Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/7ollTNSFSY1I3Oksob2f8HRCUnA.roa
File: 7ollTNSFSY1I3Oksob2f8HRCUnA.roa (raw, json)
Hash identifier: aG8toklA3hCbimSvopqnfapWwydOj77jkZAjRvt9sqI=
Subject key identifier: EE:89:65:4C:D4:85:49:8D:48:DC:E9:2C:A1:BD:9F:F0:74:42:52:70
Certificate issuer: /CN=3e689fc422f0a62d6b5daee1aa6b879c605b6557
Certificate serial: 019F23692EF3C2E07CC0EF081226E423C83F
Authority key identifier: 3E:68:9F:C4:22:F0:A6:2D:6B:5D:AE:E1:AA:6B:87:9C:60:5B:65:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmifxCLwpi1rXa7hqmuHnGBbZVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/7ollTNSFSY1I3Oksob2f8HRCUnA.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214011
IP address blocks: 2a0f:2880:500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/PmifxCLwpi1rXa7hqmuHnGBbZVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/PmifxCLwpi1rXa7hqmuHnGBbZVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmifxCLwpi1rXa7hqmuHnGBbZVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2e:f3:c2:e0:7c:c0:ef:08:12:26:e4:23:c8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e689fc422f0a62d6b5daee1aa6b879c605b6557
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee89654cd485498d48dce92ca1bd9ff074425270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:9f:1a:d3:04:fd:cf:f6:35:24:ec:73:2b:
4e:9a:22:26:42:c9:f6:43:b7:05:f1:1b:82:0c:e5:
02:ae:ba:d9:cf:9e:2a:93:59:f2:e1:7e:34:12:d1:
d4:5b:ea:60:6a:cf:39:90:25:37:6e:59:dd:13:68:
8c:a4:69:b0:ce:ba:cf:c6:d4:ee:c7:2b:e6:d9:b3:
4b:da:4c:17:f2:53:30:7b:d2:71:2b:bc:e9:7d:aa:
79:9d:ff:45:6f:f0:41:3e:d7:e0:38:cf:24:4f:32:
be:d8:e2:00:f2:c4:79:e5:16:c2:18:41:b7:b4:be:
ea:c6:61:23:62:ab:61:ed:91:7c:63:18:e4:66:50:
74:48:44:e8:c9:0c:ec:c2:19:fc:6d:26:39:33:a4:
69:89:b2:6d:ef:b8:b9:b2:d7:85:01:c3:2d:bc:cb:
da:6a:4f:31:90:01:6f:f0:e5:2c:ba:53:db:48:66:
e5:fd:c4:d6:d1:69:0c:34:b9:7c:c8:b0:35:66:bc:
e1:ef:51:22:6a:71:d0:ed:88:ce:a8:d6:ca:8a:d4:
03:fd:1e:b8:a8:ea:09:43:56:1c:d9:2c:9f:6c:e7:
c6:06:01:f8:50:6a:fd:93:3e:70:69:d8:79:5a:1f:
2c:3b:6c:82:05:c9:10:3d:87:ae:6b:8c:ce:7b:ab:
d9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:89:65:4C:D4:85:49:8D:48:DC:E9:2C:A1:BD:9F:F0:74:42:52:70
X509v3 Authority Key Identifier:
keyid:3E:68:9F:C4:22:F0:A6:2D:6B:5D:AE:E1:AA:6B:87:9C:60:5B:65:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmifxCLwpi1rXa7hqmuHnGBbZVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/7ollTNSFSY1I3Oksob2f8HRCUnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/PmifxCLwpi1rXa7hqmuHnGBbZVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2880:500::/40
Signature Algorithm: sha256WithRSAEncryption
50:7d:07:a4:56:69:ca:fd:ba:f7:6a:df:03:4a:c7:88:f7:2c:
ba:e9:fb:bf:91:73:b5:7c:d5:8a:47:6a:a9:29:4b:3b:85:cb:
d5:60:5a:66:ce:58:26:46:51:5e:b3:74:b6:b2:69:34:82:a9:
8a:7b:f8:5c:93:39:74:d2:79:83:9f:e1:c2:e1:0e:cf:50:47:
30:67:ef:69:c4:76:0d:68:52:76:55:97:5d:06:06:1f:dd:c2:
3d:c1:62:73:9f:d9:63:6b:87:03:16:3c:e5:35:59:46:01:c8:
ec:30:a9:05:3b:11:f7:bb:e1:5c:09:6a:53:e7:5a:4c:ba:e6:
ce:76:43:5c:fd:7a:d8:b8:89:3c:3c:b9:96:03:ce:69:c7:47:
e2:90:b5:73:bc:3b:7c:82:46:c3:8f:8e:45:75:56:3f:8e:19:
65:5e:07:05:b9:7c:48:6c:d6:66:2c:4d:4a:87:66:54:46:d0:
fb:4b:c7:e1:42:70:be:a3:85:23:de:0d:16:45:7d:ac:e1:58:
22:e1:0d:e1:e6:d1:b4:f2:8e:a2:76:54:95:66:7d:06:51:bb:
f3:c0:47:86:f8:ab:3f:ee:7d:0d:e2:97:41:36:0d:de:cf:a7:
fe:5f:9d:21:4e:71:35:70:1f:e6:65:de:0f:ba:28:f2:c7:59:
54:63:b1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:59:39 2026 by rpki-client