Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/Ein9F3jAVpRLBDepnlIolx4zMH8.roa
File: Ein9F3jAVpRLBDepnlIolx4zMH8.roa (raw, json)
Hash identifier: TmfEr1CMbotSikT7RXIc76R96xXZCXddCaO2lbk1Qds=
Subject key identifier: 12:29:FD:17:78:C0:56:94:4B:04:37:A9:9E:52:28:97:1E:33:30:7F
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019E9376B3778FA4B57E9BA76753AA69A3A3
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/Ein9F3jAVpRLBDepnlIolx4zMH8.roa
Signing time: Thu 04 Jun 2026 16:28:10 +0000
ROA not before: Thu 04 Jun 2026 16:28:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214566
IP address blocks: 2a10:fa81:a00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:76:b3:77:8f:a4:b5:7e:9b:a7:67:53:aa:69:a3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jun 4 16:28:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1229fd1778c056944b0437a99e5228971e33307f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1c:05:00:ef:6b:70:37:a3:61:3d:82:12:cd:
7b:b7:01:27:94:38:41:13:c4:f2:98:a8:93:c9:61:
db:c7:98:fb:a6:88:4c:45:e2:d5:34:a9:6c:6a:c8:
bd:b4:1d:01:c9:40:d8:92:76:77:ec:f5:0b:dc:cb:
b9:65:b2:54:71:00:4b:b1:3b:5d:61:00:21:8b:4b:
f4:99:dd:e0:e7:81:03:a6:33:dd:a3:96:a2:d9:a4:
9c:4f:f9:ae:35:0f:e0:b1:bb:9e:c1:df:ec:e7:98:
e4:95:19:23:c6:af:f0:b9:e5:03:60:53:3e:e6:5d:
c8:d0:73:0d:ba:7e:7c:a4:d5:db:ac:3f:99:81:05:
95:fe:db:5e:68:02:44:2e:bd:31:5e:6a:24:5f:96:
9c:fa:b9:31:58:00:73:58:f9:16:ce:77:78:91:38:
fe:3f:d2:de:07:54:0b:f6:c7:db:0d:6d:d7:4a:b1:
90:98:4f:ca:a3:93:64:8c:68:2c:ee:52:0c:8a:b9:
15:a9:c1:7c:96:fa:fa:ac:8a:07:36:92:36:3f:fe:
1a:03:4c:cd:87:77:28:64:f5:d1:01:7a:db:b6:82:
1c:ff:1b:04:1c:bd:27:4a:52:8b:e0:54:71:ad:22:
3e:32:c1:52:06:24:f6:e0:96:ec:39:3b:05:61:a7:
9b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:29:FD:17:78:C0:56:94:4B:04:37:A9:9E:52:28:97:1E:33:30:7F
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/Ein9F3jAVpRLBDepnlIolx4zMH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:a00::/40
Signature Algorithm: sha256WithRSAEncryption
79:40:50:b2:5a:e5:da:03:7e:ce:68:90:04:9b:7c:7d:02:71:
75:c1:61:00:93:8d:3d:c9:84:fc:f2:b0:1d:ae:c4:92:84:92:
87:54:71:2a:7b:18:ae:8e:05:49:5b:83:b8:2a:b0:d9:f7:cc:
8b:b4:f9:fe:e1:79:c5:54:e7:17:df:32:79:64:f2:95:58:19:
97:6f:6c:5a:5c:43:33:1f:7a:96:bf:74:e5:17:76:d2:c8:97:
63:9a:a7:f7:c6:1f:ac:fa:2d:88:e1:e6:1b:55:1e:57:32:9d:
0e:72:d9:56:00:ce:a2:50:66:77:f4:4e:54:65:3a:3f:69:1f:
79:31:cf:a6:09:80:e0:29:d2:f3:7a:8a:42:d2:f1:46:af:da:
44:1a:db:9e:0c:d6:65:8e:8f:ce:62:ba:f3:fc:35:4a:62:c8:
d5:f3:4a:61:4a:68:89:50:3b:c7:1f:bc:c1:ee:6e:e1:c9:95:
06:a6:be:d0:23:7a:aa:6a:d2:ea:e6:6d:3b:5a:9d:29:32:de:
f2:37:dd:5d:c8:82:d8:8c:a6:90:54:93:14:8f:53:61:c2:ea:
b1:84:c1:e2:80:07:f4:9d:3b:ee:29:57:e7:cc:79:05:6d:c6:
ed:6a:6b:97:8b:64:a7:e4:0f:cb:30:d6:97:7c:99:0d:61:98:
d1:92:8b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:10:42 2026 by rpki-client