Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/cSJxp3Moh618iihQeQ7Gi4o3_X0.roa
File: cSJxp3Moh618iihQeQ7Gi4o3_X0.roa (raw, json)
Hash identifier: h4bls6aSY7jUwrRfYeEoZssp+IBfKOddywaz91lnThs=
Subject key identifier: 71:22:71:A7:73:28:87:AD:7C:8A:28:50:79:0E:C6:8B:8A:37:FD:7D
Certificate issuer: /CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65
Certificate serial: 019C81BFF66D607258AA7C11824B73479700
Authority key identifier: 61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/cSJxp3Moh618iihQeQ7Gi4o3_X0.roa
Signing time: Sat 21 Feb 2026 19:49:27 +0000
ROA not before: Sat 21 Feb 2026 19:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400342
IP address blocks: 2a13:e8c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 15:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:bf:f6:6d:60:72:58:aa:7c:11:82:4b:73:47:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65
Validity
Not Before: Feb 21 19:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=712271a7732887ad7c8a2850790ec68b8a37fd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:de:90:2d:61:b0:ab:de:d2:93:5b:02:62:
aa:da:cc:9d:b3:20:e3:62:51:0e:63:54:de:65:a2:
77:38:cf:6c:13:c7:b4:9f:e9:27:20:25:92:b1:05:
86:2d:d4:27:5f:d9:b3:3c:57:49:88:29:6c:b1:5e:
be:4d:02:e2:60:a4:3a:0a:d0:63:a9:94:ce:cd:92:
5c:7f:80:e0:21:c0:33:e9:0f:20:20:62:86:be:09:
9a:be:71:4a:bf:46:88:69:0e:d4:2d:42:8a:b1:eb:
c1:07:ba:15:7c:79:b5:de:13:24:f1:16:14:36:21:
7f:f0:ff:50:02:2e:a2:d7:ee:b2:93:b0:91:5b:13:
bc:f5:05:7c:11:55:ad:81:81:fc:db:8e:7b:49:f4:
db:99:b4:be:9f:39:fd:24:88:36:58:ef:62:f1:bd:
25:6b:7a:f3:61:a7:6a:79:e8:10:87:93:c8:57:e7:
04:63:75:6c:71:9e:63:ef:08:10:b5:c2:81:23:0c:
90:c4:cb:60:5e:23:ec:e0:a5:11:98:aa:7a:97:33:
39:f5:67:86:31:87:24:b7:5e:fd:75:74:7e:7b:c2:
91:4b:be:91:12:3c:2c:e3:cc:e7:6b:89:90:46:a7:
b2:d4:c0:65:35:21:a8:a9:5f:1d:3f:95:e7:19:7c:
bb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:22:71:A7:73:28:87:AD:7C:8A:28:50:79:0E:C6:8B:8A:37:FD:7D
X509v3 Authority Key Identifier:
keyid:61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/cSJxp3Moh618iihQeQ7Gi4o3_X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e8c0::/29
Signature Algorithm: sha256WithRSAEncryption
a2:77:3c:5e:46:c9:1f:e2:1a:4a:cb:2e:d5:8c:5e:7a:fa:91:
68:dc:cf:7e:ca:a9:e8:f4:03:d4:a8:7d:37:bc:b8:37:18:39:
20:75:c6:1f:32:00:51:8b:ca:05:ff:56:4b:79:43:7a:59:13:
58:3c:44:5e:f5:9a:21:ea:2f:61:be:51:db:f5:0d:fc:a1:89:
c9:c7:db:50:d7:55:f5:0e:37:f1:f5:46:0b:37:86:39:6f:79:
bc:d6:82:cd:9b:c1:70:28:d9:ae:bf:e3:cf:73:23:b3:9a:ce:
53:a9:1a:b8:1b:e4:2c:c3:d9:15:00:b0:f2:15:b8:aa:85:7f:
6f:87:1a:66:89:a7:9d:b3:95:5e:76:73:81:29:bd:08:64:06:
41:2a:68:e7:ad:c0:73:86:ad:7b:a6:a3:09:99:af:b7:23:d4:
27:f5:89:63:61:9d:43:c5:1e:64:f4:be:53:9e:b1:4b:dd:af:
cd:f5:64:db:f4:5b:3c:f3:b9:69:c4:fb:46:1f:2d:86:93:3a:
4c:26:f1:62:9b:f6:62:3c:96:49:fb:ce:b9:d9:f9:a0:e3:de:
2d:c0:b3:eb:12:5a:b1:8a:75:4f:2a:1b:89:2c:a6:a3:b8:e8:
68:fc:0a:b8:84:07:9c:8b:5d:53:83:24:2a:bb:00:cb:ad:d3:
a2:c0:53:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:51:20 2026 by rpki-client