Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/E-Ra2-fypBAm2Ly6zQeW5Nalg2g.roa
File: E-Ra2-fypBAm2Ly6zQeW5Nalg2g.roa (raw, json)
Hash identifier: 6SwF2I/Naznrfd2NSbjMue/y/wV8CcmMoztB4RjwTgU=
Subject key identifier: 13:E4:5A:DB:E7:F2:A4:10:26:D8:BC:BA:CD:07:96:E4:D6:A5:83:68
Certificate issuer: /CN=7beef5e16c1467da7a02f19237653ae42b109652
Certificate serial: 01A08611081837F4B3F5FA576CCBAEBE8616
Authority key identifier: 7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/E-Ra2-fypBAm2Ly6zQeW5Nalg2g.roa
Signing time: Wed 09 Sep 2026 12:07:38 +0000
ROA not before: Wed 09 Sep 2026 12:07:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:9a8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:11:08:18:37:f4:b3:f5:fa:57:6c:cb:ae:be:86:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7beef5e16c1467da7a02f19237653ae42b109652
Validity
Not Before: Sep 9 12:07:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13e45adbe7f2a41026d8bcbacd0796e4d6a58368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:49:4a:8f:4f:00:95:05:0f:3c:00:9d:07:
f6:56:9b:0a:19:9d:61:a4:6a:89:b7:31:bc:09:6b:
82:ab:69:63:b3:6e:ee:89:16:c1:4f:82:59:dd:9c:
2b:15:9e:d5:1c:d7:e2:a5:6b:a4:c5:ba:92:c3:17:
c4:07:6c:ef:6a:92:ac:3c:82:ed:20:39:f6:ee:af:
e9:08:21:58:dd:50:2b:0d:14:0a:58:29:78:fe:91:
11:4b:e9:dd:43:ab:e2:bc:f2:ae:de:d9:49:5a:52:
f2:85:28:b0:eb:b1:08:d6:fe:a2:63:71:21:f5:21:
2c:a6:09:0d:34:c7:b3:ce:ca:45:b4:04:77:dc:67:
f4:6a:1b:2c:15:41:e0:6c:5c:63:3d:37:9b:7b:ef:
be:56:79:b1:2f:ee:0e:2c:f2:e9:36:92:30:7e:f4:
4b:33:0e:e0:db:6f:03:7d:67:00:45:67:ce:f5:b2:
3a:6c:ca:cd:f6:07:83:af:b3:d9:c0:e2:0d:b4:8d:
7a:18:cc:c8:d5:c8:3a:96:93:e0:f2:a4:ba:c2:07:
ac:4c:c7:4a:d1:13:65:90:48:e7:56:ad:3d:c7:61:
b0:4a:e3:e4:8f:81:02:4f:c9:89:8d:b0:94:e6:53:
e4:a8:1b:6d:76:27:4f:af:67:62:7c:fc:90:9f:48:
80:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E4:5A:DB:E7:F2:A4:10:26:D8:BC:BA:CD:07:96:E4:D6:A5:83:68
X509v3 Authority Key Identifier:
keyid:7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/E-Ra2-fypBAm2Ly6zQeW5Nalg2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:9a8::/48
Signature Algorithm: sha256WithRSAEncryption
72:fc:6e:82:89:7f:03:58:a6:bc:10:7f:50:a1:66:c4:a4:30:
ca:a1:c9:81:c4:e5:2e:9b:06:96:b7:45:02:23:51:d4:01:64:
68:75:d7:b4:1f:92:18:b3:e9:3c:a9:ff:0e:72:6b:56:36:4c:
f2:e3:ef:2d:8e:2b:06:46:dc:8e:40:5a:ff:bd:5a:35:95:7d:
d9:df:f6:bf:be:72:f5:09:96:49:c0:70:7f:84:7e:1d:0c:07:
c7:a3:4d:05:87:30:b1:cd:99:4c:a3:58:5c:81:08:e5:14:7b:
b7:35:39:64:41:a6:93:c4:47:21:7c:d8:f3:2d:4e:ac:b1:3d:
b9:d5:c3:53:cb:3f:7b:25:50:45:24:f0:12:67:ae:6b:89:30:
7b:30:2b:f1:2a:22:1b:8b:f9:a6:c7:5f:9c:fe:2d:ee:8d:11:
36:78:ab:b5:11:c5:99:58:f6:55:2d:0d:a4:ce:6c:8c:ec:b1:
bb:f6:ad:57:21:a4:77:d5:7b:96:09:45:58:1b:70:6f:ec:31:
63:17:0f:53:b6:b0:f3:79:05:5f:c8:51:ef:ae:cd:58:9f:3e:
a0:1b:a4:bd:6f:9e:4d:da:1f:bf:a0:a4:62:de:45:b7:e0:f7:
8e:01:2a:cc:42:fc:0a:11:0f:bd:ba:84:5d:87:01:c7:81:51:
3d:d4:b9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:43:42 2026 by rpki-client