Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/7rdwlJLqaXMMHAzTy27LCcJwSd4.roa
File: 7rdwlJLqaXMMHAzTy27LCcJwSd4.roa (raw, json)
Hash identifier: VsFE6xmy9LbewV7rremRpm48P3Ii9oLOvtgusajFnzY=
Subject key identifier: EE:B7:70:94:92:EA:69:73:0C:1C:0C:D3:CB:6E:CB:09:C2:70:49:DE
Certificate issuer: /CN=a6d2ed7165cb51bcd28068b2970235cdbd01280b
Certificate serial: 019EF8D3DF51659B60B2D46672E9AEB1A102
Authority key identifier: A6:D2:ED:71:65:CB:51:BC:D2:80:68:B2:97:02:35:CD:BD:01:28:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ptLtcWXLUbzSgGiylwI1zb0BKAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/7rdwlJLqaXMMHAzTy27LCcJwSd4.roa
Signing time: Wed 24 Jun 2026 08:51:35 +0000
ROA not before: Wed 24 Jun 2026 08:51:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58291
IP address blocks: 2001:67c:da8::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/ptLtcWXLUbzSgGiylwI1zb0BKAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/ptLtcWXLUbzSgGiylwI1zb0BKAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ptLtcWXLUbzSgGiylwI1zb0BKAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:d3:df:51:65:9b:60:b2:d4:66:72:e9:ae:b1:a1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6d2ed7165cb51bcd28068b2970235cdbd01280b
Validity
Not Before: Jun 24 08:51:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eeb7709492ea69730c1c0cd3cb6ecb09c27049de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5b:5a:b7:38:7b:7e:52:3b:3b:f2:b6:f0:ef:
1c:a6:20:e4:b5:5f:97:4d:24:71:2b:db:06:e8:66:
a9:18:8e:7b:d7:1e:14:2f:c5:0e:12:45:88:13:7a:
fd:bf:f8:a7:ef:d2:a0:fd:9e:59:14:17:21:07:c8:
bc:81:02:97:4a:4d:b3:1f:1d:39:04:da:4c:4b:72:
5e:2b:4a:72:d9:49:11:d7:a6:6c:0d:1a:7e:3f:c1:
b0:a4:5c:65:18:12:74:98:c4:cc:ae:ea:5f:e2:0c:
3c:83:cd:bf:a5:5a:72:8a:95:66:27:44:c9:e7:01:
93:ab:0e:4f:29:1f:6c:54:d1:d0:dc:4c:05:45:cb:
02:b2:4f:69:af:8e:14:51:1d:c5:31:fc:af:5b:10:
57:79:1e:a0:30:9c:92:26:e2:54:6f:b8:f3:c7:5e:
7c:41:a1:ec:ee:e5:f1:14:ac:e3:6c:66:98:30:b8:
f7:da:e1:26:46:2b:90:f6:df:90:35:9b:58:b3:ec:
34:4b:af:a3:30:bf:13:a6:57:21:7f:cd:69:81:6c:
c9:6c:61:aa:43:3d:be:30:a4:cc:aa:8c:9b:ed:be:
11:b1:f5:43:cf:78:13:9a:4c:fb:ed:8e:fc:dc:3f:
2b:9f:0f:c8:c7:f6:d0:4a:83:14:d1:93:7f:07:ad:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B7:70:94:92:EA:69:73:0C:1C:0C:D3:CB:6E:CB:09:C2:70:49:DE
X509v3 Authority Key Identifier:
keyid:A6:D2:ED:71:65:CB:51:BC:D2:80:68:B2:97:02:35:CD:BD:01:28:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ptLtcWXLUbzSgGiylwI1zb0BKAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/7rdwlJLqaXMMHAzTy27LCcJwSd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/ptLtcWXLUbzSgGiylwI1zb0BKAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:da8::/48
Signature Algorithm: sha256WithRSAEncryption
61:b5:d9:bc:51:a4:56:7a:1f:1e:fd:45:86:fe:92:0e:ce:e6:
bf:41:61:35:b3:ce:7c:9a:3f:72:03:03:75:2e:72:fd:81:a7:
dd:67:bf:41:42:e2:ea:a1:9a:e7:3f:bd:74:bb:8d:6e:88:ec:
16:63:12:b0:85:28:20:57:ee:9a:78:94:91:a7:2e:9a:5d:94:
eb:c6:d8:31:b0:05:21:e6:37:f9:73:2a:79:99:d4:8d:93:6b:
ca:ec:cb:18:1e:db:ee:f3:23:5f:19:b2:e9:7d:a1:59:30:75:
ed:dc:ff:3c:b9:af:45:ea:f4:f5:22:29:36:a5:93:6a:17:86:
1c:74:5d:27:b6:52:bc:09:b0:4b:07:d9:d4:67:dd:16:8c:d3:
7b:51:10:99:97:18:95:78:7a:bc:53:7c:20:6f:96:0e:de:f5:
27:d2:d3:a8:8b:cc:1d:70:5f:84:ac:cf:79:81:bb:ec:86:1c:
c7:c4:85:70:c6:ec:5b:d8:49:2a:39:70:b4:4a:20:87:0a:87:
58:b0:a6:ec:b9:55:d0:d6:b5:31:7d:b1:fd:d0:f3:ab:db:4a:
0e:c5:d6:4c:c9:68:a7:9c:8e:7f:69:c0:38:42:23:c9:31:48:
f4:c3:f1:6e:56:5d:59:2b:c0:eb:ca:27:b2:6c:73:f1:5a:d5:
88:04:12:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:52 2026 by rpki-client