Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/eVqy0YQ7fL6ZmZ3Ii8D0s-jZG9U.roa
File: eVqy0YQ7fL6ZmZ3Ii8D0s-jZG9U.roa (raw, json)
Hash identifier: O6uAjr20YNEq9FDlWQolrNL9lhiTBSVc+YvX41XqvEc=
Subject key identifier: 79:5A:B2:D1:84:3B:7C:BE:99:99:9D:C8:8B:C0:F4:B3:E8:D9:1B:D5
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 019FA19660393BA239434EB9AB708E3FB73C
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/eVqy0YQ7fL6ZmZ3Ii8D0s-jZG9U.roa
Signing time: Mon 27 Jul 2026 03:20:14 +0000
ROA not before: Mon 27 Jul 2026 03:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62610
IP address blocks: 2a0b:21c1:600c::/46 maxlen: 46
2a0b:21c1:6013::/48 maxlen: 48
2a0b:21c1:6014::/48 maxlen: 48
2a0b:21c1:6015::/48 maxlen: 48
2a0b:21c1:6016::/48 maxlen: 48
2a0b:21c1:6017::/48 maxlen: 48
2a0b:21c1:6018::/48 maxlen: 48
2a0b:21c1:6019::/48 maxlen: 48
2a0b:21c1:601a::/48 maxlen: 48
2a0b:21c1:601d::/48 maxlen: 48
2a0b:21c1:601e::/48 maxlen: 48
2a0b:21c1:601f::/48 maxlen: 48
2a0b:21c1:6020::/48 maxlen: 48
2a0b:21c1:6021::/48 maxlen: 48
2a0b:21c1:6022::/48 maxlen: 48
2a0b:21c1:6024::/48 maxlen: 48
2a0b:21c1:6025::/48 maxlen: 48
2a0b:21c1:6026::/48 maxlen: 48
2a0b:21c1:6027::/48 maxlen: 48
2a0b:21c1:6032::/48 maxlen: 48
2a0b:21c1:6033::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:96:60:39:3b:a2:39:43:4e:b9:ab:70:8e:3f:b7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Jul 27 03:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=795ab2d1843b7cbe99999dc88bc0f4b3e8d91bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:8d:7e:99:de:75:9f:55:2b:c0:fb:fe:fa:
bb:c2:29:43:5d:ed:08:68:01:29:11:5d:0a:83:c2:
58:b7:00:e9:93:08:d1:ea:51:cd:2e:19:9f:7c:54:
df:f5:bb:60:ed:39:ac:57:75:ee:42:33:dc:1f:01:
ca:14:a0:6a:f0:c5:bf:9b:a9:84:1e:a3:0e:cd:7a:
41:64:24:d2:b2:6f:f7:3c:ca:bd:13:6f:a4:c3:f1:
8e:f3:9a:3a:37:12:4b:81:2e:af:1c:4a:fb:9f:23:
15:24:b3:ba:e0:61:a9:41:71:02:d4:21:9b:bd:d2:
13:8b:bd:d5:5b:50:0a:62:06:cf:6c:ac:08:ca:95:
f0:25:fb:d5:75:23:35:1e:b6:f7:4e:20:c6:b2:26:
1c:18:0e:50:e3:eb:f0:b9:32:80:5f:d1:b8:c7:f1:
42:98:00:8f:cd:1e:6f:2c:5f:e4:ce:2c:e6:6e:4e:
76:5b:e4:91:8c:a9:c5:84:ae:77:f9:ac:05:91:6c:
19:ac:20:cd:38:4c:b9:41:cc:b7:73:56:73:8e:82:
f4:0a:19:ca:79:ea:24:33:49:00:ba:bd:bd:66:04:
fc:7c:21:b4:ad:73:ea:c9:a2:7c:6b:bc:d3:2b:b1:
be:64:de:c5:0a:97:52:ef:93:e9:e8:6f:35:6a:3e:
be:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5A:B2:D1:84:3B:7C:BE:99:99:9D:C8:8B:C0:F4:B3:E8:D9:1B:D5
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/eVqy0YQ7fL6ZmZ3Ii8D0s-jZG9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:21c1:600c::/46
