Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/eG4Tiw6kfYpB_vwUwOLP5_axg04.roa
File: eG4Tiw6kfYpB_vwUwOLP5_axg04.roa (raw, json)
Hash identifier: z3T1Og9z4F5cP7LRjJ7W+hyFnkNYtSHZsOEQU1mNRbg=
Subject key identifier: 78:6E:13:8B:0E:A4:7D:8A:41:FE:FC:14:C0:E2:CF:E7:F6:B1:83:4E
Certificate issuer: /CN=a908487a0d7f4c6228d0dcc129a2a8320db8dbf1
Certificate serial: 01A1BB6D5B64FA6EB51F125F7A40247DA713
Authority key identifier: A9:08:48:7A:0D:7F:4C:62:28:D0:DC:C1:29:A2:A8:32:0D:B8:DB:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQhIeg1_TGIo0NzBKaKoMg242_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/eG4Tiw6kfYpB_vwUwOLP5_axg04.roa
Signing time: Sun 08 Nov 2026 13:51:08 +0000
ROA not before: Sun 08 Nov 2026 13:51:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40419
IP address blocks: 2a0d:f900:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQhIeg1_TGIo0NzBKaKoMg242_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bb:6d:5b:64:fa:6e:b5:1f:12:5f:7a:40:24:7d:a7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a908487a0d7f4c6228d0dcc129a2a8320db8dbf1
Validity
Not Before: Nov 8 13:51:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=786e138b0ea47d8a41fefc14c0e2cfe7f6b1834e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:71:31:07:9a:3e:c6:3a:69:95:1c:14:2f:7d:
03:7f:60:9c:62:6f:fa:31:af:49:dc:4e:5b:3d:3a:
14:77:60:35:ad:db:26:ee:ab:2a:40:e6:78:04:a8:
0c:bc:26:70:56:36:01:f9:05:16:2c:1c:4e:c4:5d:
49:47:d6:b1:c9:7f:ea:2e:fd:c3:66:0a:68:1c:81:
9f:42:4b:0e:e2:01:4e:6d:bb:b4:29:6c:22:11:60:
d8:50:bb:16:13:a8:b5:f2:cf:27:c1:3f:e1:fa:14:
39:61:1f:f5:26:d3:1c:05:f5:f1:a0:a7:ae:88:90:
a2:29:7d:63:c3:f4:37:77:a9:b8:ce:81:a1:57:9a:
f9:8d:0d:fb:03:4c:7b:36:95:03:6d:75:78:c9:37:
51:db:91:82:e5:7b:2b:97:cb:e3:64:5d:8e:0e:16:
ae:ec:82:32:d3:65:b2:88:70:df:39:f0:4f:ea:73:
24:b3:54:23:a2:90:d7:da:f4:cb:4c:23:b3:02:2c:
75:97:22:77:31:09:a8:b9:61:fe:e4:57:19:bd:da:
d4:cd:1f:48:b2:c3:9d:14:50:50:b7:63:7d:ac:ab:
c2:22:8c:bf:a6:eb:e9:d7:fb:0d:a6:94:02:dc:36:
7e:24:29:50:11:f7:cb:4b:f5:b8:75:e3:2b:cd:83:
e8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6E:13:8B:0E:A4:7D:8A:41:FE:FC:14:C0:E2:CF:E7:F6:B1:83:4E
X509v3 Authority Key Identifier:
keyid:A9:08:48:7A:0D:7F:4C:62:28:D0:DC:C1:29:A2:A8:32:0D:B8:DB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQhIeg1_TGIo0NzBKaKoMg242_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/eG4Tiw6kfYpB_vwUwOLP5_axg04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f900:4::/48
Signature Algorithm: sha256WithRSAEncryption
80:83:da:d7:d1:49:85:71:0c:e4:3a:9f:0f:c5:aa:d8:6d:4d:
e6:6b:92:a9:73:bd:4b:fd:51:6d:1b:56:d5:ee:c3:d8:03:72:
21:13:e3:5c:59:b9:00:9a:27:45:26:9a:17:97:8a:4b:c8:8d:
e1:64:42:7e:ae:1e:f4:ad:e8:f1:1b:cd:b8:dd:2c:b1:af:09:
55:ae:f4:5d:ba:e8:fd:01:fb:c9:28:14:27:96:16:6c:3e:d0:
7f:59:51:85:2b:54:2b:46:bd:6c:54:39:a0:62:1a:66:ec:c7:
37:f2:b9:c1:4b:4f:72:88:bc:c0:39:cb:25:b7:95:fd:a3:46:
78:24:9a:5e:1c:6e:0b:c5:9d:c8:4c:78:ea:a6:8b:16:8c:0d:
8c:9b:11:da:1b:63:05:1d:fe:10:33:cb:84:b8:c5:75:c1:1f:
cb:d6:4c:34:7d:31:d2:df:a7:0c:63:d5:15:67:64:c5:cf:8a:
9d:66:f5:24:71:cc:67:ff:ce:cf:92:fa:45:ad:37:ca:d1:a6:
0d:8a:e0:e2:75:dc:da:4b:8e:ac:b6:4d:d8:5e:c0:84:62:a4:
88:4a:18:92:40:03:28:cd:89:84:6e:f6:d1:a1:0b:8c:a7:d5:
48:1c:51:9b:6d:b2:a5:a3:c3:79:80:ca:95:93:46:f3:d8:57:
2c:5f:0f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:20:09 2026 by rpki-client