Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/fP5lnaixv32xkJUP4tzX9zmPJ_k.roa
File: fP5lnaixv32xkJUP4tzX9zmPJ_k.roa (raw, json)
Hash identifier: 8VvbMuKU+y3oQaViW4mboQO5kLKfP4tHhfvRHYz43Uo=
Subject key identifier: 7C:FE:65:9D:A8:B1:BF:7D:B1:90:95:0F:E2:DC:D7:F7:39:8F:27:F9
Certificate issuer: /CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Certificate serial: 01A09454E83171DF8D73876CDE61E90F9164
Authority key identifier: 7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/fP5lnaixv32xkJUP4tzX9zmPJ_k.roa
Signing time: Sat 12 Sep 2026 06:36:27 +0000
ROA not before: Sat 12 Sep 2026 06:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23532
IP address blocks: 2a12:b280::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:54:e8:31:71:df:8d:73:87:6c:de:61:e9:0f:91:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Validity
Not Before: Sep 12 06:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cfe659da8b1bf7db190950fe2dcd7f7398f27f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:88:c8:e1:43:03:f0:1e:ac:de:a5:c3:2b:90:
6a:8a:89:a6:a6:98:3e:99:00:e4:64:b8:53:d3:55:
fe:06:10:9f:db:ea:72:ad:f1:0d:a2:f2:2f:8b:25:
bb:3e:ff:b5:61:4f:63:8f:a1:7a:28:bd:c9:f2:29:
46:45:56:a7:12:7b:4b:ad:38:77:12:64:09:b5:52:
14:8e:26:f4:a5:82:b0:9a:c8:09:25:5b:a4:99:2b:
7a:97:37:19:c1:76:0e:2f:f8:22:63:64:3a:1b:69:
ca:45:fa:3b:c2:bc:42:2f:5b:dd:35:33:1b:af:93:
01:10:be:3d:c9:33:25:65:0a:04:ef:0f:a8:bf:cb:
23:49:b1:db:c6:55:59:f0:ee:ed:82:3f:34:da:ed:
d3:38:03:31:e1:36:70:e1:f2:8b:a2:58:72:d9:10:
6e:45:b3:3a:66:6c:ef:05:1a:00:a1:bf:c2:6e:54:
f9:38:54:e1:d8:96:47:41:3a:8f:e2:d3:8a:1a:ff:
da:09:9f:b2:d2:4e:b7:10:f2:a5:e3:44:3d:de:eb:
e1:ad:3a:b5:56:8f:3c:2e:f7:62:33:0b:34:04:db:
7b:5f:fd:02:00:2a:95:8b:a4:96:4b:20:d7:8d:d8:
cd:c7:4c:34:cd:3e:57:4e:1c:97:81:dd:32:4e:de:
5e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FE:65:9D:A8:B1:BF:7D:B1:90:95:0F:E2:DC:D7:F7:39:8F:27:F9
X509v3 Authority Key Identifier:
keyid:7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/fP5lnaixv32xkJUP4tzX9zmPJ_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:b280::/29
Signature Algorithm: sha256WithRSAEncryption
8b:4b:c6:7a:5a:e6:6f:ea:f2:10:51:16:3b:37:3a:74:63:2e:
40:ec:ec:00:cc:fa:18:23:60:2f:6d:6f:8a:2f:e1:eb:b5:6a:
5e:8d:b9:5f:b6:1a:ab:b6:f7:5b:ae:a1:7e:a4:bf:3c:89:3a:
46:e1:3d:a8:2a:b4:78:15:69:c1:10:67:44:93:fc:51:27:fd:
62:5a:fe:92:41:4c:07:0e:79:32:e2:4f:5b:19:d3:c0:4a:f5:
36:8e:a5:b1:0e:d9:9b:5c:88:46:86:e2:3c:a1:c3:a9:c6:73:
11:c5:3f:63:9c:0b:8e:92:6c:b6:df:3f:ed:45:6f:70:b9:a5:
97:c6:eb:8b:89:29:6f:aa:6c:97:2f:e4:d1:b1:ca:e6:20:a1:
2e:2b:92:8f:80:b4:5b:1e:03:d7:40:cb:23:a3:46:13:53:92:
f8:fc:a5:2f:98:5f:de:e3:77:b9:e2:36:e9:ad:06:cf:fd:1f:
f5:44:6e:64:ed:e2:1b:5d:09:b9:91:d9:66:f2:a5:42:c9:47:
99:23:00:c7:98:e3:8f:53:fc:d8:6a:ea:64:f7:f8:5e:e9:14:
68:72:2a:aa:5a:ca:6b:f7:73:b4:1c:5f:f4:ec:cf:78:f6:00:
da:c3:a1:39:08:2d:58:bb:e9:cc:5d:0e:e5:a9:30:3a:59:01:
b9:2a:c0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:07:37 2026 by rpki-client