Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/F02EU11_7xVfFjx-pCbSkWfBrg8.roa
File: F02EU11_7xVfFjx-pCbSkWfBrg8.roa (raw, json)
Hash identifier: DUZIPK/4jtz1rxvakhmYqy+xcU6jj18QDH1Ql1+dRcs=
Subject key identifier: 17:4D:84:53:5D:7F:EF:15:5F:16:3C:7E:A4:26:D2:91:67:C1:AE:0F
Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial: 019C22FB739533FB0361C5FE56312B789F75
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/F02EU11_7xVfFjx-pCbSkWfBrg8.roa
Signing time: Tue 03 Feb 2026 10:10:30 +0000
ROA not before: Tue 03 Feb 2026 10:10:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201943
IP address blocks: 2a13:2200:1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:22:fb:73:95:33:fb:03:61:c5:fe:56:31:2b:78:9f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Validity
Not Before: Feb 3 10:10:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=174d84535d7fef155f163c7ea426d29167c1ae0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:2d:6e:95:26:cb:9d:95:38:82:ac:a6:06:
4a:7b:d4:b8:4a:3d:bc:fa:a1:5d:50:f4:97:45:fc:
ca:08:36:2a:c0:f7:63:60:6f:bc:fc:15:4d:c2:b2:
fe:de:b0:c9:0a:13:82:33:4f:6b:e6:de:2b:fb:43:
81:66:bd:42:91:71:b3:ef:59:21:ef:74:9e:ee:14:
da:e0:b4:e4:4f:0a:1b:10:68:c0:3f:36:1b:b9:0b:
1c:90:20:d7:e2:6c:b5:23:09:13:0f:e7:11:d5:3e:
66:37:69:7f:ca:8d:ee:b5:b2:97:31:3d:60:17:69:
49:19:15:6a:36:1f:07:8a:62:f6:39:b9:3b:fc:4b:
1e:d6:1a:d8:ea:41:b8:75:c2:c7:a6:18:91:53:73:
5e:ab:2f:01:77:85:f7:73:c3:b0:7b:93:99:91:d4:
3e:ac:27:84:97:29:ec:1e:59:7f:c1:ec:9a:6a:7a:
52:93:cb:cb:ba:90:48:79:51:05:1a:a1:30:23:06:
05:f7:d4:25:66:77:25:22:bb:b8:5c:f7:ad:ae:58:
e0:95:95:06:6f:5a:7d:4c:89:5f:21:4f:73:29:8f:
ac:1b:3c:59:38:7b:09:d0:bb:2c:00:09:ea:db:73:
87:18:cb:b8:2a:81:4d:1e:35:6c:b4:41:60:e9:c4:
f6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4D:84:53:5D:7F:EF:15:5F:16:3C:7E:A4:26:D2:91:67:C1:AE:0F
X509v3 Authority Key Identifier:
keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/F02EU11_7xVfFjx-pCbSkWfBrg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2200:1c::/48
Signature Algorithm: sha256WithRSAEncryption
34:7f:87:12:e8:48:51:c1:be:b9:63:b0:d4:5e:36:cd:3c:b1:
19:24:21:75:66:74:cd:e8:2c:ad:cb:db:ff:89:cc:95:28:1c:
3b:be:cf:51:d9:b2:81:9a:7d:87:84:fe:cd:65:76:60:c3:ad:
dc:b2:e1:44:c9:1d:dc:5d:89:56:f2:dc:d4:d3:be:58:3e:e8:
fa:27:9b:d8:1f:6a:c3:32:c4:7f:43:1c:63:4b:71:38:c5:52:
6b:69:a6:bb:6d:eb:48:54:54:1c:ab:dc:81:8f:16:f3:e2:43:
b0:26:b8:61:65:68:9e:25:95:ad:19:14:87:d4:46:b5:a3:55:
bc:ff:39:88:68:af:8e:7b:16:0b:f6:19:e5:d0:e6:59:e3:7e:
8f:9a:8d:3f:69:87:ab:76:69:dc:3f:18:4a:86:be:97:ab:f2:
af:f9:08:d6:0e:cb:2c:02:36:d2:48:74:62:ed:a9:01:88:e7:
b4:e7:c7:1a:92:16:34:b3:2c:b7:d2:13:4f:61:b6:f7:96:c1:
54:73:93:54:2d:e4:37:be:f0:8a:2b:55:f8:6d:76:ba:6b:e2:
2f:bd:f4:1f:63:a5:05:6e:b7:56:4b:fb:ac:a1:4d:60:fb:9a:
d7:0f:ae:ad:f3:1b:cf:11:61:25:d5:ad:a3:54:7b:9f:35:f8:
00:dd:1b:02
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZwi+3OVM/sDYcX+VjEreJ91MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5
N2M2MDYwHhcNMjYwMjAzMTAxMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzRkODQ1MzVkN2ZlZjE1NWYxNjNjN2VhNDI2ZDI5MTY3YzFhZTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRwtbpUmy52VOIKspgZKe9S4Sj28
+qFdUPSXRfzKCDYqwPdjYG+8/BVNwrL+3rDJChOCM09r5t4r+0OBZr1CkXGz71kh
73Se7hTa4LTkTwobEGjAPzYbuQsckCDX4my1IwkTD+cR1T5mN2l/yo3utbKXMT1g
F2lJGRVqNh8HimL2Obk7/Ese1hrY6kG4dcLHphiRU3Neqy8Bd4X3c8Owe5OZkdQ+
rCeElynsHll/weyaanpSk8vLupBIeVEFGqEwIwYF99QlZnclIru4XPetrljglZUG
b1p9TIlfIU9zKY+sGzxZOHsJ0LssAAnq23OHGMu4KoFNHjVstEFg6cT2FQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBdNhFNdf+8VXxY8fqQm0pFnwa4PMB8GA1UdIwQY
MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt
YjgyOWNjNDAxMDMxLzEvRjAyRVUxMV83eFZmRmp4LXBDYlNrV2ZCcmc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx
LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhMiAAAc
MA0GCSqGSIb3DQEBCwUAA4IBAQA0f4cS6EhRwb65Y7DUXjbNPLEZJCF1ZnTN6Cyt
y9v/icyVKBw7vs9R2bKBmn2HhP7NZXZgw63csuFEyR3cXYlW8tzU075YPuj6J5vY
H2rDMsR/QxxjS3E4xVJraaa7betIVFQcq9yBjxbz4kOwJrhhZWieJZWtGRSH1Ea1
o1W8/zmIaK+OexYL9hnl0OZZ436Pmo0/aYerdmncPxhKhr6Xq/Kv+QjWDsssAjbS
SHRi7akBiOe058cakhY0syy30hNPYbb3lsFUc5NULeQ3vvCKK1X4bXa6a+IvvfQf
Y6UFbrdWS/usoU1g+5rXD66t8xvPEWEl1a2jVHufNfgA3RsC
-----END CERTIFICATE-----
Generated at Tue Mar 3 03:28:10 2026 by rpki-client