Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/xO_LD9rKwmnaU6TBr0K30eYZuxg.roa
File: xO_LD9rKwmnaU6TBr0K30eYZuxg.roa (raw, json)
Hash identifier: KW4AxOVGDogskv6yt1awhmnTCH4lUWOxBibAI6+mLlA=
Subject key identifier: C4:EF:CB:0F:DA:CA:C2:69:DA:53:A4:C1:AF:42:B7:D1:E6:19:BB:18
Certificate issuer: /CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65
Certificate serial: 019C81BF0E0A3C43AA2510CF0A5CBF6CCA63
Authority key identifier: 61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/xO_LD9rKwmnaU6TBr0K30eYZuxg.roa
Signing time: Sat 21 Feb 2026 19:48:27 +0000
ROA not before: Sat 21 Feb 2026 19:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216138
IP address blocks: 2a13:e8c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 15:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:bf:0e:0a:3c:43:aa:25:10:cf:0a:5c:bf:6c:ca:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877ef7bbb1b1898aacd57b8a8ffc2b0e442a65
Validity
Not Before: Feb 21 19:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4efcb0fdacac269da53a4c1af42b7d1e619bb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:57:f7:6d:1e:87:c7:08:46:bd:f2:e2:33:c2:
48:9d:80:a5:78:02:5c:60:b2:ea:e0:5f:77:1c:f9:
ad:eb:49:8a:42:71:cb:ea:97:4d:ae:3d:bb:ae:5a:
e8:fd:c0:d3:18:72:b3:69:2d:a5:e4:d2:7c:0c:01:
6e:9b:48:c1:60:f8:c1:43:8c:74:08:be:9f:2d:9a:
98:4c:3a:15:36:31:72:68:fb:2a:3d:22:54:88:44:
a2:45:51:e2:9f:ca:7c:12:9c:c7:f3:a6:01:cd:d2:
2b:92:f4:7f:f4:f2:0c:a3:5f:41:ea:a0:2a:40:0f:
89:29:bf:1b:93:98:c0:c2:2e:88:1f:f9:c4:01:da:
7b:57:ad:65:d2:91:76:46:cb:7c:0b:52:b0:bb:8f:
84:84:e3:d3:a7:38:1b:f1:f4:26:f7:c2:57:d0:18:
77:ae:cb:00:41:cd:5e:7b:6f:48:e1:21:80:70:2c:
66:76:ed:02:34:c5:10:2b:6c:1c:31:70:cd:5e:05:
c1:41:31:6c:46:c0:26:30:2a:11:bd:2d:e2:b0:71:
28:7b:76:52:c8:1c:1a:07:50:24:84:ae:8c:32:b2:
83:ff:66:f5:25:9e:23:5a:31:17:e3:7a:55:95:90:
24:c1:51:f3:66:87:a7:e8:37:10:d5:e7:cb:00:7a:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EF:CB:0F:DA:CA:C2:69:DA:53:A4:C1:AF:42:B7:D1:E6:19:BB:18
X509v3 Authority Key Identifier:
keyid:61:87:7E:F7:BB:B1:B1:89:8A:AC:D5:7B:8A:8F:FC:2B:0E:44:2A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd-97uxsYmKrNV7io_8Kw5EKmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/xO_LD9rKwmnaU6TBr0K30eYZuxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b12fc-83db-4d1e-bf07-ee94dbe46a02/1/YYd-97uxsYmKrNV7io_8Kw5EKmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e8c0::/29
Signature Algorithm: sha256WithRSAEncryption
38:c3:0d:2e:02:31:d0:ff:48:dc:66:3a:3a:f0:41:22:e4:62:
1c:18:18:85:1e:fa:e7:2d:64:c0:a1:87:c1:79:69:87:33:31:
50:ad:f1:b5:f8:5f:f7:77:34:c3:93:92:47:3a:50:30:15:25:
a1:7a:54:61:70:e4:26:d8:eb:1b:17:2b:83:e6:95:b0:6e:a4:
65:dd:76:c0:b5:34:39:b7:ed:a8:c1:59:13:46:22:4a:df:f9:
77:de:42:f6:6a:f9:aa:43:b0:35:82:1b:24:dd:b4:5f:bf:5f:
bb:31:9f:69:5b:f3:98:8d:3c:65:19:e2:0e:1d:0b:4d:64:e9:
6a:0f:f3:14:4e:8f:1f:2d:e6:28:2a:c8:42:19:6d:93:bb:22:
d4:5c:d1:0b:9a:92:f1:b7:ca:a7:da:35:2e:4f:48:3b:f6:57:
43:72:c6:8a:7a:93:88:69:18:6a:56:df:f3:c7:e5:79:ac:09:
96:d9:11:af:e4:88:f8:2a:56:cf:d4:6c:f7:58:e3:f4:0f:f2:
ef:66:da:51:5d:59:5d:3f:3f:10:a4:46:df:2f:0c:4e:f6:24:
cb:2b:55:ab:9d:d4:c9:78:c6:19:43:8b:38:85:81:be:57:20:
86:1a:48:b5:a2:8d:e1:eb:62:7a:2f:0f:79:4a:1a:d9:97:7d:
9f:d4:c1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:53:06 2026 by rpki-client