Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/tBq-qaCe3hrl4_W-MDsRfd4wxUc.roa
File: tBq-qaCe3hrl4_W-MDsRfd4wxUc.roa (raw, json)
Hash identifier: LU9RPoPeOkovwLTGRp1rw5FM6GQYSbQNsjGB+DdEmmg=
Subject key identifier: B4:1A:BE:A9:A0:9E:DE:1A:E5:E3:F5:BE:30:3B:11:7D:DE:30:C5:47
Certificate issuer: /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial: 01A0572894D600EDB9915DC0B0ABEA9803F0
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/tBq-qaCe3hrl4_W-MDsRfd4wxUc.roa
Signing time: Mon 31 Aug 2026 09:31:12 +0000
ROA not before: Mon 31 Aug 2026 09:31:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29141
IP address blocks: 2a0a:3d80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:28:94:d6:00:ed:b9:91:5d:c0:b0:ab:ea:98:03:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Validity
Not Before: Aug 31 09:31:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b41abea9a09ede1ae5e3f5be303b117dde30c547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:79:ac:4d:87:ef:bb:c2:1b:72:a6:b3:d0:
a9:a8:05:2a:17:83:5c:dd:50:1c:17:74:06:3d:b2:
6e:45:9f:19:da:78:d2:01:04:ad:be:0a:9d:e4:78:
55:97:a2:0f:cb:5b:b0:40:e1:47:5d:db:c9:ff:fc:
be:4b:7f:6b:98:c8:fd:63:1a:9a:25:fb:78:42:6d:
44:7c:6b:e9:16:e4:4e:d2:bd:63:b9:b5:ca:79:45:
8d:e2:82:18:26:a8:4c:d8:b5:7d:c4:b0:99:b9:c1:
dd:e7:5e:7a:1d:ae:38:fb:7a:a7:40:68:ce:d5:51:
c7:32:69:51:01:3b:42:17:14:0a:19:0a:bb:37:06:
5f:03:32:4a:72:db:af:0c:f3:5f:15:5e:18:0d:a2:
b7:48:81:4b:e5:04:b9:05:24:20:c5:8b:1e:00:d2:
70:ba:4b:8a:e3:81:a4:15:18:7c:ec:7b:6b:60:14:
ff:be:71:88:6b:d7:0e:2c:02:66:c3:08:b7:f3:2d:
4c:df:a8:7e:47:97:5d:b7:ab:85:9d:a1:36:d7:2b:
6d:d1:bb:e5:2a:a7:c7:a2:eb:4b:d0:10:ce:b6:ca:
a6:51:19:9a:fd:9e:da:87:12:4c:09:fa:50:e9:33:
da:43:4b:3e:a5:dd:6b:6e:c7:d7:1b:6f:d6:00:58:
12:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1A:BE:A9:A0:9E:DE:1A:E5:E3:F5:BE:30:3B:11:7D:DE:30:C5:47
X509v3 Authority Key Identifier:
keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/tBq-qaCe3hrl4_W-MDsRfd4wxUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:3d80::/29
Signature Algorithm: sha256WithRSAEncryption
af:83:f8:55:78:5b:49:7c:01:b8:d4:6b:87:4a:36:99:fc:2b:
7d:81:17:cb:71:05:cf:bd:04:2c:de:c5:a6:05:52:22:d7:e7:
b3:36:21:2f:f7:87:88:64:6d:d6:f3:1a:7c:47:76:0a:c3:8b:
7a:b3:7a:94:9a:b0:f1:7c:13:6d:b3:c2:6b:13:38:74:6d:04:
21:22:72:5c:b1:8a:e3:7b:ff:8d:a1:7c:27:6a:87:9a:0a:2d:
44:ba:e8:41:7f:7f:9e:97:bc:72:dd:a4:1c:82:74:68:34:6c:
98:51:5b:73:1c:6d:53:08:e0:f2:d0:84:de:c7:60:8f:83:c8:
9a:3e:52:24:8d:cc:32:3f:f7:ec:b3:c8:a8:de:d2:04:ad:87:
2d:ac:79:68:e4:66:a7:a0:e8:0a:76:5c:e3:39:bb:cf:05:54:
b6:7a:81:25:cf:a2:83:9b:c4:dd:2e:4b:97:92:a6:08:40:e4:
60:ca:cc:64:7b:96:da:38:5f:bd:b9:b6:cf:05:62:e4:a6:b1:
4a:85:d3:bb:fa:98:3c:9d:32:69:b1:12:61:03:6b:43:34:86:
88:37:f6:be:30:7a:a4:bb:23:74:9c:b9:81:3a:5e:46:f4:6c:
6c:ae:29:da:c0:c3:58:ae:47:0e:cf:d5:ca:b0:a7:fb:ec:e7:
bf:a4:86:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:56:09 2026 by rpki-client