Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/EgJ11Epc0gnK4y-6vv_M5BnWfxE.roa
File: EgJ11Epc0gnK4y-6vv_M5BnWfxE.roa (raw, json)
Hash identifier: XwYNIT8PYWvkT7dv+pHhTmkYhRHsy4c4jsnIPtWWoiM=
Subject key identifier: 12:02:75:D4:4A:5C:D2:09:CA:E3:2F:BA:BE:FF:CC:E4:19:D6:7F:11
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019E97F0F03ADE484DF5904ADFB01987FEBB
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/EgJ11Epc0gnK4y-6vv_M5BnWfxE.roa
Signing time: Fri 05 Jun 2026 13:20:10 +0000
ROA not before: Fri 05 Jun 2026 13:20:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199592
IP address blocks: 2a10:fa83::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:f0:f0:3a:de:48:4d:f5:90:4a:df:b0:19:87:fe:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jun 5 13:20:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=120275d44a5cd209cae32fbabeffcce419d67f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d5:ee:92:a5:b1:97:52:9e:65:2b:96:62:d4:
c3:f6:71:60:80:d6:c7:9b:c1:b6:16:fb:64:33:8b:
1b:98:e9:e6:8b:bd:b4:6f:8f:33:1b:40:d4:d2:6f:
66:27:d6:18:b6:cc:7f:9f:8a:c7:61:84:09:42:0e:
2b:11:ea:1b:2c:da:16:e6:79:14:9b:4d:47:3d:53:
5a:45:92:e7:cc:4a:63:2a:8b:36:2c:66:0f:d3:de:
9c:52:4f:23:e4:4a:15:14:89:ba:64:cd:ee:34:13:
2b:c2:29:c2:ad:db:e9:a7:1b:dd:33:de:07:af:10:
23:f4:18:89:0a:10:a7:a3:ba:9e:fd:36:a3:76:27:
bc:41:70:df:9b:d8:f9:8d:56:18:9d:9e:7e:37:4e:
46:76:89:99:b3:d2:51:62:df:e9:c6:c8:e9:a5:62:
06:cb:d6:83:56:26:41:7a:3d:45:96:63:e6:4a:18:
ed:ff:c8:b7:95:b8:0c:2b:c6:9e:97:9c:66:90:fc:
11:56:b1:8a:dc:fd:ab:d6:dd:27:04:c8:e4:c5:1e:
59:86:65:c8:fa:d7:5e:0c:8b:d8:1d:1c:de:79:50:
19:05:d5:55:78:5f:84:ac:17:d6:86:c4:33:f9:d1:
fa:10:56:c3:6b:af:65:f6:ca:c8:34:b2:1f:70:97:
08:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:02:75:D4:4A:5C:D2:09:CA:E3:2F:BA:BE:FF:CC:E4:19:D6:7F:11
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/EgJ11Epc0gnK4y-6vv_M5BnWfxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa83::/32
Signature Algorithm: sha256WithRSAEncryption
23:20:e5:47:b3:52:1c:b4:f1:4f:68:30:e2:cd:3b:d0:d5:64:
e0:99:3b:5d:b5:35:5c:c1:8f:2f:79:13:6c:5c:c0:bc:80:4f:
1a:75:58:53:68:1f:fe:8e:3a:f2:73:46:2a:92:81:7b:65:81:
ec:73:12:72:84:c2:8b:26:c5:e3:c3:2d:06:30:a5:ca:a9:61:
2d:e3:00:29:4b:4a:14:ea:df:40:3b:2c:35:f9:80:b3:c1:2b:
7d:af:1f:6c:69:a6:c0:a2:30:6e:ae:2a:e9:77:86:d0:63:69:
ed:94:8e:c8:6e:94:b9:47:b7:84:1f:39:84:c0:13:fc:1a:7a:
0a:c1:60:6e:2f:15:40:e2:62:f1:41:9c:bc:57:cf:da:24:32:
69:bc:6d:ad:e8:9d:bc:a3:83:49:f1:2c:00:41:1a:3f:11:80:
a3:24:c3:cc:0c:9c:31:ab:bf:b9:02:d9:e2:3e:53:56:8e:82:
d0:63:bb:77:6d:8c:5e:7d:f2:21:bc:75:b2:13:79:88:1d:13:
05:e0:b2:a7:b7:a6:57:a1:6c:f5:cf:bc:56:55:27:ca:4b:6b:
a8:61:cc:70:70:4d:95:13:8e:ea:03:9b:5c:83:3e:62:cd:aa:
dd:96:5c:ca:7d:af:bd:df:08:f4:04:b1:fe:c7:70:24:b7:25:
51:61:e2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:06:44 2026 by rpki-client