Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/E1QbVJAayOHXybvvykh2_z_eoYk.roa
File: E1QbVJAayOHXybvvykh2_z_eoYk.roa (raw, json)
Hash identifier: Ne00sRp1K+wq4QIkqT2qcjKHyHlHGzP3FNyY8RockCE=
Subject key identifier: 13:54:1B:54:90:1A:C8:E1:D7:C9:BB:EF:CA:48:76:FF:3F:DE:A1:89
Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial: 019E83D9C318801B2E8BB3E44BDE19D164D8
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/E1QbVJAayOHXybvvykh2_z_eoYk.roa
Signing time: Mon 01 Jun 2026 15:42:26 +0000
ROA not before: Mon 01 Jun 2026 15:42:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51847
IP address blocks: 2a12:e100:1::/48 maxlen: 48
2a12:e100:2::/48 maxlen: 48
2a12:e100:3::/48 maxlen: 48
2a12:e100:10::/44 maxlen: 44
2a12:e100:20::/44 maxlen: 48
2a12:e100:30::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:d9:c3:18:80:1b:2e:8b:b3:e4:4b:de:19:d1:64:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Validity
Not Before: Jun 1 15:42:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13541b54901ac8e1d7c9bbefca4876ff3fdea189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:f7:a5:ed:25:d3:42:14:50:fd:8c:1d:ec:
d3:19:3c:74:78:9c:f9:17:ac:f9:1d:cd:30:26:ec:
0a:3f:94:bb:a8:2c:90:07:9f:4c:4e:0c:91:90:d9:
77:d4:32:c7:17:fc:f2:3c:80:91:2b:ba:e1:c1:ec:
c5:74:f0:9a:60:b4:68:f5:13:29:0e:13:5b:52:30:
c8:5b:55:e3:08:88:e4:f3:29:db:35:dc:ae:ce:f5:
0e:96:2c:64:1b:16:98:90:e0:5f:3e:31:58:c2:1e:
c3:c2:a4:b9:cb:ee:70:f2:8a:c8:01:b4:44:44:2d:
1e:67:29:c3:5f:20:b1:93:5a:e7:37:5e:ba:f5:7e:
1f:a9:83:4c:a9:8d:75:68:17:07:d9:e5:da:e2:ba:
36:62:1c:da:a3:30:34:e9:b0:f8:32:03:dd:34:77:
9b:2a:d0:dc:6c:0c:f5:c2:5b:d0:5a:a5:6c:ec:d8:
49:0a:e2:ad:eb:e7:63:51:5a:26:92:9e:30:3b:a2:
ae:b5:5a:c5:0d:69:10:4b:90:8e:88:d6:1e:c9:80:
f0:b2:ab:0b:9a:ef:46:9f:7b:c1:aa:00:d4:51:5f:
42:2d:f7:b5:61:82:eb:b6:a4:c4:00:7f:67:e0:13:
a2:d4:8a:78:49:6a:2b:89:68:59:ce:f5:b5:ca:10:
43:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:54:1B:54:90:1A:C8:E1:D7:C9:BB:EF:CA:48:76:FF:3F:DE:A1:89
X509v3 Authority Key Identifier:
keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/E1QbVJAayOHXybvvykh2_z_eoYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:e100:1::-2a12:e100:3:ffff:ffff:ffff:ffff:ffff
2a12:e100:10::-2a12:e100:3f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2f:e7:64:42:f2:36:b3:30:0b:e1:80:35:66:27:8f:e4:6e:6b:
00:7a:b3:27:48:18:94:af:3b:42:a2:43:e9:ab:2c:d6:20:e3:
9e:ca:3f:6d:58:85:03:dc:a6:68:26:65:82:80:b8:69:70:8f:
82:93:f7:25:1d:cd:5c:4a:37:f3:5a:b5:90:ca:ab:d8:a3:be:
27:e4:ab:10:0b:a6:3e:33:c4:7d:be:64:3e:51:4d:45:df:da:
de:35:1c:f4:cb:27:82:af:04:6a:fe:f7:09:9b:d4:0f:ab:08:
c7:48:10:1a:af:ba:9c:a0:e3:f4:52:f7:35:83:3b:6a:00:27:
62:f5:07:0e:7c:82:e2:b6:99:dc:6e:e8:44:4d:d7:8c:f4:f5:
c8:91:42:f0:14:fe:67:40:86:12:24:4c:54:82:62:13:39:73:
dc:e8:f7:1a:5b:11:fd:e6:85:e2:ae:c8:26:d5:0d:33:1c:79:
4d:3a:88:4b:aa:2d:18:b5:93:06:26:cf:37:5e:f1:bf:12:58:
da:5a:f3:86:64:f1:af:61:57:60:37:25:3f:d3:4f:b2:79:05:
1a:80:7c:50:56:88:bd:b0:72:7b:ab:6e:14:ff:b6:3d:39:6d:
c7:dc:32:85:75:d7:d3:9a:b8:3e:2e:9c:4b:31:b1:0a:32:e5:
bf:df:0d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:32:07 2026 by rpki-client