Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/dLCc4T38jjW9ZVrv7BytKwK2-rQ.roa
File: dLCc4T38jjW9ZVrv7BytKwK2-rQ.roa (raw, json)
Hash identifier: SSbQ0P78576+HZ65RpnRxfdVzt825dy0qH7AI6aJjAs=
Subject key identifier: 74:B0:9C:E1:3D:FC:8E:35:BD:65:5A:EF:EC:1C:AD:2B:02:B6:FA:B4
Certificate issuer: /CN=ebed98121a04d5aebcfbec2f238ba2d37dc8c5b3
Certificate serial: 019F6E2F142818362B59769EF3754C337C54
Authority key identifier: EB:ED:98:12:1A:04:D5:AE:BC:FB:EC:2F:23:8B:A2:D3:7D:C8:C5:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-2YEhoE1a68--wvI4ui033IxbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/dLCc4T38jjW9ZVrv7BytKwK2-rQ.roa
Signing time: Fri 17 Jul 2026 03:46:46 +0000
ROA not before: Fri 17 Jul 2026 03:46:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 2001:678:12cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/6-2YEhoE1a68--wvI4ui033IxbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/6-2YEhoE1a68--wvI4ui033IxbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-2YEhoE1a68--wvI4ui033IxbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6e:2f:14:28:18:36:2b:59:76:9e:f3:75:4c:33:7c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebed98121a04d5aebcfbec2f238ba2d37dc8c5b3
Validity
Not Before: Jul 17 03:46:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74b09ce13dfc8e35bd655aefec1cad2b02b6fab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ce:3b:a7:32:a3:72:7f:f4:5b:64:ef:84:6a:
95:31:02:94:70:ff:72:b2:74:6f:22:b6:1f:15:5c:
09:6f:41:52:ee:9e:89:75:47:5e:43:22:e9:c3:0c:
86:cb:5e:0d:31:cb:73:e7:26:54:0d:64:e4:5c:29:
6a:cf:43:81:47:7d:81:0e:c7:25:a7:9c:ef:1e:d6:
f7:89:a8:6d:a9:0f:2d:ed:34:a1:c9:b1:53:38:9f:
b9:a5:76:01:10:a5:fa:af:6f:51:d4:a6:24:8b:fd:
60:69:31:a4:8b:a9:10:5e:ba:23:91:a2:09:fc:a6:
e5:a3:0e:09:eb:73:29:34:e2:9d:a7:bb:86:e1:25:
e1:6a:57:6e:bb:26:db:ca:71:01:2c:75:33:0f:4f:
7b:9d:8d:41:59:37:84:db:04:12:59:0d:40:09:80:
01:6d:24:97:89:ea:90:f7:85:89:5f:f8:6d:e0:eb:
0b:e9:ed:42:44:c6:0b:30:53:54:90:a1:22:99:24:
22:a5:30:23:d0:21:ff:07:ec:aa:d6:b4:9f:44:88:
ec:97:98:e1:48:4c:0e:40:e9:66:5b:1e:ad:27:15:
05:f2:92:ae:52:0d:24:3d:a2:9f:4e:93:4b:9a:ef:
64:5d:fa:1f:44:20:7c:26:b3:68:44:0b:0b:a3:f0:
7e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B0:9C:E1:3D:FC:8E:35:BD:65:5A:EF:EC:1C:AD:2B:02:B6:FA:B4
X509v3 Authority Key Identifier:
keyid:EB:ED:98:12:1A:04:D5:AE:BC:FB:EC:2F:23:8B:A2:D3:7D:C8:C5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-2YEhoE1a68--wvI4ui033IxbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/dLCc4T38jjW9ZVrv7BytKwK2-rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/6-2YEhoE1a68--wvI4ui033IxbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:12cc::/48
