Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/cEJ5ZYtcHiaj_J64OkX6Yx2IBxs.roa
File: cEJ5ZYtcHiaj_J64OkX6Yx2IBxs.roa (raw, json)
Hash identifier: pfk5HbQe9XRc5xzn7vPpIWFaMuv/JnMQmbCMr9Ny92U=
Subject key identifier: 70:42:79:65:8B:5C:1E:26:A3:FC:9E:B8:3A:45:FA:63:1D:88:07:1B
Certificate issuer: /CN=0950facc95fba495ec7b654271397d5559895afb
Certificate serial: 01A162A63DD3CDB49F72975D301008813FEF
Authority key identifier: 09:50:FA:CC:95:FB:A4:95:EC:7B:65:42:71:39:7D:55:59:89:5A:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVD6zJX7pJXse2VCcTl9VVmJWvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/cEJ5ZYtcHiaj_J64OkX6Yx2IBxs.roa
Signing time: Thu 22 Oct 2026 08:07:04 +0000
ROA not before: Thu 22 Oct 2026 08:07:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 2a06:b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/CVD6zJX7pJXse2VCcTl9VVmJWvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/CVD6zJX7pJXse2VCcTl9VVmJWvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVD6zJX7pJXse2VCcTl9VVmJWvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:a6:3d:d3:cd:b4:9f:72:97:5d:30:10:08:81:3f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0950facc95fba495ec7b654271397d5559895afb
Validity
Not Before: Oct 22 08:07:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=704279658b5c1e26a3fc9eb83a45fa631d88071b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7a:f5:d0:ec:32:46:6f:83:cf:4b:cc:96:0c:
d5:f4:53:c4:51:16:ff:4c:8f:02:db:6b:73:53:27:
2b:5a:8f:99:bb:2c:df:78:df:9c:04:4e:16:27:33:
b3:9a:18:bc:6d:8a:9c:d6:6c:53:c6:ff:3c:a6:39:
e7:07:4e:46:ea:4e:04:d2:3c:49:3e:5c:aa:f7:f7:
45:dd:c0:3d:b2:c1:8d:91:bb:d9:82:f0:9a:b3:c0:
f8:4a:a9:c2:9b:6c:12:88:e4:33:5d:ae:bb:c1:79:
cb:4a:df:c1:84:a8:95:c3:8c:6a:7e:b7:d0:1a:33:
91:36:60:9a:54:bf:b6:7e:91:00:9f:3a:14:50:b9:
d1:6b:f1:f4:ef:b9:ea:58:11:63:65:49:7d:07:64:
ce:8c:91:fa:d1:27:30:a3:a8:8e:af:85:49:5d:1a:
21:35:93:55:89:da:a9:24:de:55:3a:6b:d0:1f:c8:
c6:52:b8:a1:58:c5:ec:4e:45:19:75:b6:5d:87:5b:
35:62:94:e2:69:bb:4c:05:49:3c:3d:56:e8:95:e0:
03:6f:8d:73:2a:1c:e9:05:b4:48:e8:df:67:d4:96:
2b:1a:f1:a0:09:26:00:4f:e6:d0:ca:29:e4:90:b3:
9f:e8:4a:4e:4b:8f:11:a6:9d:2b:ed:e6:21:d2:cd:
55:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:42:79:65:8B:5C:1E:26:A3:FC:9E:B8:3A:45:FA:63:1D:88:07:1B
X509v3 Authority Key Identifier:
keyid:09:50:FA:CC:95:FB:A4:95:EC:7B:65:42:71:39:7D:55:59:89:5A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVD6zJX7pJXse2VCcTl9VVmJWvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/cEJ5ZYtcHiaj_J64OkX6Yx2IBxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/CVD6zJX7pJXse2VCcTl9VVmJWvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b80::/29
Signature Algorithm: sha256WithRSAEncryption
91:8a:4f:bd:11:76:fa:04:99:9d:32:ad:9f:10:a2:3e:26:b5:
11:f1:79:50:4d:34:83:a4:f3:9d:ce:80:c2:dd:28:5d:0a:9d:
87:88:34:cd:86:ac:f6:14:ee:ed:0d:b6:1c:7b:d5:6b:52:06:
10:22:ca:d3:be:c5:62:c4:fc:25:f8:ed:2d:44:45:d0:f4:be:
53:e0:aa:25:24:3e:b6:8c:b6:51:13:e8:62:a8:83:3e:ca:06:
cc:e7:9c:78:ec:87:26:7b:d0:0b:85:88:f2:d2:c1:24:68:8e:
ef:c7:ae:44:ae:0b:a7:13:03:89:e3:43:0a:93:3f:35:c4:99:
64:02:5d:1e:ed:1d:52:41:9d:ff:f9:f1:d0:d9:8a:61:31:47:
2a:23:9e:7e:f7:b7:d0:cb:55:53:01:fd:43:f1:cd:2b:e1:10:
8c:bd:70:f2:7c:0c:b6:fe:88:a4:58:60:cd:ed:49:dd:9a:74:
80:6f:a7:5f:32:d1:09:cb:9a:68:fd:94:e0:1a:b9:f4:a5:3d:
0b:2a:7b:26:67:5d:8b:05:a1:3e:21:9a:ce:87:e5:93:cf:f2:
99:bf:fc:d2:e5:73:50:8d:a1:40:17:44:84:85:61:64:1a:e9:
60:42:8c:d4:2e:e6:9d:ae:66:60:3c:76:64:24:55:4c:cb:b2:
ef:68:d9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:39:10 2026 by rpki-client