Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/7vheWt636zaXPWY7-s5DyNEvcCk.roa
File: 7vheWt636zaXPWY7-s5DyNEvcCk.roa (raw, json)
Hash identifier: yHddO5nWyrrRYQwmZYLYDVw2iZ9LZ47A/NrBl7ewM1Q=
Subject key identifier: EE:F8:5E:5A:DE:B7:EB:36:97:3D:66:3B:FA:CE:43:C8:D1:2F:70:29
Certificate issuer: /CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Certificate serial: 019D35F0A9A07F0B9585211E021696253321
Authority key identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/7vheWt636zaXPWY7-s5DyNEvcCk.roa
Signing time: Sat 28 Mar 2026 19:34:17 +0000
ROA not before: Sat 28 Mar 2026 19:34:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199656
IP address blocks: 2a03:1b20:bef2::/48 maxlen: 48
2a03:1b21:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:f0:a9:a0:7f:0b:95:85:21:1e:02:16:96:25:33:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Validity
Not Before: Mar 28 19:34:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eef85e5adeb7eb36973d663bface43c8d12f7029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:14:d3:96:0a:fe:41:66:31:d8:36:f3:cd:0d:
2a:2f:c4:46:5b:78:46:88:ed:21:bb:e6:08:87:45:
a8:c9:7e:68:96:e8:1d:dc:f8:8a:5e:e6:cd:d3:55:
82:c1:9d:7b:51:93:7d:30:cd:b2:5d:60:22:6b:e9:
ad:b6:a3:a1:1c:65:d3:9a:59:6b:90:2d:a7:e1:44:
13:9f:c0:4c:14:c3:a9:2e:6e:5d:4c:d0:8f:2d:5a:
65:a8:b8:bd:b2:05:2a:da:b8:56:c3:1f:68:6a:9a:
4d:01:42:bd:e4:a8:de:37:dc:11:32:e7:d6:0c:65:
d0:d0:61:c7:48:60:a5:f2:cd:ff:88:a7:a3:46:12:
45:d6:60:0b:56:5a:fa:d1:a7:4d:71:9c:c4:a8:de:
d7:7a:86:97:10:98:79:76:7b:d4:84:8a:6e:4c:33:
42:f4:8e:4f:b5:72:0b:6a:d4:c7:25:78:cf:6c:5a:
6e:f3:13:08:ac:0a:6f:ca:51:e9:87:55:20:d7:db:
91:5a:fc:ad:9a:7e:1c:af:67:0f:b1:1c:05:7b:39:
22:e4:d1:62:ca:02:86:0f:15:cd:6d:9e:df:66:96:
b6:58:60:0a:1d:4d:96:e6:b3:52:54:2d:bd:a7:f7:
72:26:a8:68:ed:f1:8d:0b:83:9c:39:30:25:59:3f:
63:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F8:5E:5A:DE:B7:EB:36:97:3D:66:3B:FA:CE:43:C8:D1:2F:70:29
X509v3 Authority Key Identifier:
keyid:DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/7vheWt636zaXPWY7-s5DyNEvcCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:1b20:bef2::/48
2a03:1b21:100::/40
Signature Algorithm: sha256WithRSAEncryption
61:8b:5f:7f:c0:11:83:6d:df:d4:ad:8a:41:ff:89:aa:79:f5:
2a:eb:4f:6a:7e:c1:70:3f:e2:0c:d3:80:26:0e:72:4b:9d:16:
a1:7f:80:f2:18:49:5a:16:be:b5:f5:e0:39:7b:f2:a2:8e:45:
0c:2c:20:0e:bb:7b:04:a8:c3:2a:26:df:27:d7:75:c5:63:20:
f6:6d:e9:e7:6c:4d:90:2c:39:44:0c:cd:3b:33:22:ee:1c:b5:
5a:5a:1c:ea:74:b6:e9:65:51:5a:bc:e1:d9:02:db:96:10:3f:
05:54:38:22:9e:34:d1:14:23:17:75:01:18:b4:a0:1a:36:34:
71:bf:8f:8a:4a:61:d7:25:ea:7b:22:d2:a2:24:93:db:b4:8a:
0d:de:c7:81:ee:a7:6d:9a:7c:57:1e:e4:de:ea:36:71:a3:78:
a5:54:3c:cc:43:b1:63:d7:86:c9:66:ce:47:04:52:37:53:1c:
3e:ca:01:f4:b5:ed:b9:56:20:00:d1:56:43:c5:f6:a9:c0:d0:
fb:55:9b:5f:2c:55:5b:5e:7a:99:60:7f:f8:91:42:ea:22:44:
36:86:92:20:33:8c:02:34:4d:b8:26:78:f9:8c:fd:4c:c3:5b:
6a:02:16:8a:02:3f:0c:05:06:00:b0:4b:44:f5:e8:30:45:bf:
82:94:f6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:04:57 2026 by rpki-client