Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/iFM7H25XsSx059D3mjtnWhxVPxc.roa
File: iFM7H25XsSx059D3mjtnWhxVPxc.roa (raw, json)
Hash identifier: udyBSE1gieDC+I/f9zEdjYiTYwaNPmtEekxBRhSF9Qk=
Subject key identifier: 88:53:3B:1F:6E:57:B1:2C:74:E7:D0:F7:9A:3B:67:5A:1C:55:3F:17
Certificate issuer: /CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Certificate serial: 01A00A8D4D7E132583043E1ABC4A11690A91
Authority key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/iFM7H25XsSx059D3mjtnWhxVPxc.roa
Signing time: Sun 16 Aug 2026 12:30:27 +0000
ROA not before: Sun 16 Aug 2026 12:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a07:eb80::/48 maxlen: 48
2a07:eb80:1::/48 maxlen: 48
2a07:eb80:2::/48 maxlen: 48
2a07:eb80:3::/48 maxlen: 48
2a07:eb80:4::/48 maxlen: 48
2a07:eb81::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0a:8d:4d:7e:13:25:83:04:3e:1a:bc:4a:11:69:0a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Validity
Not Before: Aug 16 12:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88533b1f6e57b12c74e7d0f79a3b675a1c553f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:68:5e:2d:75:6d:b8:3e:14:99:28:6a:2d:
f7:5c:2d:5d:15:45:6d:78:76:3e:bf:fc:1d:0a:be:
cb:e9:26:6c:bf:b5:13:e0:db:a9:d5:7e:c6:24:81:
b3:8c:26:d0:d1:d1:d7:7a:bf:68:5d:10:c2:7c:66:
23:10:89:bb:7c:ca:6e:97:3a:fc:34:7d:12:4f:96:
7e:3a:ee:28:c0:5e:1a:fd:15:fb:5f:9f:af:8b:4b:
ce:33:56:aa:03:09:13:0b:aa:30:64:dc:de:83:0b:
67:80:1f:61:ca:8f:c9:01:10:2e:a6:1f:7a:74:8c:
15:af:f5:50:23:0d:bf:7c:0e:29:45:27:2b:9c:14:
41:13:77:76:f5:85:35:99:04:71:0b:5e:42:19:22:
81:32:a2:d5:44:6e:22:f6:80:95:cb:bb:b7:35:d9:
e0:d6:20:f7:cc:6b:9c:f7:97:4e:eb:07:1b:4a:0b:
21:f5:ab:6b:0f:2c:d4:25:50:97:0e:63:97:d8:35:
11:90:e1:e3:9d:2f:93:00:72:0e:d1:ae:c0:d6:61:
c6:6b:00:02:9c:fd:32:03:d4:3c:0d:c1:5e:d8:db:
0a:ca:02:25:10:73:2c:16:bb:33:98:78:a1:c7:3a:
74:bc:e4:27:d2:08:5f:58:f5:06:eb:71:5b:8c:7d:
35:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:53:3B:1F:6E:57:B1:2C:74:E7:D0:F7:9A:3B:67:5A:1C:55:3F:17
X509v3 Authority Key Identifier:
keyid:12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/iFM7H25XsSx059D3mjtnWhxVPxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:eb80::-2a07:eb80:4:ffff:ffff:ffff:ffff:ffff
2a07:eb81::/44
Signature Algorithm: sha256WithRSAEncryption
54:d7:60:89:71:1a:10:db:ff:31:f7:4b:00:21:2e:63:84:91:
a1:83:04:93:36:42:c7:d1:98:6d:ab:61:0c:8f:62:e7:44:cd:
08:41:c4:d0:28:2e:19:ca:3a:0f:4b:0a:87:97:22:d5:c2:51:
22:66:66:51:e9:8f:80:77:09:a8:e2:ed:8d:ee:fd:58:32:e8:
d0:71:94:a6:ea:0c:70:c1:9c:e7:42:f2:87:8b:0e:3b:95:c9:
2c:0f:a1:f0:d4:f3:c6:8b:69:a5:cd:99:53:5b:40:52:53:cb:
2d:9b:d8:2c:a1:7f:dd:5c:a7:0c:3a:94:53:81:a4:ac:af:6e:
80:4f:09:9c:72:1d:ce:5c:52:64:b1:8c:f9:fa:b7:78:48:04:
8f:3d:ea:90:ad:b3:57:94:65:c5:09:f4:cb:09:0a:15:4d:3c:
4b:cc:be:08:89:93:a5:d8:5c:cf:f9:ff:e4:5a:74:64:8c:e4:
10:d0:00:67:ea:fa:4b:77:12:d0:b5:80:c8:71:1f:de:13:e8:
97:28:c4:c6:1c:41:44:c3:55:db:c3:63:aa:6a:09:33:35:96:
8b:80:74:50:30:bc:0c:67:8f:82:f1:5a:cb:db:db:a7:87:af:
d0:5e:1b:89:d6:69:cc:5a:f4:7e:29:ff:ab:55:05:4a:09:97:
9b:00:06:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 02:51:53 2026 by rpki-client