Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Efm2bGrofvD9TKo6fR0hCwXyZZY.roa
File: Efm2bGrofvD9TKo6fR0hCwXyZZY.roa (raw, json)
Hash identifier: 8/kSaahEbvJMwKWK7IV2ZU7p4mFsDitwaZrJNwqZgFY=
Subject key identifier: 11:F9:B6:6C:6A:E8:7E:F0:FD:4C:AA:3A:7D:1D:21:0B:05:F2:65:96
Certificate issuer: /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Certificate serial: 019ECF89AFF21B1525799E95F3B19C8A6ACD
Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Efm2bGrofvD9TKo6fR0hCwXyZZY.roa
Signing time: Tue 16 Jun 2026 08:26:07 +0000
ROA not before: Tue 16 Jun 2026 08:26:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61266
IP address blocks: 2a13:8ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:89:af:f2:1b:15:25:79:9e:95:f3:b1:9c:8a:6a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Validity
Not Before: Jun 16 08:26:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11f9b66c6ae87ef0fd4caa3a7d1d210b05f26596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:34:02:6e:36:87:48:ea:41:d9:e9:8d:52:e1:
eb:2f:a4:34:0f:ee:e8:d3:6a:b3:07:92:ec:9f:40:
31:7f:76:f7:1e:db:8b:35:7c:57:36:cc:73:0c:ee:
44:c9:6e:66:c6:89:ac:10:f4:f4:1c:3b:2f:0b:04:
19:ef:c7:28:73:3c:34:8f:4e:c9:e4:24:82:f9:fd:
92:19:d4:a3:bc:19:da:aa:65:7d:c4:58:a1:3e:ec:
4c:a9:8e:8c:97:f3:0c:81:9f:13:9a:cf:bd:61:a2:
ed:f4:cb:ab:40:75:ee:78:0c:d0:f5:e7:40:d3:19:
b8:71:b6:e6:9a:15:7b:31:f7:46:3f:59:20:d7:7b:
3d:a4:09:79:59:10:a6:6a:61:13:ee:22:f5:ab:4d:
3f:86:bf:63:95:02:b4:0c:91:ae:a5:4c:b3:66:b6:
65:2b:8e:36:d4:12:d8:35:ed:32:c8:c2:63:e9:3d:
76:9e:06:e5:08:5c:94:e6:8b:71:45:97:a8:d2:e5:
f6:02:15:b3:19:5d:17:4d:60:e9:79:02:6a:af:b1:
44:b7:b1:10:a9:97:4d:52:8f:bc:dc:52:0f:a3:f9:
bb:be:88:4f:00:f4:a7:d5:81:42:be:eb:fa:09:09:
eb:61:6c:b4:4a:4e:ff:8e:67:23:00:73:76:fc:ff:
b1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F9:B6:6C:6A:E8:7E:F0:FD:4C:AA:3A:7D:1D:21:0B:05:F2:65:96
X509v3 Authority Key Identifier:
keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Efm2bGrofvD9TKo6fR0hCwXyZZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8ac0::/29
Signature Algorithm: sha256WithRSAEncryption
70:ca:f7:a6:8a:86:28:74:8e:22:43:04:8c:e8:21:95:c3:cd:
5f:25:48:7a:5e:41:12:ec:4e:d9:44:d2:b9:4e:24:91:1b:d9:
aa:5c:ac:6f:0d:9c:00:98:19:b2:de:04:f7:43:ba:4b:eb:49:
3b:6d:98:29:88:ce:55:a0:c1:09:02:56:a7:12:df:ec:c9:40:
4a:8b:c7:ed:07:f0:cc:d9:d7:c7:af:50:24:a2:37:59:10:8c:
5d:bf:60:82:4c:e8:bd:43:50:43:f8:4d:31:96:35:2c:67:87:
d0:87:6e:a5:53:63:ba:e4:bb:4d:ba:93:0c:cd:a5:7b:f6:0e:
f0:cf:4f:73:be:85:45:38:6e:e3:1c:be:c0:fb:4e:03:10:fd:
b2:d7:3a:99:26:26:a9:50:39:d2:6f:a7:70:c7:ca:39:4a:92:
4d:ad:6b:d8:c1:7f:3a:31:f1:e1:6a:d2:32:9d:30:c1:18:62:
66:b1:6b:1f:38:9c:a1:85:a2:f5:de:c7:03:1f:03:70:bd:41:
c5:7d:1c:02:fe:76:72:8f:37:da:84:ab:aa:de:e2:a2:d9:0f:
fe:5b:0f:54:42:59:dd:1a:cf:f8:6e:a1:7c:b5:3d:8d:63:97:
30:bc:b9:21:46:dc:1e:e0:f6:8a:80:8a:45:9c:ee:a6:1c:d2:
46:df:8e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:41 2026 by rpki-client