Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/2w7ohHP0PHw-ynhe9wwuAz-Bmmw.roa
File: 2w7ohHP0PHw-ynhe9wwuAz-Bmmw.roa (raw, json)
Hash identifier: GE3um6S/EWgHj+3i8r/vK+VTmYxbbmWGsE5SnPBylZU=
Subject key identifier: DB:0E:E8:84:73:F4:3C:7C:3E:CA:78:5E:F7:0C:2E:03:3F:81:9A:6C
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 01A0C8B0D712DD5D2C3ADADC1A87110FB602
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/2w7ohHP0PHw-ynhe9wwuAz-Bmmw.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 2a11:5500::/29 maxlen: 29
2a12:5000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d7:12:dd:5d:2c:3a:da:dc:1a:87:11:0f:b6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db0ee88473f43c7c3eca785ef70c2e033f819a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:f8:5f:6c:b1:b5:04:e8:52:10:f6:54:3e:
85:bf:7d:b1:a8:b5:5f:cc:05:7c:41:f1:c7:06:7d:
f2:d1:17:f3:a1:95:8f:62:98:6c:12:93:e8:a1:9e:
6c:b2:f8:3b:84:ae:5f:09:44:14:9c:37:0c:95:22:
a0:c8:b9:a1:de:0e:ef:8d:68:d6:53:b8:22:39:93:
f2:8c:15:fb:ca:69:e2:a2:fd:df:ce:78:7e:cd:1d:
2d:8f:9c:e4:06:0b:cb:6a:f6:05:15:4f:17:5c:00:
30:08:23:65:79:0a:73:08:8e:55:4d:46:a4:de:88:
3e:c8:25:d0:29:ec:85:3e:7c:98:17:f8:02:1d:17:
a8:13:e9:a4:24:9d:ca:6f:f9:ed:fd:5a:15:64:3b:
ca:c6:0d:5a:64:ef:2a:0c:ed:49:57:52:4d:3e:79:
ef:73:05:fe:75:c9:6a:53:9f:7d:79:37:48:b9:a0:
13:57:3d:ad:f4:55:48:a9:26:b0:de:c1:0c:7f:98:
00:8a:a9:5f:0a:a7:4c:00:73:63:94:42:a7:ad:36:
1d:f6:71:45:f9:5f:d9:80:04:1f:ec:23:63:ff:85:
2d:03:61:3d:c7:0c:28:fd:66:80:ef:7b:1e:57:36:
9f:23:f9:91:22:10:32:e9:d2:22:81:12:34:be:2d:
71:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0E:E8:84:73:F4:3C:7C:3E:CA:78:5E:F7:0C:2E:03:3F:81:9A:6C
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/2w7ohHP0PHw-ynhe9wwuAz-Bmmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5500::/29
2a12:5000::/29
Signature Algorithm: sha256WithRSAEncryption
37:ea:10:89:e5:a4:b8:38:e9:02:a4:fa:7e:3e:ec:38:3b:9f:
a7:b1:73:da:d8:6d:29:9e:38:19:6a:78:0c:6f:dc:45:7b:99:
56:d1:8e:3f:88:dc:0f:29:65:b2:27:5c:06:db:31:5f:57:16:
ac:fe:50:0c:75:6f:ba:e8:2b:18:97:d2:6b:b8:d8:af:3d:ed:
4b:c6:ad:73:7a:59:82:82:b0:78:cb:18:ed:d5:5d:cf:97:6b:
4e:98:61:11:25:7b:58:51:d4:a1:7a:55:da:50:53:f3:ee:d4:
64:37:12:ae:8e:44:11:80:2a:31:53:e1:9b:68:25:ce:df:1e:
67:69:d3:7d:03:de:3e:72:10:4a:32:78:e1:c4:b0:3f:3f:6f:
6d:c4:6b:ad:7f:6d:93:2f:06:4f:8c:c3:9a:14:c9:a7:89:0a:
c4:6c:1b:fb:01:20:2d:38:5a:26:54:fb:95:25:6b:3e:9c:67:
dc:ac:07:5f:65:24:14:c0:d6:25:ce:8d:17:81:c0:d6:92:46:
41:d7:ae:0a:c5:e6:b4:36:31:5d:12:d1:30:70:6e:4a:25:78:
d9:fa:67:dc:27:73:78:6b:74:4b:de:5e:a0:41:1d:11:d9:4e:
ec:8e:4e:36:df:68:10:f2:45:98:ad:82:f0:85:bd:4d:3a:3c:
af:32:b7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:38:23 2026 by rpki-client