2a0b:21c1:6013::-2a0b:21c1:601a:ffff:ffff:ffff:ffff:ffff
2a0b:21c1:601d::-2a0b:21c1:6022:ffff:ffff:ffff:ffff:ffff
2a0b:21c1:6024::/46
2a0b:21c1:6032::/47
Signature Algorithm: sha256WithRSAEncryption
83:7d:e4:a4:2d:bc:d1:59:59:64:87:5c:22:7e:dd:8f:fd:a0:
2d:52:0a:4d:1b:99:47:25:22:4b:be:88:5f:33:5d:2b:ea:4a:
76:da:87:82:e3:9c:0c:85:34:84:9a:36:13:2e:9d:3e:e8:5f:
0a:b6:6b:0f:be:de:92:a5:bc:ee:d3:45:7f:03:d7:bb:a1:d1:
85:1a:60:d4:a2:59:fa:81:ae:f6:b8:c4:98:4d:69:3c:42:69:
8a:23:42:0f:a3:ad:0d:e1:17:cf:cc:4e:af:41:5a:ab:4b:e5:
12:e3:d7:f0:c3:a4:26:31:a8:2b:c5:9f:6d:70:a8:da:e6:7b:
50:10:0b:e6:76:52:b0:23:a6:67:4e:af:a6:ea:83:c1:38:c4:
73:99:45:7f:d3:e0:25:9c:61:b0:92:44:ee:a2:8c:1c:f9:b0:
d2:c6:cb:84:b5:1b:8d:ec:26:31:00:d7:8d:f6:f7:6b:37:4f:
c6:c3:3f:b1:32:3d:df:c7:65:04:67:7e:ad:ea:59:11:27:88:
26:30:89:b5:56:0a:60:f3:9a:49:d6:59:d0:49:48:c5:11:a5:
65:c6:ec:e8:dc:10:b6:27:81:c1:0a:66:9c:9f:b1:92:84:7b:
91:cf:c1:5a:70:18:8f:df:fd:df:ba:9b:ad:70:19:95:60:72:
f2:8a:58:6e
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgISAZ+hlmA5O6I5Q065q3COP7c8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy
YjNhZWMwHhcNMjYwNzI3MDMyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTVhYjJkMTg0M2I3Y2JlOTk5OTlkYzg4YmMwZjRiM2U4ZDkxYmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+CNfpnedZ9VK8D7/vq7wilDXe0I
aAEpEV0Kg8JYtwDpkwjR6lHNLhmffFTf9btg7TmsV3XuQjPcHwHKFKBq8MW/m6mE
HqMOzXpBZCTSsm/3PMq9E2+kw/GO85o6NxJLgS6vHEr7nyMVJLO64GGpQXEC1CGb
vdITi73VW1AKYgbPbKwIypXwJfvVdSM1Hrb3TiDGsiYcGA5Q4+vwuTKAX9G4x/FC
mACPzR5vLF/kzizmbk52W+SRjKnFhK53+awFkWwZrCDNOEy5Qcy3c1ZzjoL0ChnK
eeokM0kAur29ZgT8fCG0rXPqyaJ8a7zTK7G+ZN7FCpdS75Pp6G81aj6++wIDAQAB
o4ICRjCCAkIwHQYDVR0OBBYEFHlastGEO3y+mZmdyIvA9LPo2RvVMB8GA1UdIwQY
MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt
ZTdkYWVjMTk0YTY5LzEvZVZxeTBZUTdmTDZabVozSWk4RDBzLWpaRzlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5
LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFwGCCsGAQUFBwEHAQH/BE0wSzBJBAIAAjBDAwcCKgshwWAM
MBIDBwAqCyHBYBMDBwAqCyHBYBowEgMHACoLIcFgHQMHACoLIcFgIgMHAioLIcFg
JAMHASoLIcFgMjANBgkqhkiG9w0BAQsFAAOCAQEAg33kpC280VlZZIdcIn7dj/2g
LVIKTRuZRyUiS76IXzNdK+pKdtqHguOcDIU0hJo2Ey6dPuhfCrZrD77ekqW87tNF
fwPXu6HRhRpg1KJZ+oGu9rjEmE1pPEJpiiNCD6OtDeEXz8xOr0Faq0vlEuPX8MOk
JjGoK8WfbXCo2uZ7UBAL5nZSsCOmZ06vpuqDwTjEc5lFf9PgJZxhsJJE7qKMHPmw
0sbLhLUbjewmMQDXjfb3azdPxsM/sTI938dlBGd+repZESeIJjCJtVYKYPOaSdZZ
0ElIxRGlZcbs6NwQtieBwQpmnJ+xkoR7kc/BWnAYj9/937qbrXAZlWBy8opYbg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:25:04 2026 by rpki-client