Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/66dB5obVIRZB98FTlfe-Oof4WpM.roa
File: 66dB5obVIRZB98FTlfe-Oof4WpM.roa (raw, json)
Hash identifier: KEpNODYa4NStvRcKUfapX6T9oOFN2eGTNL8DYHzJKFI=
Subject key identifier: EB:A7:41:E6:86:D5:21:16:41:F7:C1:53:95:F7:BE:3A:87:F8:5A:93
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 019FA4232870E165FC6E940003F40C6279A3
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/66dB5obVIRZB98FTlfe-Oof4WpM.roa
Signing time: Mon 27 Jul 2026 15:13:15 +0000
ROA not before: Mon 27 Jul 2026 15:13:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402604
IP address blocks: 2a11:5e40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:23:28:70:e1:65:fc:6e:94:00:03:f4:0c:62:79:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jul 27 15:13:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eba741e686d5211641f7c15395f7be3a87f85a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:d1:1c:4f:57:54:ec:fb:a6:1c:b8:c2:bf:
1f:63:72:53:6c:b6:d6:16:db:32:c1:a4:7c:49:dc:
b4:78:26:52:05:80:91:31:e8:25:b0:ba:e1:49:8a:
ba:11:86:ca:5f:8e:2b:67:f1:cb:5f:ed:d8:7d:f7:
7a:59:d9:ed:ac:d4:ed:42:dd:24:86:28:45:94:54:
85:cd:cd:23:01:e6:51:13:0f:fa:5a:85:79:ff:ce:
5f:10:01:12:96:a1:02:d6:5f:ee:c0:7e:b5:cf:80:
9a:22:a4:f9:e3:2c:5b:36:0f:fe:ae:67:fe:11:b7:
71:92:6d:de:9b:67:ce:3d:2c:78:40:97:cc:09:16:
3c:5e:b9:6f:6b:46:3b:01:66:a0:bb:4e:f7:f6:c5:
6f:6c:5a:be:4d:4e:bc:82:ed:42:e4:c0:31:13:01:
ea:41:ca:ed:0c:c8:62:04:5a:b4:9b:0f:aa:d5:74:
dc:a4:02:0f:bb:18:a3:57:ae:1d:0d:bc:f0:cc:f1:
15:55:0a:51:79:e0:c1:65:ec:c9:6a:b7:54:6d:8a:
9b:a4:94:c2:79:c0:59:15:ce:c5:d2:5a:08:c3:d8:
08:eb:00:e4:5d:02:da:35:9e:1f:58:da:d2:5f:62:
fd:d6:29:65:94:4e:f1:3e:fe:4f:a4:de:76:43:99:
dc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A7:41:E6:86:D5:21:16:41:F7:C1:53:95:F7:BE:3A:87:F8:5A:93
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/66dB5obVIRZB98FTlfe-Oof4WpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5e40::/29
Signature Algorithm: sha256WithRSAEncryption
06:bc:e4:44:df:a4:e2:06:88:33:48:4a:f3:7b:15:c5:26:d6:
13:a4:2a:57:39:0d:1a:8c:bb:11:7c:fc:ec:ea:46:0c:5c:a2:
ae:70:8f:02:df:36:be:b1:d2:3b:65:8a:55:14:52:01:d0:16:
a9:af:b8:4d:fe:b7:4f:a7:3e:b4:b0:89:e6:fe:a1:80:4c:95:
7a:fc:be:58:cf:b1:33:9e:ec:d3:d9:a1:bc:36:8e:f5:51:d2:
49:72:70:60:22:90:52:9f:f7:1f:eb:23:2e:aa:12:5f:75:99:
ed:63:9c:16:d5:eb:60:b6:40:75:1c:44:77:7e:e9:35:2e:84:
70:53:51:14:dc:49:32:ab:19:7f:be:20:92:88:04:85:82:25:
a6:4b:59:4a:d8:65:8b:ac:f6:91:0a:9e:be:ef:38:e1:2d:71:
ec:a1:59:93:d8:0d:a9:e8:68:b2:40:1f:b8:5e:8e:fa:bc:68:
3f:f6:19:e7:48:f8:cb:01:ff:bf:52:2c:0e:a4:8c:84:8f:9e:
41:e0:5e:b8:37:13:68:57:e6:60:f3:9c:fe:4a:71:70:01:96:
60:9b:0c:34:3a:43:61:8f:75:94:33:2a:c6:0d:cd:69:d0:a6:
dc:4f:24:6a:8f:13:d8:a1:26:cf:67:38:72:1d:94:3d:61:0a:
b2:ad:6b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:24:13 2026 by rpki-client