Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/IvofKeaTMZxNilkaxVHqua26WkU.roa
File: IvofKeaTMZxNilkaxVHqua26WkU.roa (raw, json)
Hash identifier: aIwfb8GoBtvrw7cAa6yGlwEThRPxa4pfqdyTW+jZZYc=
Subject key identifier: 22:FA:1F:29:E6:93:31:9C:4D:8A:59:1A:C5:51:EA:B9:AD:BA:5A:45
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 019E27BAD81D661C34FA2AC56C7C143B71BB
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/IvofKeaTMZxNilkaxVHqua26WkU.roa
Signing time: Thu 14 May 2026 18:23:36 +0000
ROA not before: Thu 14 May 2026 18:23:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50340
IP address blocks: 2a12:2cc7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:27:ba:d8:1d:66:1c:34:fa:2a:c5:6c:7c:14:3b:71:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: May 14 18:23:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22fa1f29e693319c4d8a591ac551eab9adba5a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:25:7a:d6:76:14:0b:2b:bc:dc:0b:76:46:14:
02:62:19:57:2c:e8:c5:5b:60:f0:89:87:64:54:b5:
77:19:6c:fe:4b:bc:39:d4:bc:2b:7d:14:82:c5:6a:
2a:b2:ca:ad:4e:39:16:6c:2e:68:79:52:ac:a0:46:
eb:85:57:19:37:ef:54:29:72:e5:3f:d3:87:07:22:
7e:93:88:54:a0:bb:93:d3:25:9b:66:1d:10:8e:b7:
a5:03:5f:73:fd:eb:92:0c:00:ae:d6:a5:da:ff:e4:
7d:1c:9a:ff:3f:54:e2:5f:93:96:c7:40:96:08:04:
fe:76:7b:36:50:99:73:a0:69:ee:bc:64:53:c7:a7:
41:dc:b7:e4:59:81:96:49:d7:0d:6b:cb:86:64:89:
88:ce:77:dc:0b:88:1e:f3:9a:f9:cf:f2:0b:6b:c3:
ef:07:f0:c1:03:82:40:27:35:24:dd:f5:eb:4a:38:
07:81:2b:9a:78:3b:3b:52:19:84:34:bc:de:4f:7d:
c4:02:6b:7b:29:37:3b:82:1c:0a:30:14:6f:a8:22:
63:22:d6:49:64:51:ec:3c:f5:50:91:91:23:d5:23:
5b:b4:17:ec:ea:dd:29:bd:da:12:13:d5:15:4a:2a:
82:97:97:dc:0a:41:97:56:8b:3d:93:e7:6c:f8:de:
80:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FA:1F:29:E6:93:31:9C:4D:8A:59:1A:C5:51:EA:B9:AD:BA:5A:45
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/IvofKeaTMZxNilkaxVHqua26WkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:2cc7::/32
Signature Algorithm: sha256WithRSAEncryption
41:9c:cf:c6:35:25:e0:a7:01:b4:b2:b6:13:0f:23:f4:c6:f8:
e2:a3:72:7b:d6:b3:ca:94:b1:fe:9c:f2:50:24:62:aa:84:12:
d4:e0:b3:e0:4c:0a:a9:d2:ef:7a:6c:71:b1:d3:dd:89:01:7f:
5e:07:37:57:58:86:ec:73:5b:ad:da:79:69:0f:d6:30:6c:4f:
ff:c6:d6:04:16:d7:e9:8d:38:8e:d3:e5:93:5d:d8:02:04:e2:
d7:31:a8:52:12:89:01:9c:67:36:c4:94:f3:08:27:66:f3:e2:
db:dd:3d:11:7d:06:39:7c:0f:0a:34:28:7d:a8:c3:6a:e9:5d:
2d:e7:d5:34:f8:f2:79:e2:45:e2:29:de:ad:1d:f5:5d:22:5a:
d1:9f:a8:4a:a9:df:9e:88:95:1f:9c:66:28:e9:c7:d4:b5:97:
9d:65:d4:5f:f3:13:14:e8:bc:23:e2:2c:85:17:ab:a1:a7:09:
b4:94:5c:5c:9c:fd:2e:a1:27:31:b0:ab:77:6f:79:93:4c:c5:
5d:47:21:21:3b:4c:43:de:af:fa:3e:67:68:c4:80:d4:ee:b9:
03:11:99:4e:6c:c1:39:fc:45:3d:cf:0d:ba:c5:39:6a:d0:40:
b3:12:5a:96:be:b8:2e:1d:e2:aa:05:61:15:9f:84:ba:ea:24:
3e:fe:04:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:33:11 2026 by rpki-client