Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/p0eoEVp2ZRfAFQIEeNZFFp6BKKo.roa
File: p0eoEVp2ZRfAFQIEeNZFFp6BKKo.roa (raw, json)
Hash identifier: 7ygvBpXf/4xZkV++cCRPOzyCKN66G0s7NhzA+lJoryE=
Subject key identifier: A7:47:A8:11:5A:76:65:17:C0:15:02:04:78:D6:45:16:9E:81:28:AA
Certificate issuer: /CN=63cb81a7af136d96f0c76051da6e4d05d1ff633d
Certificate serial: 019F23687DA7A8C7D19B81062A9B559B6610
Authority key identifier: 63:CB:81:A7:AF:13:6D:96:F0:C7:60:51:DA:6E:4D:05:D1:FF:63:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/p0eoEVp2ZRfAFQIEeNZFFp6BKKo.roa
Signing time: Thu 02 Jul 2026 15:17:58 +0000
ROA not before: Thu 02 Jul 2026 15:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14616
IP address blocks: 2a02:e38:8100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7d:a7:a8:c7:d1:9b:81:06:2a:9b:55:9b:66:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63cb81a7af136d96f0c76051da6e4d05d1ff633d
Validity
Not Before: Jul 2 15:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a747a8115a766517c015020478d645169e8128aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:5a:b5:4a:40:9a:80:76:5d:4c:a2:d0:dc:
9f:f0:4e:f6:d1:87:b8:99:c9:5e:68:bf:d5:e3:7c:
48:a8:2d:a2:d6:f2:fa:e2:ed:df:50:fe:c6:70:2b:
2e:e3:25:2c:eb:47:c0:41:e3:c8:85:d7:f7:7a:d8:
12:c0:4c:7d:79:a0:d2:7a:55:12:f7:aa:97:02:60:
00:a7:84:14:c9:fd:a5:db:f5:52:1e:ac:bd:7d:23:
67:5a:01:9f:5f:c1:44:ea:7b:b5:78:27:8e:15:3e:
86:f4:95:ce:5f:f6:cf:dd:5c:64:b9:4f:f4:59:69:
9b:e8:25:6b:86:6d:46:50:63:a6:de:68:6d:ff:9c:
40:85:a7:72:9a:84:f9:e4:8f:5a:05:65:b7:43:72:
c0:05:ad:af:26:ff:1a:4f:a4:ab:60:cf:61:ed:a8:
9a:95:c3:dd:08:f3:53:ac:46:43:fa:d6:0b:95:ba:
b7:bd:3d:35:f0:93:cf:b8:2d:8b:11:3a:81:b8:a5:
10:62:4d:19:56:3b:5a:94:38:9e:6c:67:98:5f:aa:
26:3f:7c:ac:43:9e:db:97:56:42:96:85:94:03:89:
f7:dc:b0:da:ac:a5:00:5d:a7:50:93:a6:4b:63:5d:
6d:7b:1b:c8:2b:4e:c3:df:3f:3f:ec:55:4a:96:f5:
6b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:47:A8:11:5A:76:65:17:C0:15:02:04:78:D6:45:16:9E:81:28:AA
X509v3 Authority Key Identifier:
keyid:63:CB:81:A7:AF:13:6D:96:F0:C7:60:51:DA:6E:4D:05:D1:FF:63:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/p0eoEVp2ZRfAFQIEeNZFFp6BKKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:e38:8100::/40
Signature Algorithm: sha256WithRSAEncryption
4c:45:04:b3:48:30:0f:c3:01:95:3a:35:80:6f:1c:6e:55:8f:
b2:74:54:18:c7:fd:fb:70:b8:68:c3:3d:e9:c5:c8:e4:02:93:
18:ad:dc:aa:c3:07:87:79:0c:7e:63:64:a0:9a:b3:15:87:50:
fc:63:bf:dc:ea:8e:2f:58:41:32:89:62:77:e1:af:4f:9e:62:
8a:b7:32:4d:13:f6:23:12:f6:34:f6:37:cf:c2:91:ea:3d:8d:
6a:b4:ed:ab:79:c0:3f:46:e8:23:8c:99:02:bb:9e:a7:f5:25:
20:1f:2c:64:4d:94:8f:b7:29:e3:d5:11:1d:db:2d:20:dc:1f:
dd:04:63:42:6e:e3:b6:ae:10:30:1e:bd:d9:e5:08:60:76:65:
eb:0a:80:97:29:ca:c4:fa:5f:bf:45:39:da:ad:e8:d7:19:c4:
33:c8:16:0b:e7:fc:4d:93:ce:11:a8:0c:fa:53:00:b0:7b:bf:
01:d7:c3:9b:ef:73:d9:52:e1:c4:08:19:00:6a:3f:62:d3:32:
31:bf:ed:d4:14:11:c4:9b:8d:fb:87:ad:6f:97:ce:9d:23:c2:
78:81:93:84:a2:99:71:e0:1c:8f:2d:26:4e:5e:70:89:77:c1:
36:42:9f:2c:b5:70:da:2f:35:ab:8e:6b:24:73:ad:f0:2f:c9:
f9:58:af:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:50 2026 by rpki-client