:ad:99:10:3c:51:08:a7:c2:2e:93:f0:12:9a:
d0:a4:d7:6c:c4:4f:13:ed:b8:69:c8:a4:3b:e7:66:
a7:02:b0:80:96:02:4a:3a:ca:39:73:23:5c:ad:cf:
ef:db:d6:e6:3e:ad:a9:29:54:9b:38:dc:fe:0f:7d:
67:ba:fb:88:79:84:e1:22:6b:df:a1:cd:34:ea:86:
16:fb:2d:cc:7d:da:da:ff:e4:4e:c6:1f:0b:ce:b2:
c4:f6:29:ec:c2:22:d2:39:13:a0:82:29:97:39:e1:
1f:11:49:f8:cf:3b:10:dd:4a:15:df:83:9b:e2:46:
3a:09:99:03:65:53:63:5c:37:5f:38:7c:82:a4:9f:
48:a8:d2:6a:52:65:c9:1a:d3:1b:07:9a:66:82:45:
33:0d:79:94:10:b7:2f:01:8b:a6:94:aa:ea:99:18:
48:9d:b9:7a:a8:01:bb:71:f3:45:b9:ca:86:07:20:
47:85:14:87:b4:bc:2a:3b:98:05:30:f9:bb:2f:ab:
e4:07:de:c3:ea:8b:af:04:d1:9e:0d:f6:e3:84:f0:
d9:9b:67:66:bc:ca:93:42:52:79:4d:cb:13:02:71:
28:85:b5:c2:e1:d5:d6:fc:ee:1d:d5:62:84:6b:91:
6d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B0:1A:B3:CF:39:97:72:A3:CD:BC:73:0D:1C:EB:19:03:FB:AA:5A
X509v3 Authority Key Identifier:
keyid:EE:E4:9D:D9:61:9D:BC:FE:0E:7C:49:7D:67:9C:8A:0E:99:B4:5A:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/d7Aas885l3KjzbxzDRzrGQP7qlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:7740::/48
Signature Algorithm: sha256WithRSAEncryption
05:b7:e9:57:05:6d:42:77:f0:47:8c:2e:bf:21:2c:07:be:20:
46:5f:d9:02:6d:7f:f1:ba:24:9f:02:3d:62:9d:c6:05:a1:ae:
06:34:bf:8f:2e:72:55:fe:8a:72:a7:b5:3e:47:f0:43:ac:87:
c6:03:8a:19:20:eb:6a:14:c9:23:18:78:cb:ff:b4:1e:8a:e4:
6c:05:e8:4f:45:7e:ec:f9:65:f7:00:9f:1c:fb:dd:e5:20:ea:
32:7b:2f:77:f7:5b:f8:b9:5f:4c:26:fb:bf:69:b9:2a:6a:f7:
68:f9:49:55:59:d2:97:da:e4:2b:53:8a:c3:52:31:3f:22:d7:
80:d3:20:3f:8d:f7:e2:72:25:23:4c:c0:3c:bb:e9:e1:47:1c:
4b:5a:ee:c1:1b:8a:56:8a:a0:24:77:c2:4b:6a:1d:96:76:b0:
ba:5d:8f:5d:6b:8d:d4:bf:80:33:a5:85:cd:22:88:f2:7b:9f:
75:c6:26:f6:12:2e:9c:1d:35:cf:4b:2a:9f:c5:03:25:7b:b0:
05:37:22:00:26:7c:de:05:0e:bd:1d:a6:0d:57:55:b6:3e:60:
5c:47:ae:a4:09:bf:31:68:60:50:db:c9:be:86:e2:fb:0a:cc:
a6:b6:1b:c5:5d:9d:63:49:b2:d7:ce:e3:cf:1b:5d:ad:b7:87:
24:9a:dd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:25:02 2026 by rpki-client