Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/Ei_y7M9Fl_3iztRjXuP1DP4SfU0.roa
File: Ei_y7M9Fl_3iztRjXuP1DP4SfU0.roa (raw, json)
Hash identifier: OsSZawzfUresZMVh8cgGQhsAKGK/Kk+rAbkVCPwwXCQ=
Subject key identifier: 12:2F:F2:EC:CF:45:97:FD:E2:CE:D4:63:5E:E3:F5:0C:FE:12:7D:4D
Certificate issuer: /CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Certificate serial: 019F6516D83A9747D035AE98F1A707E35CA6
Authority key identifier: CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/Ei_y7M9Fl_3iztRjXuP1DP4SfU0.roa
Signing time: Wed 15 Jul 2026 09:23:43 +0000
ROA not before: Wed 15 Jul 2026 09:23:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200772
IP address blocks: 2a12:1340::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:16:d8:3a:97:47:d0:35:ae:98:f1:a7:07:e3:5c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Validity
Not Before: Jul 15 09:23:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=122ff2eccf4597fde2ced4635ee3f50cfe127d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f6:80:40:42:88:df:01:17:fb:71:11:f5:23:
ce:e2:f4:9a:de:77:9f:f1:af:d9:b1:fb:a7:ab:bf:
d3:c2:d2:30:9d:3f:f6:91:de:81:33:8d:69:2a:51:
0f:a9:c1:37:61:c6:31:d0:07:78:d6:3d:cc:70:57:
c6:54:9a:9c:8e:dd:aa:b1:7a:7f:94:29:5c:05:c6:
96:76:30:a1:56:82:af:45:ed:0e:a5:5c:a8:f3:21:
fa:55:d8:61:a9:c8:6d:97:38:b5:55:63:aa:55:d8:
6c:63:f7:3c:11:cf:d6:1c:ca:5d:89:79:c5:1d:0d:
15:8b:79:f4:bc:16:c5:1d:a2:dd:a2:a8:ec:8a:e0:
b8:46:66:32:eb:19:3a:9b:de:16:af:88:3a:29:30:
bb:51:6e:40:00:f3:30:c7:0d:9c:f5:c7:5e:33:03:
a8:f8:79:00:c8:fe:4c:7d:c7:13:57:fc:cf:c5:d4:
40:28:3b:68:06:67:bb:3b:ac:9c:00:3a:b6:5f:31:
36:c8:55:40:4f:a2:7f:e5:56:a8:07:2a:44:cc:5d:
a0:19:5a:f7:5a:ea:3f:e7:6a:6b:a4:78:ad:7f:b9:
29:e7:ee:99:9d:36:90:22:ef:73:94:75:68:dc:54:
53:8d:a4:db:ab:be:34:a8:91:1d:e8:ab:ed:90:4f:
7d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2F:F2:EC:CF:45:97:FD:E2:CE:D4:63:5E:E3:F5:0C:FE:12:7D:4D
X509v3 Authority Key Identifier:
keyid:CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/Ei_y7M9Fl_3iztRjXuP1DP4SfU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1340::/29
Signature Algorithm: sha256WithRSAEncryption
87:b3:2a:4d:a5:ff:3d:b7:06:3a:6f:79:b9:de:68:7b:a4:3f:
cb:95:90:bd:d1:93:13:f6:7d:fc:7c:3c:25:a3:9f:81:3d:06:
3d:98:a1:2c:c9:5c:19:76:64:88:e0:c8:1c:03:11:72:2b:df:
92:18:19:0b:b6:f0:47:a3:d0:94:4c:52:c7:f9:5b:98:5d:42:
c1:cb:a5:65:af:9b:15:b9:01:ad:0b:f3:f7:66:f6:32:2b:5c:
a1:53:bc:66:d9:87:52:cc:3c:df:aa:e9:e6:36:5d:51:2a:f0:
41:22:76:5f:44:a2:09:49:64:bc:35:a2:fc:12:0d:fa:c9:3b:
00:0d:f5:19:54:19:d8:75:be:b7:1d:21:ee:63:e7:0e:06:65:
62:9c:e8:6a:0d:b8:50:86:dc:a0:bf:58:80:1a:74:92:a7:b3:
20:7c:e3:3b:92:a7:17:58:b3:7c:1d:44:9c:89:54:a3:70:eb:
fb:7b:57:47:d8:d5:ef:bd:b2:1b:20:f0:c0:f3:52:c5:0a:f7:
53:a3:e5:73:68:ef:5a:94:3d:e5:53:12:81:7b:98:8e:67:03:
28:92:25:6d:c2:6c:78:3b:ab:42:66:c5:32:1e:dd:fd:9a:3a:
56:74:34:28:d8:a2:b2:08:6d:cb:9b:a3:3c:fe:13:d9:18:62:
b8:35:1a:a4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ9lFtg6l0fQNa6Y8acH41ymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNDQxYzcxZmE4Yzc2NGEyZGMyYzBlY2MxODNlNTJkMjNh
N2FlMWYwHhcNMjYwNzE1MDkyMzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjJmZjJlY2NmNDU5N2ZkZTJjZWQ0NjM1ZWUzZjUwY2ZlMTI3ZDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfaAQEKI3wEX+3ER9SPO4vSa3nef
8a/Zsfunq7/TwtIwnT/2kd6BM41pKlEPqcE3YcYx0Ad41j3McFfGVJqcjt2qsXp/
lClcBcaWdjChVoKvRe0OpVyo8yH6Vdhhqchtlzi1VWOqVdhsY/c8Ec/WHMpdiXnF
HQ0Vi3n0vBbFHaLdoqjsiuC4RmYy6xk6m94Wr4g6KTC7UW5AAPMwxw2c9cdeMwOo
+HkAyP5MfccTV/zPxdRAKDtoBme7O6ycADq2XzE2yFVAT6J/5VaoBypEzF2gGVr3
Wuo/52prpHitf7kp5+6ZnTaQIu9zlHVo3FRTjaTbq740qJEd6KvtkE99xwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBIv8uzPRZf94s7UY17j9Qz+En1NMB8GA1UdIwQY
MBaAFMtEHHH6jHZKLcLA7MGD5S0jp64fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTBRY2NmcU1ka290d3NEc3dZUGxMU09ucmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny82MjBlODQtYzVhMy00OGJiLWEwMTQt
ZWU3MGUxZGQ1YTEwLzEvRWlfeTdNOUZsXzNpenRSalh1UDFEUDRTZlUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny82MjBlODQtYzVhMy00OGJiLWEwMTQtZWU3MGUxZGQ1YTEw
LzEveTBRY2NmcU1ka290d3NEc3dZUGxMU09ucmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhITQDAN
BgkqhkiG9w0BAQsFAAOCAQEAh7MqTaX/PbcGOm95ud5oe6Q/y5WQvdGTE/Z9/Hw8
JaOfgT0GPZihLMlcGXZkiODIHAMRcivfkhgZC7bwR6PQlExSx/lbmF1CwculZa+b
FbkBrQvz92b2MitcoVO8ZtmHUsw836rp5jZdUSrwQSJ2X0SiCUlkvDWi/BIN+sk7
AA31GVQZ2HW+tx0h7mPnDgZlYpzoag24UIbcoL9YgBp0kqezIHzjO5KnF1izfB1E
nIlUo3Dr+3tXR9jV772yGyDwwPNSxQr3U6Plc2jvWpQ95VMSgXuYjmcDKJIlbcJs
eDurQmbFMh7d/Zo6VnQ0KNiisghty5ujPP4T2RhiuDUapA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:17 2026 by rpki-client