Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/eGujzhF-Jb5JLWOfYhW-VM1JmXk.roa
File: eGujzhF-Jb5JLWOfYhW-VM1JmXk.roa (raw, json)
Hash identifier: S3PsF2cp96qNKXQpWngG/gA+/rgdkiompOBnIfGv5D8=
Subject key identifier: 78:6B:A3:CE:11:7E:25:BE:49:2D:63:9F:62:15:BE:54:CD:49:99:79
Certificate issuer: /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial: 019B7F15A9FF2C23B99C89FDC4CE242BB199
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/eGujzhF-Jb5JLWOfYhW-VM1JmXk.roa
Signing time: Fri 02 Jan 2026 14:21:24 +0000
ROA not before: Fri 02 Jan 2026 14:21:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7171
IP address blocks: 2a00:ad40:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:a9:ff:2c:23:b9:9c:89:fd:c4:ce:24:2b:b1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Validity
Not Before: Jan 2 14:21:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=786ba3ce117e25be492d639f6215be54cd499979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:04:28:16:70:6c:e3:76:42:e8:93:00:9b:a3:
b8:b1:c6:d7:46:79:a9:a2:1f:26:12:9d:49:83:a8:
5b:7a:2d:b2:db:b5:0d:ae:cf:f7:dd:eb:a8:df:8d:
eb:e2:54:12:d9:55:a9:e6:64:46:26:e3:de:2a:94:
d3:95:2c:d5:d0:81:86:07:f2:f6:c8:70:22:bd:1d:
e9:c0:82:c4:96:f5:e3:fa:a2:f8:4a:6c:c2:0f:4b:
2b:0c:3f:f4:b1:a1:60:2e:c7:f2:a0:bd:80:71:5f:
f1:dd:b8:85:47:0f:11:76:27:f8:e7:b1:f1:07:ce:
b6:07:5b:4c:29:de:a4:55:c6:e0:96:85:bb:21:31:
63:01:e0:27:85:92:a7:31:55:6c:e2:d7:ca:00:03:
2a:04:3e:74:ef:16:07:9e:46:e2:ee:72:d8:2e:44:
d7:96:5f:99:74:e7:81:68:23:46:30:c7:fc:b5:7f:
59:fe:8a:77:60:25:0a:41:0e:c8:d5:38:51:d2:97:
de:10:0c:e3:11:ce:52:37:6a:43:93:9f:3d:4d:67:
e0:d9:f9:6b:af:d4:8d:a4:a5:e0:5f:36:a0:ca:67:
84:b3:e7:40:42:dc:47:98:ff:ce:ea:b6:b0:e0:eb:
a1:f9:75:2c:84:f8:28:c6:5f:8a:80:b1:1e:85:16:
81:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6B:A3:CE:11:7E:25:BE:49:2D:63:9F:62:15:BE:54:CD:49:99:79
X509v3 Authority Key Identifier:
keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/eGujzhF-Jb5JLWOfYhW-VM1JmXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ad40:200::/40
Signature Algorithm: sha256WithRSAEncryption
56:a0:b9:20:0a:19:db:b3:7e:85:1f:5c:f2:92:9c:6d:61:19:
06:0e:24:fb:93:d9:a1:7d:23:f9:23:fc:e6:d5:4b:36:21:c0:
30:fe:6a:b4:2a:0e:b6:0a:5a:fa:c9:cb:f8:a4:e9:96:ed:e4:
0a:bb:db:6b:d5:cc:2f:36:49:0c:97:77:ee:9b:d9:a2:a4:63:
4b:86:69:84:46:40:d2:fa:20:c2:70:09:e7:ff:8c:c6:2f:cd:
51:c7:d3:16:d6:18:84:fe:8f:93:0e:58:eb:6e:38:59:fb:33:
21:9e:bb:d6:cb:05:1d:a2:d7:f2:e4:b6:4a:75:4e:ce:79:52:
4c:0e:ba:6e:53:f0:e0:79:05:27:44:16:eb:07:8c:82:18:75:
93:a0:e5:46:d9:37:36:1e:00:c2:07:6d:8f:30:ed:c1:6d:4a:
32:b3:4d:18:1d:08:b7:10:7a:4a:ae:7b:fc:90:ea:14:34:c4:
93:60:d1:85:93:be:7f:a7:6c:e2:60:c1:50:2b:b9:61:a2:3f:
c1:33:44:7c:eb:c0:b6:a3:99:fb:3d:0d:d8:e1:9a:76:86:3f:
17:97:39:09:dd:bb:6f:00:2f:c9:96:d8:d0:c8:b1:00:47:32:
f7:a9:39:90:e6:b6:80:79:71:95:61:ad:ed:a9:17:64:47:d7:
f3:f0:fb:d7
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZt/Fan/LCO5nIn9xM4kK7GZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjY2U1OTA3MTFhZTdmY2IwMTZlZWI3Mzc2YjBhN2ZjNzY2
MWNiMTMwHhcNMjYwMTAyMTQyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODZiYTNjZTExN2UyNWJlNDkyZDYzOWY2MjE1YmU1NGNkNDk5OTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wQoFnBs43ZC6JMAm6O4scbXRnmp
oh8mEp1Jg6hbei2y27UNrs/33euo343r4lQS2VWp5mRGJuPeKpTTlSzV0IGGB/L2
yHAivR3pwILElvXj+qL4SmzCD0srDD/0saFgLsfyoL2AcV/x3biFRw8Rdif457Hx
B862B1tMKd6kVcbgloW7ITFjAeAnhZKnMVVs4tfKAAMqBD507xYHnkbi7nLYLkTX
ll+ZdOeBaCNGMMf8tX9Z/op3YCUKQQ7I1ThR0pfeEAzjEc5SN2pDk589TWfg2flr
r9SNpKXgXzagymeEs+dAQtxHmP/O6raw4Ouh+XUshPgoxl+KgLEehRaBpwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFHhro84RfiW+SS1jn2IVvlTNSZl5MB8GA1UdIwQY
MBaAFLzOWQcRrn/LAW7rc3awp/x2YcsTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk01WkJ4R3VmOHNCYnV0emRyQ25fSFpoeXhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hYzZiOTEtZWRhZi00NDg2LTkzNGUt
MDVkYjQ5N2FjNDU1LzEvZUd1anpoRi1KYjVKTFdPZlloVy1WTTFKbVhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9hYzZiOTEtZWRhZi00NDg2LTkzNGUtMDVkYjQ5N2FjNDU1
LzEvdk01WkJ4R3VmOHNCYnV0emRyQ25fSFpoeXhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgCtQAIw
DQYJKoZIhvcNAQELBQADggEBAFaguSAKGduzfoUfXPKSnG1hGQYOJPuT2aF9I/kj
/ObVSzYhwDD+arQqDrYKWvrJy/ik6Zbt5Aq722vVzC82SQyXd+6b2aKkY0uGaYRG
QNL6IMJwCef/jMYvzVHH0xbWGIT+j5MOWOtuOFn7MyGeu9bLBR2i1/Lktkp1Ts55
UkwOum5T8OB5BSdEFusHjIIYdZOg5UbZNzYeAMIHbY8w7cFtSjKzTRgdCLcQekqu
e/yQ6hQ0xJNg0YWTvn+nbOJgwVAruWGiP8EzRHzrwLajmfs9DdjhmnaGPxeXOQnd
u28AL8mW2NDIsQBHMvepOZDmtoB5cZVhre2pF2RH1/Pw+9c=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:34:59 2026 by rpki-client