Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/IgE_QCo5fKlTjKF9L2nwXgvVzl4.roa
File: IgE_QCo5fKlTjKF9L2nwXgvVzl4.roa (raw, json)
Hash identifier: MUo2IRe6SO/EG+Z67Kry2rkoaV98msUfbhQFBOelpvI=
Subject key identifier: 22:01:3F:40:2A:39:7C:A9:53:8C:A1:7D:2F:69:F0:5E:0B:D5:CE:5E
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 019F47F5E25D3BBEE9EA8B89A4D5CF330E64
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/IgE_QCo5fKlTjKF9L2nwXgvVzl4.roa
Signing time: Thu 09 Jul 2026 17:38:44 +0000
ROA not before: Thu 09 Jul 2026 17:38:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401293
IP address blocks: 2a11:8380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e2:5d:3b:be:e9:ea:8b:89:a4:d5:cf:33:0e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jul 9 17:38:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22013f402a397ca9538ca17d2f69f05e0bd5ce5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:25:e9:2d:64:04:2c:20:7f:4f:cd:f2:f6:
ea:98:f6:83:65:61:50:41:51:53:82:56:82:d9:85:
4f:b9:d5:65:7e:e7:98:17:71:06:db:47:a8:c2:c7:
dd:37:5f:7b:7f:62:af:3d:69:cd:d1:8c:c1:ae:c0:
db:a2:6a:d5:02:fb:0e:e9:52:90:3a:8a:2a:f9:95:
11:a2:e6:c5:4a:4e:5e:1c:82:8f:37:05:2c:7f:c7:
e9:f5:25:a0:e7:e4:5a:bc:82:ec:38:1a:92:54:ab:
c8:7e:0c:c6:56:21:f1:bf:6e:28:5c:89:6f:05:c5:
1c:da:34:cf:84:49:f5:e8:2c:d3:d7:f0:32:7b:ec:
74:d9:cb:08:f1:b5:81:cb:1f:0a:b5:b0:e7:82:e9:
be:d3:05:8d:61:57:32:65:a5:02:ec:a4:44:54:3e:
b2:ba:89:8b:96:de:06:84:12:af:47:af:8f:a2:79:
ac:f8:22:36:c8:1c:90:c7:43:b9:e8:cf:65:2b:14:
c6:c5:88:1e:cc:7b:14:1c:5d:2f:bb:70:fa:75:2f:
c0:0a:d3:40:34:ec:cf:82:0e:0e:1a:5b:61:08:ce:
3f:bf:92:f8:e5:54:9e:e0:b4:77:fb:12:11:0c:b4:
94:30:43:01:3e:b0:05:63:3d:28:c4:73:30:25:66:
ae:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:01:3F:40:2A:39:7C:A9:53:8C:A1:7D:2F:69:F0:5E:0B:D5:CE:5E
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/IgE_QCo5fKlTjKF9L2nwXgvVzl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8380::/29
Signature Algorithm: sha256WithRSAEncryption
3a:fe:ea:14:d9:2c:a7:26:39:c2:bb:48:b9:c1:4c:11:18:80:
ce:33:25:87:e3:e0:68:69:72:78:8f:9e:d5:f6:80:69:9b:44:
0a:ad:e7:29:cb:33:23:5f:ce:5c:94:32:47:49:99:e3:02:9c:
19:42:65:86:4e:f7:5f:c3:84:09:2a:ad:0f:54:11:b3:e8:56:
66:6d:3a:f5:10:0f:f6:24:b8:42:97:b9:17:5a:45:3b:e9:d2:
8d:5f:c0:c2:5c:d4:ed:47:e4:35:fa:dc:5a:b3:43:fd:47:ad:
6f:34:60:e2:e3:ed:c5:1d:60:ae:a0:b4:88:f7:ca:b0:15:b1:
e0:07:c5:97:82:91:14:aa:4e:46:4e:89:0a:52:f6:50:81:71:
4c:d1:49:60:81:1c:58:ad:c4:dd:5c:c2:de:0e:9d:f6:9f:82:
03:06:72:da:cd:c0:b6:50:f3:e0:a2:f8:40:5b:7a:89:9f:c7:
55:31:d1:bd:bb:65:90:5d:25:ee:97:18:df:8c:30:80:89:fe:
83:1f:ca:90:74:9a:a6:80:00:14:45:dd:ed:57:b7:29:05:42:
4f:fe:80:90:1a:88:e9:b3:10:c3:d0:1a:d9:51:f0:ab:20:c6:
ee:a3:b5:3d:b3:15:31:de:55:25:4c:a4:f1:b4:f5:ef:3c:13:
42:eb:e4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:02:17 2026 by rpki-client