Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/41i4ev5edbKVJwvdRc7UmMCrvCg.roa
File: 41i4ev5edbKVJwvdRc7UmMCrvCg.roa (raw, json)
Hash identifier: m9BCRj3y94R37HOuPnWLtwP7M0mYu2TFW0DGKzHM/Z8=
Subject key identifier: E3:58:B8:7A:FE:5E:75:B2:95:27:0B:DD:45:CE:D4:98:C0:AB:BC:28
Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Certificate serial: 019F23690C6D3CDC6CDD6C1B4142EC310D37
Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/41i4ev5edbKVJwvdRc7UmMCrvCg.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196782
IP address blocks: 2a03:2a80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0c:6d:3c:dc:6c:dd:6c:1b:41:42:ec:31:0d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e358b87afe5e75b295270bdd45ced498c0abbc28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:2a:4b:39:b0:2f:59:3e:00:4e:e6:65:33:
ef:19:6b:22:1b:08:e7:f7:ed:22:49:3a:0e:8a:12:
06:f8:e6:44:f6:03:3d:46:f6:76:5f:78:3d:f5:fa:
96:01:e7:c6:85:59:1d:60:07:a6:c0:a3:72:39:91:
de:e6:0f:9b:a7:b5:41:1d:24:cd:d6:29:4a:d9:dd:
dc:84:18:bd:42:8e:0d:b2:80:06:c4:fa:cd:f7:2b:
a5:bd:b3:ac:63:15:a4:14:fd:3d:26:cd:8b:d0:68:
18:a3:cc:94:6a:41:60:ad:19:f8:13:09:57:a9:a9:
70:e5:c2:69:16:c6:8f:d9:12:99:cf:d1:33:29:61:
8b:75:dc:31:25:bd:4f:be:4d:60:b1:b2:cc:f1:39:
3c:1e:fd:28:a9:4e:a5:e6:e0:9e:70:94:55:88:4f:
43:25:42:f3:7a:5e:99:fc:30:a2:c6:ea:ab:15:c1:
2c:01:cc:c7:65:a9:9a:79:de:5b:48:5e:bf:94:5b:
37:5c:10:35:2d:37:86:09:f3:99:ea:0d:e8:f7:c9:
65:a4:ba:32:0a:15:f7:08:ed:26:e2:6e:55:bd:e7:
08:18:75:8a:9e:21:50:75:1f:ec:03:e8:cd:de:bf:
ff:37:0b:d3:ab:99:52:f1:d0:ac:c1:8a:68:52:2e:
a1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:58:B8:7A:FE:5E:75:B2:95:27:0B:DD:45:CE:D4:98:C0:AB:BC:28
X509v3 Authority Key Identifier:
keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/41i4ev5edbKVJwvdRc7UmMCrvCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2a80::/32
Signature Algorithm: sha256WithRSAEncryption
1d:37:fc:87:ca:90:72:30:bc:6f:d1:f8:91:96:6f:b7:b1:ea:
2e:6e:ee:25:dc:6c:1a:29:e2:d5:9c:bd:ab:e3:3e:c4:38:e9:
ea:65:00:c5:d6:69:b3:f2:0f:eb:f2:91:8e:23:a8:2e:35:79:
44:6f:d4:a5:f6:c0:02:d3:de:b0:39:f4:92:90:23:02:16:e1:
ac:c5:eb:4c:29:d2:e5:27:9c:70:4c:e4:36:48:c0:72:1b:41:
69:b2:6a:15:88:45:82:b3:9b:93:f4:09:16:d2:51:8d:d5:fc:
64:0c:10:60:70:99:8f:7e:2d:6c:9e:e8:e2:b6:99:cf:ba:8c:
3d:ef:73:9d:31:0f:5a:eb:75:37:99:78:ba:48:c9:bf:c7:ea:
8b:aa:27:79:20:1d:be:3b:ab:e1:89:aa:30:ed:c6:43:77:84:
a2:c8:5d:c3:6e:25:83:62:15:7f:c7:89:50:46:92:f7:7d:31:
16:ef:eb:9f:b6:ac:b4:03:77:b9:2a:3f:45:29:29:cb:91:d8:
4a:7d:dd:f3:6a:52:f1:1d:03:bb:be:51:77:a9:e6:74:f7:eb:
0e:71:39:1c:bf:84:24:d1:57:8d:db:f7:6f:be:36:a8:8b:db:
c5:a0:15:1d:ae:1a:15:da:d6:1d:56:35:bf:c9:14:3d:89:c4:
67:5a:96:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:54 2026 by rpki-client