Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/eKsVHafGSonPeHmNusKuuAbkFJs.roa
File: eKsVHafGSonPeHmNusKuuAbkFJs.roa (raw, json)
Hash identifier: C2OLrBa79noi11WfZnejZ/QDU5Tas1qJYVdI9e8SwOM=
Subject key identifier: 78:AB:15:1D:A7:C6:4A:89:CF:78:79:8D:BA:C2:AE:B8:06:E4:14:9B
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019F172982301A6F708822BEC06B79DE0AEB
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/eKsVHafGSonPeHmNusKuuAbkFJs.roa
Signing time: Tue 30 Jun 2026 06:13:43 +0000
ROA not before: Tue 30 Jun 2026 06:13:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a0e:d300::/29 maxlen: 29
2a0f:89c0::/29 maxlen: 29
2a0f:e3c0::/29 maxlen: 29
2a10:7ac0::/29 maxlen: 29
2a13:b740::/29 maxlen: 29
2a13:bd40::/29 maxlen: 29
2a13:be40::/29 maxlen: 29
2a13:bec0::/29 maxlen: 29
2a13:d1c0::/29 maxlen: 29
2a13:dd40::/29 maxlen: 29
2a13:dfc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 00:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:29:82:30:1a:6f:70:88:22:be:c0:6b:79:de:0a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jun 30 06:13:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78ab151da7c64a89cf78798dbac2aeb806e4149b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:ee:86:58:0d:c6:8a:71:6a:20:c5:ae:1b:
50:f2:f1:5f:0b:15:0d:a7:ec:cf:82:2d:af:b7:cf:
bb:b0:db:41:f0:63:9d:28:c6:15:4e:82:33:63:f5:
39:36:59:ce:e3:0c:51:2d:df:1e:85:72:78:8c:a2:
dd:1b:60:55:cd:ed:43:d7:1b:90:3f:c4:06:10:72:
5a:30:ec:64:4f:9c:af:e5:9a:99:4a:a5:6b:a3:ab:
9b:5d:07:78:9d:f6:df:bb:25:a8:29:15:96:b4:25:
20:e9:23:86:d1:34:72:37:e9:f4:84:6f:30:cd:5d:
49:f4:94:5e:14:ce:98:29:8d:31:07:3e:8e:a5:f5:
6c:de:19:c2:f8:02:4c:2a:18:b2:2f:c4:db:57:91:
db:0d:24:0b:b6:35:05:52:04:85:4f:4c:21:78:a1:
99:2a:8d:35:cf:af:eb:2b:bb:4b:86:78:2d:b8:9c:
c8:84:a2:d7:e0:54:c6:be:ea:c0:b1:62:ac:fc:ae:
68:b0:09:92:eb:bb:41:9f:64:40:aa:b1:22:82:f7:
22:18:a4:87:e8:f0:ed:39:3d:94:17:cc:cc:25:28:
b6:23:c2:f5:f8:1a:58:12:28:8b:f6:bf:52:91:2c:
2b:69:08:cb:dc:0c:63:e4:b4:d9:a4:18:60:35:4d:
c6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AB:15:1D:A7:C6:4A:89:CF:78:79:8D:BA:C2:AE:B8:06:E4:14:9B
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/eKsVHafGSonPeHmNusKuuAbkFJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d300::/29
2a0f:89c0::/29
2a0f:e3c0::/29
2a10:7ac0::/29
2a13:b740::/29
2a13:bd40::/29
2a13:be40::/29
2a13:bec0::/29
2a13:d1c0::/29
2a13:dd40::/29
2a13:dfc0::/29
Signature Algorithm: sha256WithRSAEncryption
2d:8a:65:3b:eb:df:79:8b:28:ed:7e:27:0c:33:75:c9:85:99:
e7:89:d2:87:03:66:5c:51:8e:89:3c:96:63:a7:c4:17:97:2a:
a5:31:34:14:6b:23:72:e0:cb:03:c6:b3:8b:ec:b9:5c:93:1e:
cc:67:d0:49:6f:8f:08:57:a4:e2:21:34:4a:1b:71:d0:b3:4b:
0b:45:22:a3:70:f3:2c:08:8d:02:a5:5b:98:1f:7e:81:c4:04:
3a:59:01:ac:80:4f:a6:e0:12:70:fe:05:4b:8d:c1:58:1e:34:
ad:e6:ba:65:aa:24:8b:aa:05:d9:3a:57:09:f7:26:18:6a:40:
5b:11:07:a5:1c:e2:f8:e7:83:9a:48:f8:f2:bf:01:28:a3:fc:
57:43:d1:91:3b:a5:b9:a3:97:a1:c8:55:18:21:78:d3:69:f1:
cb:4b:e4:e0:2b:8b:83:a8:7e:c1:24:bc:74:3c:f6:60:8b:f2:
eb:93:c8:32:62:f1:4a:a3:ea:4d:b4:7f:3e:b5:11:57:2a:a7:
fc:40:62:c7:b6:b8:49:26:ce:7c:78:c9:75:d0:f9:0e:5d:cc:
2c:22:68:a5:1d:b3:52:54:e4:bb:99:20:11:4f:f0:80:3c:c5:
ba:11:f4:8c:1a:0f:47:30:0b:86:c9:cf:66:5c:f2:38:f0:48:
88:ca:1d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:18 2026 by rpki-client