Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/1_eUFgYnTIIatrHYB64qjYPc9Ig.roa
File: 1_eUFgYnTIIatrHYB64qjYPc9Ig.roa (raw, json)
Hash identifier: NMRBaQpcx1MsD9VzDXcQnY8lC2ajEbO2jPjwR8rHylI=
Subject key identifier: D7:F7:94:16:06:27:4C:82:1A:B6:B1:D8:07:AE:2A:8D:83:DC:F4:88
Certificate issuer: /CN=724994bb7a6a3f4333d668c498fb965b172c3455
Certificate serial: 019B783547BE4718471396F25E94BABA2F05
Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/1_eUFgYnTIIatrHYB64qjYPc9Ig.roa
Signing time: Thu 01 Jan 2026 06:18:36 +0000
ROA not before: Thu 01 Jan 2026 06:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215585
IP address blocks: 2a13:5c40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:47:be:47:18:47:13:96:f2:5e:94:ba:ba:2f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455
Validity
Not Before: Jan 1 06:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7f7941606274c821ab6b1d807ae2a8d83dcf488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1f:04:7a:81:23:db:02:98:da:7e:96:3a:25:
16:b5:f4:b4:9c:f4:62:54:6d:8c:d4:1a:2a:e5:99:
2e:f3:73:8a:62:f7:0d:49:f7:96:79:af:a5:a6:cd:
6b:6e:28:32:51:b1:06:0b:d4:1d:62:01:9b:7e:57:
85:af:00:62:24:2c:23:fe:37:2e:c6:38:78:89:c4:
40:82:ac:ac:36:02:ed:ae:a2:7c:d5:dc:17:26:ac:
0d:59:c5:d4:d3:36:0e:44:f3:d0:27:0c:78:d1:df:
72:2d:0b:43:2f:3b:35:c9:46:cb:63:3d:59:f0:ea:
2c:73:8f:10:7f:75:6c:88:f9:e3:13:68:98:9a:c3:
58:e9:a9:f3:7e:7f:aa:89:c0:b6:5e:85:49:28:16:
8f:1e:41:26:51:93:95:40:cc:06:57:4f:97:ad:c6:
15:3a:a9:78:16:37:fd:63:b6:91:f1:c7:6b:a1:df:
97:b7:85:18:b9:aa:18:86:b0:16:9a:0f:54:0c:c4:
ff:e4:46:33:3c:3f:3d:8f:e0:6d:5a:11:e3:b8:ef:
dc:d5:9f:59:04:82:92:ce:84:56:ee:60:42:5e:ae:
c8:78:fa:c2:c6:ae:cd:67:06:72:20:4c:8e:8a:b4:
e8:57:55:b0:8a:52:95:07:02:5f:8d:9d:6a:83:e9:
a5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F7:94:16:06:27:4C:82:1A:B6:B1:D8:07:AE:2A:8D:83:DC:F4:88
X509v3 Authority Key Identifier:
keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/1_eUFgYnTIIatrHYB64qjYPc9Ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5c40::/29
Signature Algorithm: sha256WithRSAEncryption
91:90:18:b4:d5:68:7b:dd:50:24:6a:8f:b2:5a:8d:0d:5f:d5:
ce:48:4b:fd:ce:ab:66:4f:77:88:b0:1d:fb:91:a7:f7:5c:41:
be:d0:94:30:d9:6e:8d:56:2b:b4:f7:ba:d4:0e:0b:e0:30:ec:
8c:2f:a2:d1:32:4e:43:a0:69:05:b7:99:07:bc:4c:83:af:aa:
52:40:80:2f:bb:18:dd:b5:87:8a:ec:a2:10:00:a3:c5:e7:08:
f0:a5:2e:b5:7d:06:9c:91:c4:6d:34:95:85:fb:c3:85:2d:e8:
fc:e9:f1:b2:3c:f4:ef:b4:44:89:93:de:9c:12:00:10:a4:a2:
fa:f4:8e:13:5d:bc:8a:e1:a4:99:1a:71:8d:c5:7c:37:92:51:
ce:07:ff:c8:1b:e2:e4:95:05:c6:ef:58:d3:04:53:a9:16:05:
24:50:b9:eb:0a:d2:76:c5:1d:f2:55:17:25:09:4b:62:34:aa:
1b:99:c1:45:b0:00:d9:79:a4:ec:93:e0:ed:01:f0:78:43:76:
e5:aa:c0:5f:6b:0a:75:6e:07:71:e9:65:d0:01:79:44:6b:d7:
c4:40:ce:26:f4:aa:cb:17:86:bb:0f:64:83:e5:14:6d:20:b4:
a2:3d:5a:70:79:7d:37:6b:c1:36:af:b1:99:dc:61:1a:f4:b5:
68:ff:99:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:29:39 2026 by rpki-client