Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/10SEluxF1blgYZh7SmOtZXXB_SQ.roa
File: 10SEluxF1blgYZh7SmOtZXXB_SQ.roa (raw, json)
Hash identifier: K+/AqdIbFpDkq/bdo3MVUBhbUT0zQYlWGIv+bYQcsPQ=
Subject key identifier: D7:44:84:96:EC:45:D5:B9:60:61:98:7B:4A:63:AD:65:75:C1:FD:24
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 01A03F250D185022AED11EE79A2BE67CF404
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/10SEluxF1blgYZh7SmOtZXXB_SQ.roa
Signing time: Wed 26 Aug 2026 17:36:27 +0000
ROA not before: Wed 26 Aug 2026 17:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218884
IP address blocks: 2a07:e000:32::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:25:0d:18:50:22:ae:d1:1e:e7:9a:2b:e6:7c:f4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: Aug 26 17:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7448496ec45d5b96061987b4a63ad6575c1fd24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:c0:78:db:7f:ce:1a:59:73:90:d2:a8:d9:
1a:3e:b3:48:0c:d6:26:5c:c9:39:be:79:d4:58:6f:
e7:73:d6:83:a4:fe:55:d6:c1:cd:23:71:6f:37:b8:
22:53:02:8d:95:40:31:5d:5c:92:37:6c:8f:9d:89:
58:29:a4:29:ca:9a:c1:33:74:e4:e3:5b:57:53:31:
17:53:ec:d1:44:69:09:80:60:3e:b0:22:65:c1:23:
ab:09:a9:51:b8:57:b4:df:9c:73:d3:65:0d:29:47:
b2:8c:78:ee:a2:b9:a3:bb:82:43:8b:ff:74:b6:30:
34:9f:d2:04:77:77:bc:65:c4:d1:43:5d:c9:54:59:
65:eb:35:b1:91:38:5d:2a:99:20:81:5d:e4:6a:7e:
f3:8b:50:a9:af:7b:dd:5b:24:57:b5:57:90:07:d3:
79:6f:73:fe:f5:6f:8c:29:74:39:83:b5:0e:ba:99:
33:04:b6:0f:a5:dc:d5:d0:bf:35:db:9a:77:80:da:
63:55:d2:73:ee:d1:c8:35:a5:0c:62:d1:dc:19:78:
2e:97:33:7e:0b:a0:40:3d:e2:db:1b:c4:a8:18:b2:
c2:f1:f0:2b:36:6a:7c:9e:2c:85:04:51:c7:2c:b9:
de:92:3b:d5:fd:ca:7d:bb:79:33:9c:e1:4e:80:21:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:44:84:96:EC:45:D5:B9:60:61:98:7B:4A:63:AD:65:75:C1:FD:24
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/10SEluxF1blgYZh7SmOtZXXB_SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e000:32::/48
Signature Algorithm: sha256WithRSAEncryption
63:8f:a2:83:5f:ef:db:a8:53:06:9e:cf:ac:51:e8:f6:ed:dd:
f2:9f:ed:96:a3:a0:80:84:9d:e4:ce:a2:1f:ae:06:4b:7a:32:
f4:c4:84:eb:ca:22:a3:f1:89:0b:d4:61:9a:ed:a7:19:b2:23:
f1:ad:80:c0:6e:31:74:e6:33:94:1f:af:44:ad:3b:04:69:6d:
38:69:6f:f7:5a:b8:16:9f:63:dc:67:08:dd:b3:98:8d:54:81:
ce:02:5c:22:0e:b5:d9:be:dc:1a:57:c7:19:5a:43:df:6a:19:
5b:6b:34:61:51:63:04:a6:19:a5:23:9e:f9:0e:09:93:fa:35:
9c:9b:cd:41:06:56:03:cf:0c:ed:6f:c6:7c:06:34:1a:be:99:
93:11:00:10:f0:49:e9:fa:2d:c7:16:92:4e:98:ed:60:2a:b0:
b1:de:c3:02:7c:22:a4:de:d6:c4:c5:65:7f:68:c6:b2:6f:dd:
bd:1e:1d:90:f5:64:15:52:a0:cb:29:cb:93:42:b6:a1:5d:f2:
3e:ba:74:90:26:00:ee:04:94:c3:2b:85:e1:d7:1f:62:19:fe:
c7:c4:92:81:59:a6:f4:cd:75:c7:25:31:dd:c5:29:54:80:e1:
86:04:53:59:10:b5:78:cf:8a:12:df:6d:27:38:ec:a7:8d:b7:
eb:99:47:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:40:38 2026 by rpki-client