Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/eYVNwXua1D1Ko3xW0TJpn5cBE-w.roa
File: eYVNwXua1D1Ko3xW0TJpn5cBE-w.roa (raw, json)
Hash identifier: 6WIsPAllvurnGBABJTKxheRktWFMsdONTLYaXvVgXF4=
Subject key identifier: 79:85:4D:C1:7B:9A:D4:3D:4A:A3:7C:56:D1:32:69:9F:97:01:13:EC
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01A0EC5D15D83D1CF59483741980D5E49BCE
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/eYVNwXua1D1Ko3xW0TJpn5cBE-w.roa
Signing time: Tue 29 Sep 2026 08:51:58 +0000
ROA not before: Tue 29 Sep 2026 08:51:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402933
IP address blocks: 2a13:bec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:5d:15:d8:3d:1c:f5:94:83:74:19:80:d5:e4:9b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Sep 29 08:51:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79854dc17b9ad43d4aa37c56d132699f970113ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:84:49:4e:4c:90:c0:67:ae:db:ac:a6:da:
bb:68:85:85:54:ea:84:64:56:79:77:d5:30:13:17:
43:3d:d3:c4:61:a5:43:50:64:7e:1c:15:34:20:be:
35:a4:6a:73:50:3b:c5:3e:6f:2e:e4:da:e4:b9:96:
62:89:57:8a:b6:77:d7:dd:fd:28:7b:67:ee:ad:25:
c6:20:fa:ac:68:17:8a:43:71:6e:d3:6e:12:ab:c4:
df:ca:01:52:fa:d3:94:6f:fd:03:ef:73:b1:45:7e:
19:64:a6:23:ac:fe:c6:47:7c:4d:ac:5b:bd:d9:cc:
ef:b6:c2:d2:13:73:0e:f4:9c:8b:ca:61:c5:06:61:
67:c0:c9:05:e2:8d:9c:9c:56:3c:9e:0a:c0:f3:c8:
cc:9e:ea:81:e6:c5:4a:2b:b8:a8:a5:6d:ed:f5:ec:
e7:98:72:23:51:44:fa:1a:41:9a:09:77:17:7d:75:
2b:78:1c:8b:8e:bb:0c:16:a9:d1:83:bf:b8:96:52:
c2:09:ce:d8:84:e3:11:b1:6b:e5:61:25:49:67:9c:
8e:82:96:85:4b:3a:5a:5d:0e:f4:7f:65:aa:c5:f6:
b8:1e:d3:1a:bc:28:a2:aa:2d:d0:4a:59:55:9d:c1:
ce:3f:57:11:3f:6f:ea:8c:f5:bd:1e:db:cd:4e:dd:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:85:4D:C1:7B:9A:D4:3D:4A:A3:7C:56:D1:32:69:9F:97:01:13:EC
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/eYVNwXua1D1Ko3xW0TJpn5cBE-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bec0::/29
Signature Algorithm: sha256WithRSAEncryption
c1:58:b3:9e:1b:24:1a:c1:64:ed:5b:78:3f:a7:ee:98:93:d8:
f0:0d:4e:7f:59:40:8a:29:26:29:6f:ee:75:50:8e:2e:0c:0c:
74:2c:d4:b3:48:fe:fa:8a:fe:6e:1a:05:99:be:b5:7e:b0:c2:
6e:e2:6d:6b:43:0e:df:26:28:d5:98:9f:7b:9b:b6:61:5d:a6:
94:00:10:8d:94:5b:db:20:c3:90:06:03:e9:d3:7b:e1:fc:59:
87:6d:f3:29:65:6d:ea:4c:8f:80:15:3f:05:9d:f9:c6:d1:7b:
66:16:4b:9b:92:65:7f:f5:89:e9:86:1a:fd:8f:da:f5:d6:58:
50:c4:74:52:55:26:fa:b2:28:85:70:1d:e1:70:9f:77:cc:96:
64:c1:a4:09:49:d9:7f:da:58:bd:c7:29:5b:50:ca:cd:ba:0b:
58:f3:2a:51:7a:99:b6:7d:a2:84:d3:99:45:2b:60:94:2a:55:
1b:94:1b:1d:0e:cf:0a:5c:91:ad:dd:ff:ec:2b:62:fe:91:e6:
cf:a1:78:64:07:85:d4:e8:2e:48:92:2e:9c:d2:d4:b8:e9:3f:
b3:d6:37:a9:77:73:8f:56:b1:9a:83:de:ce:24:91:95:c2:7e:
90:56:6d:a1:86:a1:20:25:1e:aa:36:9c:4a:36:f4:86:e9:81:
02:98:7e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:31:51 2026 by rpki-client