Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/dEXU1zCXI97_kXwgWRbuG-NJSaM.roa
File: dEXU1zCXI97_kXwgWRbuG-NJSaM.roa (raw, json)
Hash identifier: HKxSXZut7NhUHW9h7uVaLlNjMtbPzCKrMiMKM2A7XBI=
Subject key identifier: 74:45:D4:D7:30:97:23:DE:FF:91:7C:20:59:16:EE:1B:E3:49:49:A3
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01A020AAED5727886D30E501F2F64489794B
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/dEXU1zCXI97_kXwgWRbuG-NJSaM.roa
Signing time: Thu 20 Aug 2026 19:34:27 +0000
ROA not before: Thu 20 Aug 2026 19:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401496
IP address blocks: 2a13:bec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:aa:ed:57:27:88:6d:30:e5:01:f2:f6:44:89:79:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Aug 20 19:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7445d4d7309723deff917c205916ee1be34949a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:df:73:53:c5:70:36:53:8e:ad:ea:07:db:27:
d1:b4:65:f9:67:43:f0:00:19:65:4f:c5:7c:fa:37:
6a:ec:29:31:17:8a:de:8d:24:44:65:1b:55:5b:55:
f4:84:a7:bc:50:90:0a:56:a2:b7:ac:6d:0d:7e:d5:
75:5b:40:e2:a7:46:e1:6d:4a:a1:7f:a4:67:6d:21:
50:6a:14:46:ce:9c:0b:2b:7f:c6:d1:b9:9a:c5:48:
f1:af:fd:a3:cb:94:dc:1c:c5:01:a7:ca:d0:67:4e:
5f:08:b6:00:f3:ab:08:35:d0:8c:59:94:ff:25:7d:
8d:77:87:cf:bc:43:a2:8a:80:4f:fc:f6:eb:83:86:
65:d9:a3:16:ca:d3:e5:c8:f5:13:7d:88:dd:e6:37:
5e:9d:bc:bb:0e:40:c3:a8:ce:4d:4f:7e:c6:44:ae:
8a:36:17:b9:b4:1a:19:4c:b2:70:5b:74:ee:ab:65:
90:b2:34:8e:dc:de:44:f2:68:c9:d5:ed:08:5a:96:
c8:41:64:54:87:37:0d:41:d5:d2:f9:de:83:28:96:
7f:43:25:39:46:30:e5:75:41:d2:1a:bd:6c:60:9c:
77:20:d1:00:71:30:66:f3:41:f6:37:87:a3:ac:bb:
a1:bf:4a:56:f1:f5:7c:74:c4:17:8e:57:61:ae:fe:
d9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:45:D4:D7:30:97:23:DE:FF:91:7C:20:59:16:EE:1B:E3:49:49:A3
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/dEXU1zCXI97_kXwgWRbuG-NJSaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bec0::/29
Signature Algorithm: sha256WithRSAEncryption
a5:a3:c3:a3:0d:8d:68:4e:8a:a9:de:4b:78:16:b9:28:87:1b:
88:6c:c8:46:62:9c:27:6a:cd:c0:d3:db:f2:6e:06:5d:1a:d7:
1d:62:10:b8:1e:7a:72:df:c9:8b:b9:d3:2d:8b:40:4f:b5:4c:
0b:3f:1d:9d:67:70:a7:d0:bb:49:4a:43:5b:03:2d:ad:11:d0:
f5:06:4f:c5:92:0c:09:42:40:08:c6:3a:32:ac:d8:3f:2f:f8:
30:96:83:72:e9:87:99:e9:2e:88:74:13:92:19:ef:74:28:90:
77:3a:f6:75:16:fb:ff:a1:f5:93:51:11:f8:bd:35:70:70:58:
3b:04:10:ec:a4:20:92:f6:88:0e:68:e4:4c:34:e2:97:7e:b5:
36:a8:77:08:fd:95:d3:45:de:e5:64:13:04:46:32:87:87:4a:
18:56:af:f5:23:ed:fd:73:61:f0:1f:de:4f:77:b2:11:06:3b:
cd:19:bd:5c:f4:a9:57:71:be:8d:7f:fa:07:3f:fa:b6:57:cf:
41:c2:db:42:67:0a:a1:51:ef:0e:af:b6:a6:ee:ce:df:3c:10:
3c:07:98:6d:aa:ff:91:4c:0d:c2:27:03:cc:3f:46:42:91:aa:
eb:0b:fd:bb:0e:23:85:01:a9:ff:fa:f5:5e:ff:09:6e:4e:92:
24:5e:0d:07
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaAgqu1XJ4htMOUB8vZEiXlLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjYwODIwMTkzNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDQ1ZDRkNzMwOTcyM2RlZmY5MTdjMjA1OTE2ZWUxYmUzNDk0OWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t9zU8VwNlOOreoH2yfRtGX5Z0Pw
ABllT8V8+jdq7CkxF4rejSREZRtVW1X0hKe8UJAKVqK3rG0NftV1W0Dip0bhbUqh
f6RnbSFQahRGzpwLK3/G0bmaxUjxr/2jy5TcHMUBp8rQZ05fCLYA86sINdCMWZT/
JX2Nd4fPvEOiioBP/Pbrg4Zl2aMWytPlyPUTfYjd5jdenby7DkDDqM5NT37GRK6K
Nhe5tBoZTLJwW3Tuq2WQsjSO3N5E8mjJ1e0IWpbIQWRUhzcNQdXS+d6DKJZ/QyU5
RjDldUHSGr1sYJx3INEAcTBm80H2N4ejrLuhv0pW8fV8dMQXjldhrv7Z7wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHRF1NcwlyPe/5F8IFkW7hvjSUmjMB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvZEVYVTF6Q1hJOTdfa1h3Z1dSYnVHLU5KU2FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhO+wDAN
BgkqhkiG9w0BAQsFAAOCAQEApaPDow2NaE6Kqd5LeBa5KIcbiGzIRmKcJ2rNwNPb
8m4GXRrXHWIQuB56ct/Ji7nTLYtAT7VMCz8dnWdwp9C7SUpDWwMtrRHQ9QZPxZIM
CUJACMY6MqzYPy/4MJaDcumHmekuiHQTkhnvdCiQdzr2dRb7/6H1k1ER+L01cHBY
OwQQ7KQgkvaIDmjkTDTil361Nqh3CP2V00Xe5WQTBEYyh4dKGFav9SPt/XNh8B/e
T3eyEQY7zRm9XPSpV3G+jX/6Bz/6tlfPQcLbQmcKoVHvDq+2pu7O3zwQPAeYbar/
kUwNwicDzD9GQpGq6wv9uw4jhQGp//r1Xv8Jbk6SJF4NBw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 03:50:38 2026 by rpki-client