Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/XWXdPFbNew782HEBRcsR75N8I6E.roa
File: XWXdPFbNew782HEBRcsR75N8I6E.roa (raw, json)
Hash identifier: O/wTZsRn6pYeIL3wiTECfyYWWAfLVEcLCSgYI0EujJo=
Subject key identifier: 5D:65:DD:3C:56:CD:7B:0E:FC:D8:71:01:45:CB:11:EF:93:7C:23:A1
Certificate issuer: /CN=ebc79b96b6afdbdaecb4df20438d136c382e8d2d
Certificate serial: 019F2368344873B8BFCCDF08A430FC1E28A3
Authority key identifier: EB:C7:9B:96:B6:AF:DB:DA:EC:B4:DF:20:43:8D:13:6C:38:2E:8D:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68eblrav29rstN8gQ40TbDgujS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/XWXdPFbNew782HEBRcsR75N8I6E.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212710
IP address blocks: 2a09:2900:3000::/40 maxlen: 40
2a09:2900:6000::/40 maxlen: 40
2a09:2900:6800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/68eblrav29rstN8gQ40TbDgujS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/68eblrav29rstN8gQ40TbDgujS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/68eblrav29rstN8gQ40TbDgujS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:34:48:73:b8:bf:cc:df:08:a4:30:fc:1e:28:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc79b96b6afdbdaecb4df20438d136c382e8d2d
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d65dd3c56cd7b0efcd8710145cb11ef937c23a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:6c:a9:9b:81:65:9f:8a:9d:5d:17:24:fd:98:
8f:1b:4e:11:73:ae:fb:9d:69:19:4b:30:f8:4f:31:
de:9b:82:21:9d:b1:8c:21:75:5a:11:04:8d:67:f8:
be:77:f1:6b:99:3f:ff:57:92:ac:6f:c8:6d:93:e7:
dd:39:fa:b3:95:31:96:22:a8:8d:b7:ee:83:33:db:
73:7a:50:0b:52:24:82:37:f6:b0:80:ac:f3:81:91:
c9:e7:f6:d1:2f:68:eb:fc:06:5f:00:29:9e:1b:a8:
8a:d1:3a:4d:1a:2b:b8:7b:02:ed:e3:4f:55:60:a1:
c3:e4:e7:56:32:62:66:80:46:86:cc:a2:5d:06:85:
74:b8:ac:ed:11:b4:95:ea:1d:8e:28:5c:eb:55:9d:
ab:40:e8:6e:ab:c0:2b:dd:ba:c7:75:8c:7f:cb:e0:
44:9b:31:c0:57:41:28:65:01:3c:9d:67:d5:d5:ba:
b5:4c:01:01:12:94:23:02:d1:3a:5e:06:17:f5:d3:
b8:6f:a2:24:60:c2:ac:d5:e3:5c:37:38:5e:15:9b:
c5:ef:67:19:46:b5:41:99:e7:31:db:83:8b:39:78:
91:25:ba:ef:f9:cd:15:65:15:14:80:6b:9c:59:2e:
f5:71:9b:aa:4d:ee:60:84:b4:f3:ae:3e:3f:5f:91:
3e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:65:DD:3C:56:CD:7B:0E:FC:D8:71:01:45:CB:11:EF:93:7C:23:A1
X509v3 Authority Key Identifier:
keyid:EB:C7:9B:96:B6:AF:DB:DA:EC:B4:DF:20:43:8D:13:6C:38:2E:8D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68eblrav29rstN8gQ40TbDgujS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/XWXdPFbNew782HEBRcsR75N8I6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/68eblrav29rstN8gQ40TbDgujS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2900:3000::/40
2a09:2900:6000::/40
2a09:2900:6800::/40
Signature Algorithm: sha256WithRSAEncryption
1b:c7:92:51:9f:ba:48:52:4a:95:2e:d1:9b:a5:ae:52:54:96:
ce:8f:e8:26:1b:a3:01:f4:e8:91:57:0c:69:de:c4:c9:95:33:
ce:83:ba:f3:bb:a0:22:62:bb:13:d9:1f:6a:7e:a8:18:e7:c6:
66:19:35:ef:76:0e:df:4c:8f:fd:b6:4b:a9:4e:bc:e4:cf:1e:
ea:76:77:6a:da:a1:c4:26:56:42:ff:fb:7d:91:81:64:47:32:
cf:67:5e:c2:05:1b:e9:f4:86:71:d1:23:0b:db:57:76:e4:59:
9c:e7:41:8c:b1:9b:b8:db:f2:ba:32:02:19:33:29:42:27:70:
16:65:bf:ca:c3:7d:e5:15:a6:a0:10:79:7b:05:8f:25:b6:5a:
59:34:8f:ee:e0:dd:e1:0f:65:a1:15:8a:59:da:0d:3d:a8:87:
86:e3:ba:fb:2c:e2:13:61:95:c3:73:06:59:45:39:76:e3:23:
e2:fc:ad:d0:3f:fb:39:cc:5a:98:06:12:a2:04:9f:cc:e2:3b:
9a:28:33:3b:99:2f:9b:59:5a:88:97:8e:22:7d:0f:09:4b:79:
8a:e5:2e:16:61:6d:bd:20:45:37:bf:9b:b1:93:23:02:08:89:
1e:e7:6a:24:00:d6:4c:17:77:d5:f8:3e:eb:da:db:80:12:cd:
81:f0:5e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:25 2026 by rpki-client