Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EaQ2uAN7krDRGWJaEP7I0x-8dJ4.roa
File: EaQ2uAN7krDRGWJaEP7I0x-8dJ4.roa (raw, json)
Hash identifier: li3H2zdttpha3ycJNDPdwwOvNizEtE+dx9713YbWSaU=
Subject key identifier: 11:A4:36:B8:03:7B:92:B0:D1:19:62:5A:10:FE:C8:D3:1F:BC:74:9E
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019E1C36D9AFA7F9F08C977602F12B4CAD87
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EaQ2uAN7krDRGWJaEP7I0x-8dJ4.roa
Signing time: Tue 12 May 2026 12:43:37 +0000
ROA not before: Tue 12 May 2026 12:43:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207530
IP address blocks: 2a12:bec4:1a90::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:36:d9:af:a7:f9:f0:8c:97:76:02:f1:2b:4c:ad:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: May 12 12:43:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11a436b8037b92b0d119625a10fec8d31fbc749e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:80:87:e8:d9:3a:68:4d:d6:e3:0d:90:72:1e:
25:47:66:86:89:39:0b:78:d7:e6:f7:db:16:72:9b:
5d:90:a3:c9:74:0b:25:96:71:48:bc:fa:b9:f8:89:
a2:56:12:08:67:ee:02:a1:c8:96:36:64:25:dd:43:
f1:ca:da:c1:3c:80:5b:84:a2:77:3e:ac:a1:38:11:
ba:a3:eb:8b:15:d4:dd:b4:2a:65:8f:6d:db:42:69:
92:a2:42:e8:ae:94:20:af:51:5b:71:a1:36:a4:57:
63:c9:b1:09:3a:b1:ba:f4:a7:fe:e2:2a:4c:a8:35:
21:d6:a0:9d:b8:38:23:74:23:b8:4b:7c:b9:15:cd:
c0:ca:79:8f:bf:f4:e5:87:d6:95:aa:ee:86:ed:e2:
0e:d1:00:3e:43:8d:09:cc:0e:b9:93:cd:66:8e:49:
2f:a0:cb:fa:5c:af:16:50:d8:f3:70:b4:7d:89:f9:
d0:c8:41:b5:9d:ea:d2:74:7d:6d:b7:fe:7a:7b:cd:
fd:9a:f5:e6:20:c2:80:21:17:6b:7c:4f:5c:72:1a:
fc:86:35:1f:e4:73:70:9e:d5:cf:b8:7b:fc:3e:6d:
b4:bb:d1:46:5e:d8:c7:31:f6:96:23:ba:aa:57:75:
b7:2c:58:ca:e9:7e:57:8f:a0:81:f1:40:ae:e5:d0:
8c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A4:36:B8:03:7B:92:B0:D1:19:62:5A:10:FE:C8:D3:1F:BC:74:9E
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EaQ2uAN7krDRGWJaEP7I0x-8dJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1a90::/44
Signature Algorithm: sha256WithRSAEncryption
22:95:b7:61:64:5f:b5:54:28:37:72:19:2d:c9:47:79:ae:8e:
ae:46:f6:b4:b2:3d:e6:17:b8:a4:72:f0:93:1a:82:37:5e:bb:
4e:87:e2:61:65:d9:7c:5c:76:2d:01:be:f2:2d:ac:90:5c:26:
d1:2f:42:af:db:da:ba:c4:64:08:ae:38:d9:9e:1e:ef:ac:70:
29:24:e0:00:7f:17:3d:cc:14:4a:ae:be:05:c1:ab:27:c2:00:
ef:0d:b6:63:0e:1c:76:7a:34:f2:da:11:a7:81:74:2c:71:02:
35:9e:71:ae:f4:83:24:b4:de:ea:18:39:f7:03:9c:0a:c1:dc:
12:52:b4:10:50:df:09:2d:dd:d7:13:10:a3:ff:12:21:cb:00:
ef:9a:80:e8:8b:3b:50:0d:08:11:6d:7a:1c:55:f9:bf:cc:5f:
4a:63:3f:8c:fd:e4:f2:25:35:8e:db:a5:0d:46:d2:9f:e0:8f:
1c:c1:7f:ce:f1:99:4c:c4:2d:76:53:f9:8b:49:fa:e2:d9:7e:
e9:c5:84:56:16:82:2c:69:03:61:ed:60:6e:f5:42:28:84:af:
5f:19:fd:1b:6e:38:71:37:8f:b5:14:d0:da:61:1e:87:fc:1e:
f6:92:9d:f2:9d:53:67:e1:ca:bf:54:b1:68:f1:37:d1:10:e2:
12:17:37:da
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ4cNtmvp/nwjJd2AvErTK2HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjYwNTEyMTI0MzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWE0MzZiODAzN2I5MmIwZDExOTYyNWExMGZlYzhkMzFmYmM3NDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YCH6Nk6aE3W4w2Qch4lR2aGiTkL
eNfm99sWcptdkKPJdAsllnFIvPq5+ImiVhIIZ+4CociWNmQl3UPxytrBPIBbhKJ3
PqyhOBG6o+uLFdTdtCplj23bQmmSokLorpQgr1FbcaE2pFdjybEJOrG69Kf+4ipM
qDUh1qCduDgjdCO4S3y5Fc3AynmPv/Tlh9aVqu6G7eIO0QA+Q40JzA65k81mjkkv
oMv6XK8WUNjzcLR9ifnQyEG1nerSdH1tt/56e839mvXmIMKAIRdrfE9cchr8hjUf
5HNwntXPuHv8Pm20u9FGXtjHMfaWI7qqV3W3LFjK6X5Xj6CB8UCu5dCMDwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBGkNrgDe5Kw0RliWhD+yNMfvHSeMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvRWFRMnVBTjdrckRSR1dKYUVQN0kweC04ZEo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xBqQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAilbdhZF+1VCg3chktyUd5ro6uRva0sj3mF7ik
cvCTGoI3XrtOh+JhZdl8XHYtAb7yLayQXCbRL0Kv29q6xGQIrjjZnh7vrHApJOAA
fxc9zBRKrr4FwasnwgDvDbZjDhx2ejTy2hGngXQscQI1nnGu9IMktN7qGDn3A5wK
wdwSUrQQUN8JLd3XExCj/xIhywDvmoDoiztQDQgRbXocVfm/zF9KYz+M/eTyJTWO
26UNRtKf4I8cwX/O8ZlMxC12U/mLSfri2X7pxYRWFoIsaQNh7WBu9UIohK9fGf0b
bjhxN4+1FNDaYR6H/B72kp3ynVNn4cq/VLFo8TfREOISFzfa
-----END CERTIFICATE-----
Generated at Wed May 13 07:01:53 2026 by rpki-client