Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/fPjMSTxjt-Lds7x8yst7wVIij2k.roa
File: fPjMSTxjt-Lds7x8yst7wVIij2k.roa (raw, json)
Hash identifier: Glki/jEVDEe3pqTjGCU9qB4e+DKHJ+9x2LukEYA8hWE=
Subject key identifier: 7C:F8:CC:49:3C:63:B7:E2:DD:B3:BC:7C:CA:CB:7B:C1:52:22:8F:69
Certificate issuer: /CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
Certificate serial: 019ECA34B27B6976DDE4F23128DB9D0AE4CD
Authority key identifier: E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/fPjMSTxjt-Lds7x8yst7wVIij2k.roa
Signing time: Mon 15 Jun 2026 07:35:11 +0000
ROA not before: Mon 15 Jun 2026 07:35:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 2a05:2ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:34:b2:7b:69:76:dd:e4:f2:31:28:db:9d:0a:e4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
Validity
Not Before: Jun 15 07:35:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cf8cc493c63b7e2ddb3bc7ccacb7bc152228f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ab:48:05:34:c6:00:12:3b:5c:e4:42:b1:be:
b1:4e:aa:f6:3f:2a:77:51:84:51:4b:67:25:41:c1:
b0:54:da:92:8c:0e:fa:6e:4e:ec:f4:0b:88:8b:f9:
4e:d2:d5:9a:a7:a7:b9:4f:0b:c8:e6:42:71:7a:79:
ac:aa:da:b2:a4:db:e3:06:81:45:8a:46:2e:db:49:
b4:ed:0d:79:01:09:20:61:a1:14:22:f0:02:55:df:
57:48:c5:7d:43:c6:9a:e7:7b:87:a6:f2:7e:bd:f2:
c7:76:53:43:2d:c6:29:b7:d1:92:c7:b5:82:88:35:
09:8e:c3:fe:e4:6f:b9:ed:38:c3:26:e3:df:65:70:
87:80:de:d6:09:88:99:98:1c:c1:db:b2:7e:d3:ec:
6f:06:c0:a6:95:3b:a4:bd:03:b8:ac:bc:96:6f:c7:
44:a8:4e:d4:35:00:fc:6e:5c:91:1b:2f:aa:4c:c6:
c1:96:10:50:af:5e:e1:1b:28:3c:f6:89:27:90:64:
9e:4b:80:43:ce:a9:58:b6:8e:fd:fb:31:78:69:07:
e4:03:1b:c0:d0:05:82:6b:df:0a:5c:ee:22:7e:86:
6b:22:e0:3d:44:3f:dd:02:e2:ed:bc:3b:f3:77:b0:
4e:fd:e4:97:21:1f:fa:59:27:86:45:2c:ca:24:06:
5f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F8:CC:49:3C:63:B7:E2:DD:B3:BC:7C:CA:CB:7B:C1:52:22:8F:69
X509v3 Authority Key Identifier:
keyid:E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/fPjMSTxjt-Lds7x8yst7wVIij2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:2ac0::/29
Signature Algorithm: sha256WithRSAEncryption
7a:46:f8:f1:55:fc:f1:74:bd:27:ec:90:0c:b0:63:0c:b7:32:
5b:95:63:d9:c1:f5:3c:3c:51:cd:5b:2c:1d:9f:38:18:fe:e9:
c7:f8:ba:65:92:5c:b6:74:c8:7a:62:72:5e:8f:71:b5:4f:cc:
c7:45:58:b6:c2:1e:f5:11:0b:6c:19:80:6b:86:b5:f9:cc:1e:
b5:92:f6:31:5c:b2:1f:36:7f:40:d2:c9:a0:5e:ac:8a:a2:f0:
4a:f8:d3:12:37:a1:ce:bb:74:0d:ff:23:98:90:c8:a2:fb:d4:
69:30:b3:c1:e5:e1:43:b1:46:99:39:81:5c:82:b6:6e:83:de:
92:71:80:5d:42:f9:35:eb:96:70:06:80:ff:03:75:09:72:c9:
e3:b2:19:b2:df:b6:0a:1b:f1:d9:42:37:d6:77:b2:f2:c6:d4:
90:b3:76:ae:91:4c:28:e7:2c:5a:cf:69:76:a3:c5:bc:73:da:
13:d0:8e:49:ee:29:27:53:c6:e7:01:31:5b:89:b0:cb:e2:ce:
e7:c7:ff:cf:fd:ea:41:9c:dd:93:28:36:6b:8c:8e:4f:31:42:
1e:a6:49:00:a1:d1:d1:6e:02:a8:e0:d9:88:c9:82:10:04:3f:
b7:5c:89:14:bc:23:77:f5:b4:91:aa:a6:ab:97:d2:3f:a8:51:
63:98:5a:90
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ7KNLJ7aXbd5PIxKNudCuTNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YmQwZDlhYThjNzQzY2RhMTgyZjAwNjY4NTgzYTQ2ZTYw
MGMzMmQwHhcNMjYwNjE1MDczNTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2Y4Y2M0OTNjNjNiN2UyZGRiM2JjN2NjYWNiN2JjMTUyMjI4ZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KtIBTTGABI7XORCsb6xTqr2Pyp3
UYRRS2clQcGwVNqSjA76bk7s9AuIi/lO0tWap6e5TwvI5kJxenmsqtqypNvjBoFF
ikYu20m07Q15AQkgYaEUIvACVd9XSMV9Q8aa53uHpvJ+vfLHdlNDLcYpt9GSx7WC
iDUJjsP+5G+57TjDJuPfZXCHgN7WCYiZmBzB27J+0+xvBsCmlTukvQO4rLyWb8dE
qE7UNQD8blyRGy+qTMbBlhBQr17hGyg89oknkGSeS4BDzqlYto79+zF4aQfkAxvA
0AWCa98KXO4ifoZrIuA9RD/dAuLtvDvzd7BO/eSXIR/6WSeGRSzKJAZf2wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHz4zEk8Y7fi3bO8fMrLe8FSIo9pMB8GA1UdIwQY
MBaAFOi9DZqox0PNoYLwBmhYOkbmAMMtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkwwTm1xakhRODJoZ3ZBR2FGZzZSdVlBd3kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jODI0ZDEtOGNmZS00NDBlLTliNWMt
ODg5MjQzODY5Njc5LzEvZlBqTVNUeGp0LUxkczd4OHlzdDd3VklpajJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jODI0ZDEtOGNmZS00NDBlLTliNWMtODg5MjQzODY5Njc5
LzEvNkwwTm1xakhRODJoZ3ZBR2FGZzZSdVlBd3kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgUqwDAN
BgkqhkiG9w0BAQsFAAOCAQEAekb48VX88XS9J+yQDLBjDLcyW5Vj2cH1PDxRzVss
HZ84GP7px/i6ZZJctnTIemJyXo9xtU/Mx0VYtsIe9RELbBmAa4a1+cwetZL2MVyy
HzZ/QNLJoF6siqLwSvjTEjehzrt0Df8jmJDIovvUaTCzweXhQ7FGmTmBXIK2boPe
knGAXUL5NeuWcAaA/wN1CXLJ47IZst+2Chvx2UI31ney8sbUkLN2rpFMKOcsWs9p
dqPFvHPaE9COSe4pJ1PG5wExW4mwy+LO58f/z/3qQZzdkyg2a4yOTzFCHqZJAKHR
0W4CqODZiMmCEAQ/t1yJFLwjd/W0kaqmq5fSP6hRY5hakA==
-----END CERTIFICATE-----
Generated at Sun Jul 5 12:32:03 2026 by rpki-client