Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/7-y81pZGuJefYS94SBlu3Z1im_I.roa
File: 7-y81pZGuJefYS94SBlu3Z1im_I.roa (raw, json)
Hash identifier: iUl4PW/I9dx16vtiJ+Qh5PM3sdsZ+oe2MJvefCZxt6o=
Subject key identifier: EF:EC:BC:D6:96:46:B8:97:9F:61:2F:78:48:19:6E:DD:9D:62:9B:F2
Certificate issuer: /CN=338c1868b56380e08c45f81ffe61dd3281d6697e
Certificate serial: 019C81BC4DAD69B447BE009518A469219C37
Authority key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/7-y81pZGuJefYS94SBlu3Z1im_I.roa
Signing time: Sat 21 Feb 2026 19:45:27 +0000
ROA not before: Sat 21 Feb 2026 19:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216138
IP address blocks: 2a13:a740::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 15:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:bc:4d:ad:69:b4:47:be:00:95:18:a4:69:21:9c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338c1868b56380e08c45f81ffe61dd3281d6697e
Validity
Not Before: Feb 21 19:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efecbcd69646b8979f612f7848196edd9d629bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:6e:d3:5d:71:9b:e5:f1:2f:8b:1a:a0:bd:
4b:99:52:95:c0:68:ad:32:85:a9:43:f2:e8:1b:ba:
d9:e8:2c:99:63:80:3b:2a:95:8b:0a:58:0b:05:92:
ab:37:f9:58:48:73:e7:4d:b1:bf:55:d8:0a:40:ea:
67:96:ff:2c:68:ec:6f:6b:33:b6:eb:6f:39:62:7a:
ac:ec:45:d5:1f:c7:4f:e8:31:f9:38:99:22:cf:ca:
bd:3c:76:a7:33:af:d1:39:7c:dd:23:7e:07:5a:69:
76:47:9f:5f:f0:08:32:16:12:04:5c:53:a1:08:f5:
d4:d1:ea:a0:96:89:ae:52:56:17:b4:6d:45:88:28:
81:9a:74:b1:99:98:07:71:c0:f1:df:0e:05:47:cb:
88:cc:5e:f8:04:76:b7:04:b7:85:54:1a:08:2d:6e:
a6:52:63:ae:90:e0:6d:5c:77:1a:ad:ce:e3:f7:e0:
02:21:ec:c3:12:9e:bc:00:b0:b3:e1:fd:3b:cf:f1:
61:4e:dd:19:e7:f3:aa:71:83:7f:0e:5a:d1:ab:f5:
81:59:ef:34:f0:1d:f8:82:6c:18:d6:61:af:b8:44:
17:3e:0a:46:45:22:03:0f:75:dd:4f:63:f6:b6:11:
a9:61:07:9f:ed:25:42:ad:64:49:f5:5f:08:f3:e8:
1b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EC:BC:D6:96:46:B8:97:9F:61:2F:78:48:19:6E:DD:9D:62:9B:F2
X509v3 Authority Key Identifier:
keyid:33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/7-y81pZGuJefYS94SBlu3Z1im_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a740::/29
Signature Algorithm: sha256WithRSAEncryption
38:03:63:9d:2c:8e:7c:74:32:43:4b:03:3b:ce:54:0e:ed:96:
79:89:8f:a7:d4:24:09:9d:93:fa:30:9e:d7:6b:84:c7:18:da:
ca:2e:1a:9e:c5:11:39:93:6b:36:ba:3e:91:b2:a8:ae:39:3e:
41:79:67:b7:b8:eb:86:f5:06:8c:cc:22:57:3c:63:39:23:53:
52:57:ff:53:67:b6:7f:11:e1:f3:5d:83:4f:7f:ad:93:f5:68:
20:ab:01:21:9b:f9:3a:06:10:8e:a0:53:2c:2c:4d:3b:6e:e2:
1a:25:19:dc:8d:96:ed:7b:48:7d:77:af:01:f6:39:76:ec:1e:
fa:21:a7:4f:6b:7d:fd:35:13:4c:68:be:43:7c:2c:f1:47:f8:
14:52:de:30:23:9a:32:4b:8a:63:2a:cc:38:48:b1:74:34:db:
1d:d5:ed:53:70:d5:af:22:5c:a1:b0:23:63:10:b7:b1:88:e1:
68:2f:18:5b:40:f0:be:89:2d:da:62:7b:d0:18:d9:01:38:4d:
4f:f8:23:23:90:01:67:fa:e5:3f:0f:ac:c0:3b:e9:2a:57:da:
58:8b:21:d6:a4:aa:4c:aa:dd:f3:71:2d:05:7a:5b:c4:4c:20:
35:fe:d2:9c:71:d5:76:94:be:42:a2:57:14:39:ae:69:21:c8:
ec:c8:34:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:51:19 2026 by rpki-client