Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/tHScJwbwVc39t_qU7eywSlVUQQQ.roa
File: tHScJwbwVc39t_qU7eywSlVUQQQ.roa (raw, json)
Hash identifier: z1EErMeiSgE83QJ2jm6GtnDSOUm1lOCvhs+ihsIpjic=
Subject key identifier: B4:74:9C:27:06:F0:55:CD:FD:B7:FA:94:ED:EC:B0:4A:55:54:41:04
Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial: 019F5A7A78E9481FA6DF669A21F551761828
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/tHScJwbwVc39t_qU7eywSlVUQQQ.roa
Signing time: Mon 13 Jul 2026 07:56:43 +0000
ROA not before: Mon 13 Jul 2026 07:56:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198798
IP address blocks: 2a0d:7100:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:7a:78:e9:48:1f:a6:df:66:9a:21:f5:51:76:18:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Validity
Not Before: Jul 13 07:56:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4749c2706f055cdfdb7fa94edecb04a55544104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:89:16:43:9e:eb:46:a7:18:89:e7:8b:bb:
a2:b6:24:23:55:f0:2e:5a:b4:cd:12:98:ba:91:c1:
4e:eb:d1:47:64:92:41:49:46:b9:e2:9d:1e:7c:f5:
69:51:b9:b2:ec:dc:ac:17:80:e6:fe:32:29:ca:00:
51:8c:a4:f6:b3:f5:a0:00:dd:15:28:63:8f:d8:49:
bd:f3:63:1e:a5:25:14:2f:c4:6f:00:98:d2:cd:14:
3a:8e:4d:8a:61:11:4e:74:62:18:9a:ee:aa:08:b2:
18:a4:d1:3a:3b:04:ce:9a:c9:96:07:c9:e2:02:c6:
16:8c:79:b0:75:48:94:71:d1:3a:5d:1e:f5:92:4b:
24:74:2e:a1:92:6d:47:cb:c1:29:79:38:9c:24:0e:
00:5a:40:4e:94:9a:95:13:9a:2b:22:d3:d7:30:95:
2b:e9:d5:9a:c9:2c:90:7f:1c:a3:93:a3:19:77:d3:
87:56:a1:00:9b:30:3d:7a:40:be:ee:0e:39:5c:8f:
81:2d:4f:b6:49:de:43:37:5d:2d:13:64:25:e3:f7:
87:4d:bc:8a:35:86:4e:e6:eb:c9:9e:10:d4:25:1c:
76:61:31:ea:18:ef:0b:00:b8:35:6c:65:25:6d:34:
7e:be:68:d4:82:4c:31:e8:19:5d:f9:59:66:fb:3e:
ab:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:74:9C:27:06:F0:55:CD:FD:B7:FA:94:ED:EC:B0:4A:55:54:41:04
X509v3 Authority Key Identifier:
keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/tHScJwbwVc39t_qU7eywSlVUQQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:7100:f::/48
Signature Algorithm: sha256WithRSAEncryption
dd:2c:a4:99:8b:2d:d3:5d:aa:37:cf:35:2e:10:af:8b:e5:4d:
d7:a1:f5:ad:1f:7b:65:b3:5a:99:56:9e:92:f8:c1:77:64:63:
64:31:a4:39:39:cf:4a:3e:b4:65:d4:f9:cd:71:46:aa:51:37:
b9:64:90:78:22:f3:26:8b:16:71:12:72:dc:3b:52:dd:07:44:
16:85:ab:ce:3c:d9:b0:a8:d9:99:7c:2c:71:47:49:f0:cc:62:
b3:29:0c:7f:44:5a:ce:cd:01:15:01:d9:8d:49:0f:c8:98:f4:
1f:19:9e:b7:70:ef:55:a4:bb:89:dd:af:2d:83:16:69:10:35:
8c:25:9c:f4:5b:b7:84:c5:8a:fd:aa:11:00:99:f2:68:67:a7:
63:67:f4:31:b8:8c:8f:ed:09:56:0c:87:07:69:e5:a3:fe:46:
a0:46:3e:68:16:b0:49:51:39:e6:b4:a2:08:12:d2:f1:51:9d:
ba:aa:f7:7f:20:6e:d4:a3:57:47:db:20:01:9c:5d:23:eb:0b:
11:88:33:79:7d:98:e3:31:d5:1b:27:91:c1:d3:b8:d7:74:aa:
c1:e9:64:0a:95:c0:ba:7c:ca:31:56:e3:a8:d3:04:97:b9:aa:
5e:89:22:43:36:d6:d7:f7:dd:3a:2e:78:78:88:05:d0:86:9e:
ce:a2:2f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:32 2026 by rpki-client