Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/69dyOwruRqj66SetLH027OeIV3c.roa
File: 69dyOwruRqj66SetLH027OeIV3c.roa (raw, json)
Hash identifier: HCxhftpBnIA2rFHXS8WEzRsnIrsGSyzbbtWPmOSrBwU=
Subject key identifier: EB:D7:72:3B:0A:EE:46:A8:FA:E9:27:AD:2C:7D:36:EC:E7:88:57:77
Certificate issuer: /CN=7976a73b7c13a966d953bd6893c44285fc24efef
Certificate serial: 01A1045214FF713F94080E285D7061069733
Authority key identifier: 79:76:A7:3B:7C:13:A9:66:D9:53:BD:68:93:C4:42:85:FC:24:EF:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXanO3wTqWbZU71ok8RChfwk7-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/69dyOwruRqj66SetLH027OeIV3c.roa
Signing time: Sun 04 Oct 2026 00:30:50 +0000
ROA not before: Sun 04 Oct 2026 00:30:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 2001:678:11c8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXanO3wTqWbZU71ok8RChfwk7-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:52:14:ff:71:3f:94:08:0e:28:5d:70:61:06:97:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976a73b7c13a966d953bd6893c44285fc24efef
Validity
Not Before: Oct 4 00:30:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebd7723b0aee46a8fae927ad2c7d36ece7885777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:de:86:68:42:06:d4:c7:d9:46:fe:ef:11:0f:
6b:d0:98:1d:fa:d4:f9:d5:c0:a3:38:35:a2:6a:2a:
b6:79:ef:89:66:39:2c:55:ed:8c:94:63:bf:1b:4d:
69:24:00:80:83:43:98:37:9f:1b:f3:fb:ba:dd:f6:
b0:78:e6:98:f4:a8:9d:94:72:28:fa:18:36:c8:85:
83:3d:35:ad:ae:46:42:1d:4f:7f:05:e2:f9:91:bb:
b6:12:42:1d:1d:4c:16:1e:2a:28:bf:1e:5a:b1:f6:
c4:2f:0e:5d:f8:69:ca:78:11:1b:a2:92:eb:b1:71:
91:78:38:a9:53:bf:88:39:8b:41:da:f9:5f:26:ff:
e8:d8:db:5a:44:05:ac:97:b0:e5:d1:06:7d:49:de:
b0:d0:ea:32:44:d0:13:a1:1f:17:ad:5d:db:08:5b:
e8:49:1e:48:f8:53:21:39:6f:15:23:1e:d0:75:b0:
ce:10:82:7f:e5:a2:9e:e1:37:43:3c:cb:b2:12:bf:
0c:77:ec:61:c8:0f:23:a7:d3:98:0e:7c:b1:3f:4b:
af:c1:3e:0c:76:8b:b6:c3:54:77:c2:56:c5:26:1f:
ea:d2:d0:0b:a3:48:19:4a:5a:d6:81:f1:9b:1a:71:
58:83:fd:f7:ed:25:15:3b:4d:0a:64:f0:17:87:c8:
1e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D7:72:3B:0A:EE:46:A8:FA:E9:27:AD:2C:7D:36:EC:E7:88:57:77
X509v3 Authority Key Identifier:
keyid:79:76:A7:3B:7C:13:A9:66:D9:53:BD:68:93:C4:42:85:FC:24:EF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXanO3wTqWbZU71ok8RChfwk7-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/69dyOwruRqj66SetLH027OeIV3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:11c8::/48
Signature Algorithm: sha256WithRSAEncryption
73:eb:4b:4e:ad:e2:c6:ef:69:1d:b5:80:b3:26:8e:86:4a:d9:
13:a8:f8:f7:00:2b:35:99:30:20:bd:ec:44:06:c9:8e:a8:28:
19:00:aa:cc:66:9b:af:f4:f3:6b:d2:f2:15:79:8f:77:88:78:
c0:d0:56:ff:e7:5b:0d:e0:73:6f:a7:70:db:8e:ba:55:8d:55:
ea:f4:7a:68:77:d5:49:ba:f9:96:da:e9:c8:fd:9e:2f:d4:51:
18:bb:ef:73:cd:99:6c:96:a3:8b:cf:1d:37:d4:95:96:6f:74:
93:08:f4:5c:5e:a6:26:d1:0c:fb:90:ed:b3:d7:29:d6:ff:51:
10:6f:e7:de:d5:1c:f9:3b:e1:66:f7:c1:aa:f4:8b:f7:06:82:
eb:a9:d1:24:ae:e1:ef:b7:64:de:aa:22:46:aa:70:d4:b6:61:
2b:ba:91:51:14:c1:57:5c:27:79:5a:6e:1f:35:fa:70:96:78:
26:db:fe:91:57:b9:b7:82:73:7d:48:89:c9:f8:26:b5:f4:01:
80:23:1b:86:b8:c1:7f:e8:39:f0:85:7e:7e:48:83:21:92:64:
0d:35:23:4c:1d:6a:e5:2b:a4:52:b6:39:ee:0d:7f:26:68:cb:
71:85:1d:3b:2b:b5:a5:29:dd:1f:20:82:9d:80:28:d2:33:b8:
c6:96:9f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:46:47 2026 by rpki-client