Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/E77-yFQRh84D0qTULRJEF0OTucM.roa
File: E77-yFQRh84D0qTULRJEF0OTucM.roa (raw, json)
Hash identifier: jEZp2gqKhSoyIk5JyO1cabqqkVlR2zTup+Or6BPEgXU=
Subject key identifier: 13:BE:FE:C8:54:11:87:CE:03:D2:A4:D4:2D:12:44:17:43:93:B9:C3
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 019D49B891FE0814DA9F86D7BD8444736A16
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/E77-yFQRh84D0qTULRJEF0OTucM.roa
Signing time: Wed 01 Apr 2026 15:45:25 +0000
ROA not before: Wed 01 Apr 2026 15:45:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51714
IP address blocks: 2a09:ff00:103::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:b8:91:fe:08:14:da:9f:86:d7:bd:84:44:73:6a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Apr 1 15:45:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13befec8541187ce03d2a4d42d1244174393b9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:15:6c:0e:ba:08:6e:79:db:e4:b0:4b:79:
c4:17:d2:c1:6e:04:0b:77:68:03:05:c2:3a:9a:f2:
2c:2d:d5:a8:c6:9f:f4:68:8d:8a:9f:cc:1c:45:96:
39:0b:88:07:b6:64:dd:8d:97:d0:c8:5f:94:df:d7:
f1:67:1f:77:4f:68:8b:fb:c8:fc:bc:67:39:66:66:
c0:25:6b:2b:08:93:6d:4d:28:b7:76:c7:e4:d5:f7:
74:4e:79:64:c7:08:e8:b8:9c:6a:1a:6f:75:87:7c:
2d:49:c0:dd:c0:e7:be:5c:bb:92:81:f5:c6:70:f0:
7d:5d:c5:e6:b2:66:bf:a1:cb:c9:7b:29:06:40:98:
ec:2a:1b:96:4a:57:c8:2f:3c:68:69:4e:e4:e6:e5:
ca:b5:9a:4c:33:2e:d3:e9:9b:27:4b:69:66:6f:5a:
72:33:d2:61:46:e2:16:b6:30:93:64:db:46:b5:9d:
67:09:1b:12:bb:e2:83:48:72:70:03:2b:a3:b3:8b:
16:d0:53:55:8f:91:7f:5b:ca:16:b0:2a:da:cf:29:
b8:5f:9c:3f:57:49:2a:47:f6:71:8a:cd:92:c0:60:
a3:f0:64:3f:1b:eb:e2:11:a7:f9:d0:e7:f6:5c:58:
c0:b6:3c:fc:94:a0:aa:15:38:b1:a5:8f:04:68:49:
27:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BE:FE:C8:54:11:87:CE:03:D2:A4:D4:2D:12:44:17:43:93:B9:C3
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/E77-yFQRh84D0qTULRJEF0OTucM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:ff00:103::/48
Signature Algorithm: sha256WithRSAEncryption
68:f6:5b:d8:57:49:15:7b:9a:42:e1:62:86:de:95:6f:8f:e4:
f5:e0:84:7a:67:ea:50:24:19:cf:45:7a:51:38:8f:e0:e3:db:
7f:d0:81:4e:df:7b:bd:0f:3b:9a:ef:b9:67:52:c3:b4:9d:4f:
5e:d4:e1:4c:f2:07:6c:f4:d4:8e:a5:f1:1b:8e:c4:ac:e6:91:
2b:3e:24:4f:a6:ca:c6:a2:38:10:92:e5:8e:ff:30:8f:ac:19:
a7:47:e8:ec:fc:5d:e0:ae:f9:d5:69:17:a9:4f:d0:5d:ab:37:
1e:dd:25:0e:31:cb:0d:ac:06:3d:f4:cb:bd:08:84:ed:63:f9:
7c:99:5e:f3:6b:d5:4c:00:d5:96:34:d5:17:f4:d9:fd:87:ed:
7f:a3:74:51:04:7e:91:57:c4:1e:0a:69:99:19:d9:ed:fa:9f:
cb:9b:f6:bb:d3:05:61:ff:53:5c:44:e9:99:02:89:fb:d7:a6:
7b:b3:c7:fe:00:b0:58:e2:f4:61:88:61:4c:fd:01:ff:6c:10:
f6:dd:8b:24:f8:35:31:13:97:3e:83:ff:4b:99:bf:7e:3d:e9:
e3:95:01:17:60:51:a8:10:20:02:40:e7:45:28:4f:6d:f9:04:
01:70:16:c1:9c:39:90:d3:f6:63:7f:2c:80:f7:fc:8c:bf:4b:
1b:6b:d8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:53:12 2026 by rpki-client