Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Sk1doWhJ2wr5Ni8PSmBvh-p0Odc.roa
File: Sk1doWhJ2wr5Ni8PSmBvh-p0Odc.roa (raw, json)
Hash identifier: bW8gZPHv4lxyX2ih/CLf/jgt36qadB5Vvxq4k061qS4=
Subject key identifier: 4A:4D:5D:A1:68:49:DB:0A:F9:36:2F:0F:4A:60:6F:87:EA:74:39:D7
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019ECFF7F503F803F1AEE2C2F87FD35E8145
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Sk1doWhJ2wr5Ni8PSmBvh-p0Odc.roa
Signing time: Tue 16 Jun 2026 10:26:34 +0000
ROA not before: Tue 16 Jun 2026 10:26:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213507
IP address blocks: 2a11:c940::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:f7:f5:03:f8:03:f1:ae:e2:c2:f8:7f:d3:5e:81:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jun 16 10:26:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a4d5da16849db0af9362f0f4a606f87ea7439d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:49:a3:c9:fd:46:95:20:a9:00:f8:ef:c6:be:
b1:6c:b3:33:9d:6f:30:2c:87:c9:95:b0:f7:c6:90:
b0:41:ea:49:4a:de:b5:4d:e8:6e:c5:9f:29:3b:02:
f6:bc:0d:af:90:b7:4a:e9:35:a8:a6:44:e1:85:e8:
34:40:99:e5:79:38:5a:55:4c:cc:c0:de:dd:26:06:
63:39:af:ab:ea:b6:45:5a:15:19:9a:a6:d5:dd:c1:
bc:56:d3:7a:16:20:b2:c2:b4:d0:1b:74:ce:90:17:
15:43:a3:e9:17:2d:86:75:d4:80:1a:ae:91:a5:ee:
8c:e5:e1:76:da:5c:64:fa:97:88:e2:34:7e:d6:8a:
ec:b3:ca:d8:01:10:43:12:52:83:d5:d3:e2:3a:c9:
73:ae:99:b3:19:76:3d:a0:ab:19:8f:72:03:0d:fb:
41:97:94:d0:21:db:85:49:ea:9a:23:8c:7b:b3:a1:
f7:4a:a7:ee:10:d3:ed:74:43:18:3e:97:04:38:a4:
a4:39:85:67:cb:ad:2e:36:bb:eb:69:eb:1b:7e:78:
a0:39:77:dc:61:fb:85:a3:4b:42:2f:9f:56:91:c2:
a6:01:dd:c7:a8:06:6f:24:a9:40:1a:d0:86:21:6e:
64:02:4b:86:a1:e0:08:bc:dc:2a:0a:3a:0f:ba:9d:
a0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4D:5D:A1:68:49:DB:0A:F9:36:2F:0F:4A:60:6F:87:EA:74:39:D7
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Sk1doWhJ2wr5Ni8PSmBvh-p0Odc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c940::/29
Signature Algorithm: sha256WithRSAEncryption
5c:76:6e:95:f3:53:f6:a9:74:c5:46:98:e0:80:3c:88:fe:b0:
3d:4a:31:be:3d:5d:4d:bf:46:8b:1f:42:10:8c:9b:dd:d1:79:
ab:02:88:b3:f7:d1:df:29:b8:05:d4:5f:da:0a:f7:8d:a5:f9:
7e:54:71:b3:d8:b6:d2:d5:bc:8f:10:d1:e2:9d:e8:08:ca:eb:
8e:aa:68:5b:fb:05:37:7f:bf:07:a7:0d:79:7b:f9:bb:fb:55:
16:11:fc:6c:0e:fb:b2:b8:82:6d:f0:31:89:ae:c2:66:0f:13:
05:4e:6d:63:a2:b9:95:61:8e:d4:61:dc:d9:fd:6e:4c:44:fe:
50:eb:e6:a7:86:64:c9:d0:3f:9d:82:69:86:10:02:72:6a:15:
1d:d2:1d:ae:8e:d1:0c:1a:43:b8:03:d3:a7:b6:a9:d9:8e:b4:
c4:9e:87:a4:0d:5c:19:0f:1f:02:82:8e:45:fa:cb:f9:f7:26:
13:a8:94:06:43:66:6e:be:09:c0:fb:0c:1c:49:71:59:ad:29:
21:e4:30:e6:1a:34:11:a1:18:00:25:b2:23:6c:eb:13:72:fb:
dc:42:e8:aa:4b:bc:63:cd:f4:27:7c:78:fb:31:59:7c:97:6d:
3f:74:9d:c8:7b:9a:65:9b:04:15:53:6e:4c:21:e1:f6:1c:34:
25:dc:87:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:59:53 2026 by rpki-client