Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ekzjkMyHhSW5xpDUnHa27qGfkLU.roa
File: ekzjkMyHhSW5xpDUnHa27qGfkLU.roa (raw, json)
Hash identifier: xpaQ2baaHXAoLIHbf+b0NBd6A+wEEfmUrVu77pfgxH8=
Subject key identifier: 7A:4C:E3:90:CC:87:85:25:B9:C6:90:D4:9C:76:B6:EE:A1:9F:90:B5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019FC6D72436F05B75D116DCB5B6E189C992
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ekzjkMyHhSW5xpDUnHa27qGfkLU.roa
Signing time: Mon 03 Aug 2026 08:56:56 +0000
ROA not before: Mon 03 Aug 2026 08:56:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 2a10:4a00::/29 maxlen: 29
2a10:7b00::/29 maxlen: 29
2a12:f540::/29 maxlen: 29
2a13:f40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:d7:24:36:f0:5b:75:d1:16:dc:b5:b6:e1:89:c9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 3 08:56:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a4ce390cc878525b9c690d49c76b6eea19f90b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:16:50:5f:67:b1:33:6f:13:d5:75:77:e5:
84:c5:14:0f:29:e9:95:03:a6:c7:86:00:fd:8a:0e:
0f:86:a2:c7:d1:f8:31:a1:40:99:02:9b:4c:66:14:
41:9e:69:d1:63:54:a5:c8:b8:5c:1d:8d:c5:1a:b0:
3d:55:ca:00:7f:70:3b:f4:f0:08:4b:cf:a1:29:11:
73:63:99:e4:f3:cb:fc:5e:b5:1f:57:9c:e7:dc:3c:
07:27:0b:83:90:26:c8:c1:e0:6c:c2:ee:7e:21:51:
68:c5:be:d0:38:5c:ca:09:c2:0f:ca:8d:35:14:97:
69:9e:82:9b:d2:dc:1f:7e:3a:4d:f8:af:91:53:9f:
51:3a:c6:f0:8c:c7:9a:f4:90:02:d1:8f:66:dc:3a:
7e:22:4a:ec:f3:c2:df:9c:ed:26:12:45:04:6e:f9:
d5:17:db:f0:61:87:63:73:29:33:b1:cc:0d:70:d5:
33:0d:12:33:6c:5f:14:ea:a2:81:57:bb:40:e7:51:
86:d4:4a:6d:89:15:2d:a8:f2:25:f5:d9:37:0d:c8:
70:5a:99:38:34:ce:3d:76:28:e2:03:aa:d2:ff:b2:
17:47:f1:14:71:7d:fd:e9:0b:58:9d:15:39:23:f5:
1a:7d:9c:ad:1a:0b:81:cb:86:24:2d:05:ff:b6:0d:
1e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4C:E3:90:CC:87:85:25:B9:C6:90:D4:9C:76:B6:EE:A1:9F:90:B5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ekzjkMyHhSW5xpDUnHa27qGfkLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4a00::/29
2a10:7b00::/29
2a12:f540::/29
2a13:f40::/29
Signature Algorithm: sha256WithRSAEncryption
17:64:2f:d0:24:69:79:91:55:52:f2:7b:4a:05:60:65:f5:75:
35:51:e8:8b:b9:c1:ec:17:eb:13:a7:54:3c:a4:aa:3d:ba:59:
94:c6:90:ca:f4:0d:b7:15:9c:f0:78:53:97:d4:e6:fe:b4:93:
c9:a1:74:d4:a0:e0:fd:00:68:fd:27:09:69:26:20:f3:5e:45:
bf:89:08:07:0b:89:1d:47:41:d2:e1:f2:1a:47:9a:f3:9b:14:
1e:76:c7:2b:2a:49:f8:a9:5b:64:79:5f:e8:60:77:86:d2:3c:
c8:9d:ff:6c:61:e3:71:44:b9:38:fa:f2:a4:24:a5:67:9e:c9:
61:c6:71:81:30:82:e7:31:47:e5:14:66:9c:74:20:e8:f1:7c:
a3:a7:b4:9e:03:97:d8:5d:e7:e8:12:b9:5b:6b:76:46:9c:a6:
80:ae:cb:bd:26:66:dc:66:c1:4a:01:68:c9:92:3e:76:e9:17:
aa:b6:51:74:2e:1a:71:61:d3:6c:1b:90:55:33:4c:d0:db:85:
b3:25:46:26:6e:3d:b1:70:1d:10:0c:47:7d:77:fb:64:cf:3b:
c4:c2:9d:b4:f0:cc:99:9b:f4:b9:dd:8a:40:1b:72:1e:4f:a0:
13:54:ce:a9:96:e1:22:6a:3e:dd:a1:f4:a9:db:d8:2c:4d:ce:
70:2f:5b:a5
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZ/G1yQ28Ft10RbctbbhicmSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwODAzMDg1NjU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTRjZTM5MGNjODc4NTI1YjljNjkwZDQ5Yzc2YjZlZWExOWY5MGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY8WUF9nsTNvE9V1d+WExRQPKemV
A6bHhgD9ig4PhqLH0fgxoUCZAptMZhRBnmnRY1SlyLhcHY3FGrA9VcoAf3A79PAI
S8+hKRFzY5nk88v8XrUfV5zn3DwHJwuDkCbIweBswu5+IVFoxb7QOFzKCcIPyo01
FJdpnoKb0twffjpN+K+RU59ROsbwjMea9JAC0Y9m3Dp+Ikrs88LfnO0mEkUEbvnV
F9vwYYdjcykzscwNcNUzDRIzbF8U6qKBV7tA51GG1EptiRUtqPIl9dk3DchwWpk4
NM49dijiA6rS/7IXR/EUcX396QtYnRU5I/UafZytGguBy4YkLQX/tg0eYQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFHpM45DMh4UlucaQ1Jx2tu6hn5C1MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvZWt6amtNeUhoU1c1eHBEVW5IYTI3cUdma0xVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUDKhBKAAMF
AyoQewADBQMqEvVAAwUDKhMPQDANBgkqhkiG9w0BAQsFAAOCAQEAF2Qv0CRpeZFV
UvJ7SgVgZfV1NVHoi7nB7BfrE6dUPKSqPbpZlMaQyvQNtxWc8HhTl9Tm/rSTyaF0
1KDg/QBo/ScJaSYg815Fv4kIBwuJHUdB0uHyGkea85sUHnbHKypJ+KlbZHlf6GB3
htI8yJ3/bGHjcUS5OPrypCSlZ57JYcZxgTCC5zFH5RRmnHQg6PF8o6e0ngOX2F3n
6BK5W2t2RpymgK7LvSZm3GbBSgFoyZI+dukXqrZRdC4acWHTbBuQVTNM0NuFsyVG
Jm49sXAdEAxHfXf7ZM87xMKdtPDMmZv0ud2KQBtyHk+gE1TOqZbhImo+3aH0qdvY
LE3OcC9bpQ==
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:48 2026 by rpki-client