Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/ihH2jmcAzRuRb0DXObKEK01lyBE.roa
File: ihH2jmcAzRuRb0DXObKEK01lyBE.roa (raw, json)
Hash identifier: 8lNi9w5SpA0dQSPNcnFbf41In6HTCs+i7pcqGwmC+bY=
Subject key identifier: 8A:11:F6:8E:67:00:CD:1B:91:6F:40:D7:39:B2:84:2B:4D:65:C8:11
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 019F228F4B29242C2246B5DCDB12C3B67AEE
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/ihH2jmcAzRuRb0DXObKEK01lyBE.roa
Signing time: Thu 02 Jul 2026 11:20:43 +0000
ROA not before: Thu 02 Jul 2026 11:20:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3214
IP address blocks: 2a12:a300::/29 maxlen: 48
2a14:1f80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:8f:4b:29:24:2c:22:46:b5:dc:db:12:c3:b6:7a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Jul 2 11:20:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a11f68e6700cd1b916f40d739b2842b4d65c811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c6:4b:03:4b:3d:6b:90:1c:bc:7a:93:49:53:
eb:82:e4:b1:9a:ea:13:33:d7:ce:6d:1c:99:31:49:
82:de:dc:42:bd:a7:20:c8:e6:d4:0d:7b:8c:16:19:
7d:1c:d0:b5:56:1b:43:31:90:42:6f:f0:61:3b:a7:
10:ba:e0:8e:c5:d4:c4:96:5c:64:f5:df:0d:c8:3b:
3a:0a:de:21:49:2c:1a:4b:49:6f:5a:99:8f:c6:3b:
b3:20:63:71:74:e1:b3:d4:12:db:d7:60:7b:26:4a:
47:b5:20:9e:b0:a7:3f:6f:42:42:38:a1:90:ad:68:
13:c0:86:ce:d7:49:6f:3d:3a:00:58:83:28:ee:c7:
27:45:67:16:43:77:a7:bb:36:5b:36:4c:49:3a:03:
e8:36:3f:db:45:62:96:80:8e:31:f1:b7:93:fa:06:
ff:a9:f2:64:05:e1:ac:4f:51:05:87:da:20:9d:77:
91:20:2e:45:ea:eb:7e:d7:f7:14:b6:43:4f:58:61:
ce:5c:f2:1a:f2:dd:d5:c2:40:13:43:89:9f:a5:93:
76:37:5f:1c:06:4d:d3:8c:ad:f3:c2:70:c9:96:16:
04:d1:4d:14:4a:65:52:f4:b3:72:ad:a2:4c:f0:38:
94:d9:51:6c:72:4f:da:66:e7:26:2c:34:4f:7f:9b:
5f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:11:F6:8E:67:00:CD:1B:91:6F:40:D7:39:B2:84:2B:4D:65:C8:11
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/ihH2jmcAzRuRb0DXObKEK01lyBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a300::/29
2a14:1f80::/29
Signature Algorithm: sha256WithRSAEncryption
37:e0:4f:43:03:f8:e3:eb:89:46:b6:75:0e:85:c0:ec:0e:ea:
a1:37:b6:dc:6c:13:5e:00:3b:52:a7:da:80:91:41:1c:ad:f6:
1d:23:92:34:e9:d8:f6:28:c8:ca:9f:dd:ab:f7:0c:e7:fd:03:
fd:97:07:4b:1a:b0:07:d1:a1:58:ab:a6:bb:d2:1a:b4:65:6e:
fb:7c:d9:a4:68:50:84:a1:60:06:99:91:65:c8:9e:b4:87:6b:
6f:0f:81:91:72:e0:ae:7c:e9:ed:32:c4:e9:b8:eb:3f:80:23:
af:a6:6e:9d:b0:12:05:08:81:40:72:49:31:95:e2:fe:12:49:
88:03:21:06:5a:62:f6:98:ce:9b:6a:51:f1:59:8e:ed:67:e8:
f9:cb:46:89:83:39:d7:24:10:5e:15:6f:1e:45:c4:3d:15:79:
c7:74:8d:48:9b:db:e8:16:24:d9:ad:a7:00:1e:74:39:ba:13:
e2:6f:4f:7d:a3:62:48:2a:5f:04:56:1b:8c:18:9a:e5:1f:d0:
81:4d:97:9b:bb:8d:53:3c:b2:be:87:9f:ad:4a:d9:94:33:f5:
24:92:ec:60:cc:61:ac:3e:f9:ab:ec:a3:3d:1a:3c:4d:22:f2:
57:78:d6:70:d2:f4:7d:10:02:95:dc:00:16:1d:fb:2e:a8:da:
09:1f:89:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:33 2026 by rpki-client