Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/eOMTidAIIhvJ5BHY-7Wo0flxV8M.roa
File: eOMTidAIIhvJ5BHY-7Wo0flxV8M.roa (raw, json)
Hash identifier: oHmuat2plZCxES0Vqwzv+NfEmFqmdpMk8mLlhcbiJQ8=
Subject key identifier: 78:E3:13:89:D0:08:22:1B:C9:E4:11:D8:FB:B5:A8:D1:F9:71:57:C3
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019F88C1DD4F8C580D6DD0130C78E34133FE
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/eOMTidAIIhvJ5BHY-7Wo0flxV8M.roa
Signing time: Wed 22 Jul 2026 07:37:14 +0000
ROA not before: Wed 22 Jul 2026 07:37:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 2a10:fa80:e::/48 maxlen: 48
2a10:fa86:1000::/36 maxlen: 48
2a10:fa86:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:c1:dd:4f:8c:58:0d:6d:d0:13:0c:78:e3:41:33:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jul 22 07:37:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78e31389d008221bc9e411d8fbb5a8d1f97157c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c3:06:2a:70:a5:1a:5f:92:a6:e1:89:44:1d:
92:f1:fb:db:49:9e:9b:27:86:c4:d0:37:7a:e2:f7:
dc:b1:53:15:10:ea:6d:ea:fa:91:aa:c0:9b:d7:60:
61:16:96:d7:3c:84:c1:20:fd:c3:8e:46:cf:08:2f:
98:ed:bf:69:53:1b:15:2e:f0:b1:4e:90:8a:a7:89:
28:5b:44:89:ca:6d:5a:ed:10:84:0e:92:a9:6a:0d:
75:fe:54:f2:73:f6:ce:81:35:3d:01:32:08:f6:59:
9c:55:19:f1:66:0d:78:9b:56:40:5a:32:8e:21:fe:
dc:6b:08:24:7c:bd:b8:9d:43:5b:49:01:a7:6c:b3:
ad:4b:98:3b:a5:a8:f0:14:56:68:3d:b9:fa:ed:71:
05:4a:5e:ce:dc:45:fc:95:fa:58:2d:42:ca:12:3d:
cc:74:22:a7:b9:45:8b:35:09:d7:29:f5:d9:db:a2:
f1:f9:94:27:75:65:b6:57:d2:3a:b0:8e:28:9e:48:
b1:78:be:93:a8:9d:8f:4f:53:0e:c8:5f:2b:a5:e1:
db:ab:c7:26:ee:55:85:e5:b2:f6:3b:a9:ac:99:e3:
b2:a3:0f:dd:45:dd:e3:3f:9e:21:70:8e:35:a6:47:
12:e8:1a:45:44:c8:a2:98:a9:8b:eb:c5:da:e0:a1:
b1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E3:13:89:D0:08:22:1B:C9:E4:11:D8:FB:B5:A8:D1:F9:71:57:C3
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/eOMTidAIIhvJ5BHY-7Wo0flxV8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:e::/48
2a10:fa86:1000::/36
Signature Algorithm: sha256WithRSAEncryption
3c:90:9e:b6:4a:3f:b0:84:f9:8b:6e:ca:fd:5a:88:0e:b8:96:
71:e7:c3:46:a7:f1:e0:38:f9:bb:03:89:83:bd:5e:0a:53:41:
3e:e7:fb:fe:d8:32:a0:d4:84:e5:27:93:3a:bb:79:f1:6c:4e:
71:e2:c8:95:09:10:2d:a8:0c:2d:e5:2c:b1:43:39:0a:90:b4:
f6:07:48:d6:69:f9:6d:66:d6:58:7d:b5:33:02:fc:36:ea:f9:
22:44:d6:5d:6c:84:c4:19:b9:ea:b4:ad:56:05:1c:28:72:75:
a6:15:4d:b1:9b:75:6f:cf:85:9b:b4:ee:c5:19:fb:56:5d:75:
7a:f8:57:fb:40:63:d5:a3:7a:1f:bf:bd:62:de:cc:bb:9d:ab:
53:a0:36:31:49:74:e7:c9:ed:e0:5a:1c:2d:50:4b:d9:2f:ee:
4e:f6:35:15:51:a3:71:bb:20:9d:b1:d3:94:cf:3f:7e:4d:fc:
04:ca:79:28:0c:4f:65:94:20:fa:0f:b0:2a:ee:1e:87:e6:80:
e6:6c:c6:8f:bd:61:8e:d8:ce:1f:8d:83:c8:71:7f:a7:45:8d:
14:9b:31:83:8f:92:e4:0c:54:9a:1e:46:8a:3c:b3:49:d2:fd:
de:9a:54:60:99:7c:9b:50:e5:8a:da:ad:79:e2:b6:16:8b:58:
1d:ae:4b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:14 2026 by rpki-client