Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/Dethbobc8AREzeWMB_ZU2-bbvfo.roa
File: Dethbobc8AREzeWMB_ZU2-bbvfo.roa (raw, json)
Hash identifier: kYevYHTkzrIkmBd0poSFZ+q7NBuRFFZmWF2J4abz31w=
Subject key identifier: 0D:EB:61:6E:86:DC:F0:04:44:CD:E5:8C:07:F6:54:DB:E6:DB:BD:FA
Certificate issuer: /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial: 01A1AB43675A067FBA8B6F349CC8BCF55D7E
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/Dethbobc8AREzeWMB_ZU2-bbvfo.roa
Signing time: Thu 05 Nov 2026 10:31:23 +0000
ROA not before: Thu 05 Nov 2026 10:31:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61387
IP address blocks: 2a0e:df80:7::/48 maxlen: 48
2a0e:df87::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:43:67:5a:06:7f:ba:8b:6f:34:9c:c8:bc:f5:5d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
Validity
Not Before: Nov 5 10:31:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0deb616e86dcf00444cde58c07f654dbe6dbbdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:18:46:5d:5b:e6:c9:b7:81:98:a0:40:7b:8b:
3f:0a:9c:78:27:3b:32:51:3f:5f:b1:2d:c2:9d:55:
c0:22:e1:e2:d0:45:f2:be:e5:04:54:d1:58:ac:75:
f8:ec:32:74:b2:cf:ab:31:ac:a1:54:4e:ac:c0:df:
55:b2:92:f2:45:99:f9:70:09:31:6b:7a:06:f9:3f:
33:a8:a1:77:98:84:a2:79:f7:f0:c7:c6:d6:70:a5:
2a:d7:84:ab:4e:6c:9a:68:a4:39:58:1f:1e:3c:ca:
77:7f:f0:81:04:c2:0d:d2:c4:fb:cf:5a:86:3b:92:
1a:f2:d0:28:12:f2:42:3a:64:db:57:37:04:dd:78:
28:88:90:37:52:57:81:c4:5d:a7:f8:30:f9:9d:0c:
7c:0f:12:6a:ec:57:ca:70:17:98:4f:62:d9:7b:20:
e3:ff:f3:89:53:f0:f6:42:f2:de:96:da:c2:44:e7:
51:4e:e5:da:d1:da:e4:39:8d:c7:fa:82:ec:5a:13:
a0:b2:97:45:63:80:bf:c1:8c:82:99:8c:e8:76:68:
67:00:45:2b:45:44:17:94:a0:24:49:b1:49:a0:02:
1e:a9:5a:d6:24:78:35:b4:89:2a:7f:5b:af:b8:f5:
06:13:84:9a:5d:13:10:50:26:83:29:3d:41:e5:de:
ce:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EB:61:6E:86:DC:F0:04:44:CD:E5:8C:07:F6:54:DB:E6:DB:BD:FA
X509v3 Authority Key Identifier:
keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/Dethbobc8AREzeWMB_ZU2-bbvfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:df80:7::/48
2a0e:df87::/32
Signature Algorithm: sha256WithRSAEncryption
33:61:97:50:c3:58:40:b2:fc:5f:a7:e3:94:75:a9:79:88:fa:
59:25:a0:1b:b8:6f:72:97:77:97:33:5a:3b:3a:95:cc:ac:50:
10:07:87:9e:86:a3:75:d0:e9:96:14:81:7b:00:99:5f:f1:6b:
27:45:9f:55:48:eb:30:aa:3c:2a:62:f7:92:13:11:0d:40:77:
ab:77:02:a3:2c:37:68:ba:24:3a:97:f4:9a:9a:fb:0b:cf:1a:
08:a7:3b:73:22:8d:f2:2a:3f:9b:17:51:0a:b1:07:24:89:e9:
a9:9a:dd:a9:b6:da:65:13:1b:13:cf:12:7c:1e:90:dd:74:99:
11:67:5d:68:8b:5c:2a:30:21:7e:a8:57:3c:65:63:e9:44:61:
8d:f1:2b:80:fb:cd:68:87:05:c1:90:62:6f:75:b2:fd:d6:eb:
ea:01:ab:42:50:83:25:c1:fa:5d:2b:81:6d:6f:80:5b:0f:6b:
05:4f:db:f8:c9:a4:81:bb:1d:09:ce:e6:ca:ad:33:94:53:1a:
1e:66:d2:b3:3f:9e:73:aa:99:55:05:37:3a:3c:92:2c:0d:d2:
af:91:ef:d7:11:43:2a:8f:80:a6:90:23:77:c8:64:88:27:8a:
11:b9:c5:84:df:4c:83:03:c7:27:2c:77:90:17:25:5c:b9:f3:
c5:dc:63:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:46:22 2026 by rpki-client