Signature Algorithm: sha256WithRSAEncryption
28:e0:35:af:54:7d:58:68:0c:69:a6:e1:fb:99:25:67:1d:da:
4e:ca:99:a1:f7:51:b2:4c:bf:08:6b:be:85:91:dd:26:fb:f2:
dc:a5:3c:66:05:54:b3:12:7e:b3:55:2a:34:a9:21:2b:c1:94:
b1:35:a6:d8:16:73:5b:97:4b:f2:4d:23:ff:7d:dc:92:ac:4a:
76:82:4d:98:27:25:a8:85:93:47:3a:f1:9a:e1:ff:93:20:af:
59:34:ac:8f:46:93:00:33:0a:ca:07:de:27:12:4e:0a:6d:f6:
f5:51:ef:89:28:0a:bc:3a:c7:42:0b:19:cc:b4:ba:ed:80:12:
78:13:f1:fd:0f:0f:69:d8:d2:b1:35:b2:06:01:e6:91:4a:cc:
9a:21:b8:25:e6:81:f3:2c:46:c7:09:1c:c2:69:83:7e:53:22:
3c:c4:95:9f:ff:53:07:e8:49:66:c4:ca:27:f1:c3:ad:88:37:
5d:ed:73:76:cc:a8:c9:20:77:e8:7f:57:f0:6c:62:5f:24:2b:
b3:d2:53:59:3e:0e:f3:b3:d9:0b:b9:bb:12:75:d0:74:3e:6f:
dc:78:8b:73:3b:f1:a4:4b:29:96:f9:fd:1e:5a:c1:da:1f:a0:
75:5c:64:9a:b7:cc:a0:10:44:6c:b6:ce:a9:42:79:40:bd:52:
a5:a9:76:81
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ9uLxQoGDYrWXae83VMM3xUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZWQ5ODEyMWEwNGQ1YWViY2ZiZWMyZjIzOGJhMmQzN2Rj
OGM1YjMwHhcNMjYwNzE3MDM0NjQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGIwOWNlMTNkZmM4ZTM1YmQ2NTVhZWZlYzFjYWQyYjAyYjZmYWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5M47pzKjcn/0W2TvhGqVMQKUcP9y
snRvIrYfFVwJb0FS7p6JdUdeQyLpwwyGy14NMctz5yZUDWTkXClqz0OBR32BDscl
p5zvHtb3iahtqQ8t7TShybFTOJ+5pXYBEKX6r29R1KYki/1gaTGki6kQXrojkaIJ
/Kblow4J63MpNOKdp7uG4SXhalduuybbynEBLHUzD097nY1BWTeE2wQSWQ1ACYAB
bSSXieqQ94WJX/ht4OsL6e1CRMYLMFNUkKEimSQipTAj0CH/B+yq1rSfRIjsl5jh
SEwOQOlmWx6tJxUF8pKuUg0kPaKfTpNLmu9kXfofRCB8JrNoRAsLo/B+MwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHSwnOE9/I41vWVa7+wcrSsCtvq0MB8GA1UdIwQY
MBaAFOvtmBIaBNWuvPvsLyOLotN9yMWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi0yWUVob0UxYTY4LS13dkk0dWkwMzNJeGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81OGJiOTMtZjZhMi00ODk4LWJmZDgt
MDVkODc1NmYwOTJlLzEvZExDYzRUMzhqalc5WlZydjdCeXRLd0syLXJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81OGJiOTMtZjZhMi00ODk4LWJmZDgtMDVkODc1NmYwOTJl
LzEvNi0yWUVob0UxYTY4LS13dkk0dWkwMzNJeGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBLM
MA0GCSqGSIb3DQEBCwUAA4IBAQAo4DWvVH1YaAxppuH7mSVnHdpOypmh91GyTL8I
a76Fkd0m+/LcpTxmBVSzEn6zVSo0qSErwZSxNabYFnNbl0vyTSP/fdySrEp2gk2Y
JyWohZNHOvGa4f+TIK9ZNKyPRpMAMwrKB94nEk4Kbfb1Ue+JKAq8OsdCCxnMtLrt
gBJ4E/H9Dw9p2NKxNbIGAeaRSsyaIbgl5oHzLEbHCRzCaYN+UyI8xJWf/1MH6Elm
xMon8cOtiDdd7XN2zKjJIHfof1fwbGJfJCuz0lNZPg7zs9kLubsSddB0Pm/ceItz
O/GkSymW+f0eWsHaH6B1XGSat8ygEERsts6pQnlAvVKlqXaB
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:05:55 2026 by rpki-client