Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/L7GiwrmGsi08SN1UfHEqVnVu1AA.roa
File: L7GiwrmGsi08SN1UfHEqVnVu1AA.roa (raw, json)
Hash identifier: 7wa4EsdE/WysdCyKnSTXhP8nr8JMGrz87uD0iFulFFs=
Subject key identifier: 2F:B1:A2:C2:B9:86:B2:2D:3C:48:DD:54:7C:71:2A:56:75:6E:D4:00
Certificate issuer: /CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Certificate serial: 01A09456BCF4E75D910F771A4348F584805B
Authority key identifier: 7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/L7GiwrmGsi08SN1UfHEqVnVu1AA.roa
Signing time: Sat 12 Sep 2026 06:38:27 +0000
ROA not before: Sat 12 Sep 2026 06:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400342
IP address blocks: 2a10:dc40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:56:bc:f4:e7:5d:91:0f:77:1a:43:48:f5:84:80:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Validity
Not Before: Sep 12 06:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fb1a2c2b986b22d3c48dd547c712a56756ed400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:9c:08:b7:a1:42:5f:99:92:da:91:80:ec:
68:0a:dd:ab:9f:94:52:87:f0:aa:55:9b:da:64:08:
e2:23:d4:f8:8f:1d:dd:32:cf:3d:96:b0:36:3d:48:
d0:dc:6b:34:a8:69:fb:a6:68:8e:5a:dd:0e:90:35:
66:07:66:0f:74:35:29:ef:12:05:7d:6b:f5:e4:b2:
05:47:31:24:62:5a:a1:83:ed:a0:36:23:69:11:71:
d5:49:bf:7c:02:03:ce:e1:eb:11:de:61:03:66:80:
51:d4:2f:f2:11:76:10:cd:df:9a:63:e2:5f:af:b3:
81:43:1e:85:60:d9:1c:96:93:f0:20:c5:ba:a9:70:
af:d2:f1:bb:31:a0:78:10:69:9c:a6:9b:61:9a:01:
9c:88:8b:ea:d5:ab:3a:93:ac:ef:2e:3b:d4:b0:11:
3c:10:64:32:79:88:93:30:33:93:f6:ed:5d:46:51:
e4:30:1e:55:be:71:be:cc:b3:0a:8a:f2:55:ac:da:
4c:b6:f5:97:b4:d8:80:d6:b7:47:3a:a8:ef:18:7a:
95:59:ce:a0:d4:44:57:49:46:3d:76:86:3d:54:74:
06:17:00:04:fc:8e:6a:65:93:90:ba:15:94:a3:0f:
34:19:3a:02:af:8f:a3:32:b6:65:6d:f4:31:35:a6:
52:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B1:A2:C2:B9:86:B2:2D:3C:48:DD:54:7C:71:2A:56:75:6E:D4:00
X509v3 Authority Key Identifier:
keyid:7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/L7GiwrmGsi08SN1UfHEqVnVu1AA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:dc40::/29
Signature Algorithm: sha256WithRSAEncryption
0c:c5:d7:42:a5:1e:2e:bc:4e:9d:79:80:93:74:92:00:51:47:
7a:0c:1b:bc:cc:ce:0f:c0:80:0d:66:4e:33:60:55:a4:2f:03:
a1:7f:f5:7a:85:73:71:22:e5:1b:78:44:19:eb:33:2a:b1:b9:
be:83:55:d7:e9:08:ff:63:01:82:13:09:b9:67:72:4d:6d:bb:
dc:6a:f5:9e:1d:56:38:99:38:61:f3:1a:b1:bc:8c:00:da:02:
58:bb:cd:f3:60:5b:a3:5a:31:0e:b7:65:2e:84:48:f9:a4:aa:
dd:18:01:b2:eb:12:bd:3d:c4:e2:a3:8c:c6:a8:f1:a5:65:d2:
8c:91:24:99:c7:a7:5b:a7:6e:49:a3:73:ea:09:db:eb:38:3f:
91:67:e5:ba:20:61:dd:23:fc:d8:93:49:fe:0e:9e:b7:ad:7a:
a2:85:4c:c2:89:21:60:d5:fc:65:87:57:67:e6:3f:23:6f:f5:
85:81:5b:7d:9d:b5:d4:38:c4:dc:36:61:be:34:db:17:8b:86:
94:3e:f1:3e:b2:c0:f2:26:ac:cf:eb:42:92:67:63:4f:72:e2:
c4:1d:ab:85:44:5f:eb:2c:f0:40:cc:6a:78:74:54:48:64:1d:
8f:46:62:af:6c:43:34:01:e0:5e:af:ce:39:72:d4:ea:4a:e0:
89:af:7b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:20:16 2026 by rpki-client