Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/EP0aKI-whMmYHwwbQG_UQybF1ro.roa
File: EP0aKI-whMmYHwwbQG_UQybF1ro.roa (raw, json)
Hash identifier: GSiW2v5sajTDLwf2HGqS0tmszInx+A5GWHUr0JLZH7Q=
Subject key identifier: 10:FD:1A:28:8F:B0:84:C9:98:1F:0C:1B:40:6F:D4:43:26:C5:D6:BA
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 01A0C85F599DD342AC753DF5C975EE2901EE
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/EP0aKI-whMmYHwwbQG_UQybF1ro.roa
Signing time: Tue 22 Sep 2026 09:08:07 +0000
ROA not before: Tue 22 Sep 2026 09:08:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214266
IP address blocks: 2a11:23c0::/29 maxlen: 29
2a11:8dc0::/29 maxlen: 29
2a11:a200::/29 maxlen: 29
2a12:7a00::/29 maxlen: 29
2a12:cb00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:5f:59:9d:d3:42:ac:75:3d:f5:c9:75:ee:29:01:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Sep 22 09:08:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10fd1a288fb084c9981f0c1b406fd44326c5d6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:e0:cb:e5:57:ff:6a:1f:dd:d3:44:f7:22:
9c:7c:9c:8d:34:16:4d:5f:78:e7:af:09:75:01:b8:
11:94:fa:37:af:06:68:18:45:c6:1e:ac:cb:d1:f1:
ba:dc:99:dd:6c:54:d0:dc:14:5d:22:6e:8f:80:74:
d9:68:cc:d7:18:7b:f8:f0:35:87:5d:4e:8e:77:32:
c6:34:03:d0:0a:82:08:f8:2b:5a:cf:de:fc:ce:4f:
40:f4:43:e4:25:58:c2:25:0a:ce:79:b6:ff:78:2d:
f9:18:71:24:5c:fb:1b:9d:93:c2:a6:e1:e5:2e:f3:
30:e6:21:d0:d8:c5:00:d1:a4:a8:e7:a4:8c:4c:94:
d3:d1:42:e7:85:5b:1e:b2:8a:63:05:34:48:66:d4:
23:10:c3:a1:5a:2c:0c:f6:25:c6:0f:03:76:cf:10:
37:e6:1f:51:e3:87:5c:6f:58:8e:c0:02:dd:06:73:
d7:de:fc:22:e0:6a:05:78:3d:ca:8c:6f:2f:c8:f8:
99:c1:d4:ac:f4:7e:53:da:60:86:37:85:ae:30:0f:
a2:dc:9a:2e:2c:00:b7:22:32:8a:af:35:79:37:bf:
1a:d7:78:e8:f3:5e:17:64:cf:58:22:8c:71:7f:2b:
1b:7f:4f:c8:bb:24:27:d2:7a:72:81:3a:ac:e3:34:
ce:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FD:1A:28:8F:B0:84:C9:98:1F:0C:1B:40:6F:D4:43:26:C5:D6:BA
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/EP0aKI-whMmYHwwbQG_UQybF1ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:23c0::/29
2a11:8dc0::/29
2a11:a200::/29
2a12:7a00::/29
2a12:cb00::/29
Signature Algorithm: sha256WithRSAEncryption
b9:06:6b:f3:c1:5f:87:18:e4:cb:38:33:b3:6b:94:f6:f2:bf:
b0:ca:c7:8d:a5:dd:43:1a:04:c8:4c:5b:2a:bf:8d:94:08:7c:
24:2b:c9:e0:54:2a:49:22:51:46:c3:8e:40:e2:a8:9a:47:c3:
a0:2d:08:9f:31:c2:a6:15:b5:66:fc:d7:99:12:0a:21:a7:8d:
9e:bd:d9:35:15:24:01:26:d2:4c:8f:d7:27:47:2b:fe:66:0d:
31:db:58:80:e4:79:cb:bc:73:c3:5b:2d:bb:f8:0d:0d:1b:9b:
75:c7:1c:33:bb:1d:0a:c1:4c:d7:d9:c0:60:f3:40:dd:22:ba:
e0:a6:df:53:f6:77:63:c3:84:c6:f6:46:13:9d:e4:dd:68:7f:
ce:b4:71:ed:5f:41:9d:94:56:59:80:ca:26:9a:ae:f1:66:c0:
3d:4e:42:03:80:2c:11:45:cd:31:5c:75:d7:c9:cb:e1:f7:96:
23:cd:db:b7:2f:ba:1c:78:3c:cf:b3:fd:f6:19:b1:35:69:7b:
19:0a:48:5b:99:ea:53:a5:13:1b:bf:ed:91:41:33:08:e7:e6:
a1:de:e2:65:83:9d:33:95:8d:07:87:23:2d:dc:0d:6f:7a:68:
77:63:6e:42:bd:79:69:7f:6c:cd:10:59:cd:1a:e5:82:32:48:
96:2c:0d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:09:48 2026 by rpki-client