Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/dIdr6CdHDFmEHdvXrAfl7icIYxY.roa
File: dIdr6CdHDFmEHdvXrAfl7icIYxY.roa (raw, json)
Hash identifier: WfzmExFAW5iLs+d61FaP+J5J9DI0CoXqdTMcrCDFzqo=
Subject key identifier: 74:87:6B:E8:27:47:0C:59:84:1D:DB:D7:AC:07:E5:EE:27:08:63:16
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 019D078D8B154E01BB8C6CFB13FAE0A65E2C
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/dIdr6CdHDFmEHdvXrAfl7icIYxY.roa
Signing time: Thu 19 Mar 2026 19:23:29 +0000
ROA not before: Thu 19 Mar 2026 19:23:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201592
IP address blocks: 2a12:2e40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:8d:8b:15:4e:01:bb:8c:6c:fb:13:fa:e0:a6:5e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Mar 19 19:23:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74876be827470c59841ddbd7ac07e5ee27086316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:32:32:20:9e:6d:15:76:93:9e:23:63:df:
94:e9:2b:5b:0b:d4:50:34:6e:50:f4:d9:4c:86:72:
10:1f:6f:b1:18:fc:31:8e:a2:76:9d:7d:a3:e5:ff:
db:0e:8b:a4:8c:ca:91:b9:f4:d7:96:7a:ab:3d:53:
82:b0:fd:f5:1a:e4:71:1c:43:08:19:8a:58:55:13:
a7:7c:ac:08:54:fb:b2:cd:06:93:75:bb:41:48:12:
14:1b:79:58:97:60:0d:f5:e7:44:2d:01:12:02:87:
c8:d6:42:b9:bc:58:af:46:fc:f3:c7:34:06:31:90:
ec:a5:0e:b0:0d:4c:02:33:43:4c:24:4e:53:52:10:
4f:4d:c8:c0:aa:73:90:e0:69:81:8a:2e:67:55:56:
88:fa:65:7f:7c:01:9f:9c:5f:39:f6:86:44:2d:e2:
aa:3f:2d:c4:fb:1b:37:3d:23:83:b1:22:ec:69:61:
34:0c:a2:63:f8:31:17:4d:2b:dc:50:83:b8:08:92:
02:3d:97:72:77:fc:0e:4e:f9:a1:3b:8f:40:55:22:
74:91:da:6a:67:c8:be:18:2e:75:71:23:a2:6b:40:
fb:28:7d:c9:25:18:21:cf:eb:98:cd:82:50:21:0c:
cb:f7:0f:56:a1:c5:da:5c:d0:e8:a0:43:a5:d7:2c:
16:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:87:6B:E8:27:47:0C:59:84:1D:DB:D7:AC:07:E5:EE:27:08:63:16
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/dIdr6CdHDFmEHdvXrAfl7icIYxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:2e40::/29
Signature Algorithm: sha256WithRSAEncryption
b6:53:53:dd:88:86:61:40:4c:69:2e:06:8a:7a:c1:5d:7c:c9:
68:88:a7:d3:e0:a4:1d:75:f6:4c:38:c5:51:89:1c:0c:76:c6:
4c:af:b2:7d:63:9e:2b:0a:be:06:92:cf:c6:c8:9e:7f:0e:15:
6d:d0:9a:fc:d1:b9:63:be:90:b6:37:16:df:5d:31:91:f0:0a:
18:54:b5:66:72:60:03:d0:20:aa:dc:b4:0b:ec:0f:22:33:ae:
23:05:b5:35:33:3c:a5:79:46:2d:6c:c6:31:b6:c6:e1:b6:14:
fb:4f:c7:6d:13:0c:64:ea:c6:a3:0b:b0:fb:cb:e9:a7:54:80:
85:f9:02:7e:0f:a8:c6:8b:77:5d:24:e9:51:9d:d4:36:4c:89:
49:fc:63:d8:df:cd:59:82:f3:d5:9b:74:e6:a3:1f:75:7b:4e:
6c:ea:f1:47:aa:d5:4e:00:66:37:08:ca:cd:3d:72:18:6f:a5:
a0:26:ac:06:2b:e0:7f:9b:de:22:f3:ef:36:96:6b:55:28:a7:
dd:fc:20:e7:fe:0d:5a:6d:b5:63:c5:5f:32:73:1d:aa:3a:92:
9a:be:3f:b0:d7:46:9e:f1:a5:b3:dd:f7:e3:42:0e:74:40:a2:
a3:80:15:05:3f:92:6e:d1:7b:d0:50:cd:ec:0f:11:80:05:aa:
fd:0a:b7:70
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ0HjYsVTgG7jGz7E/rgpl4sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk
NTBjM2YwHhcNMjYwMzE5MTkyMzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDg3NmJlODI3NDcwYzU5ODQxZGRiZDdhYzA3ZTVlZTI3MDg2MzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm0yMiCebRV2k54jY9+U6StbC9RQ
NG5Q9NlMhnIQH2+xGPwxjqJ2nX2j5f/bDoukjMqRufTXlnqrPVOCsP31GuRxHEMI
GYpYVROnfKwIVPuyzQaTdbtBSBIUG3lYl2AN9edELQESAofI1kK5vFivRvzzxzQG
MZDspQ6wDUwCM0NMJE5TUhBPTcjAqnOQ4GmBii5nVVaI+mV/fAGfnF859oZELeKq
Py3E+xs3PSODsSLsaWE0DKJj+DEXTSvcUIO4CJICPZdyd/wOTvmhO49AVSJ0kdpq
Z8i+GC51cSOia0D7KH3JJRghz+uYzYJQIQzL9w9WocXaXNDooEOl1ywWJQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHSHa+gnRwxZhB3b16wH5e4nCGMWMB8GA1UdIwQY
MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt
OWZjZWI0NWQ2ZmRiLzEvZElkcjZDZEhERm1FSGR2WHJBZmw3aWNJWXhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi
LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhIuQDAN
BgkqhkiG9w0BAQsFAAOCAQEAtlNT3YiGYUBMaS4GinrBXXzJaIin0+CkHXX2TDjF
UYkcDHbGTK+yfWOeKwq+BpLPxsiefw4VbdCa/NG5Y76QtjcW310xkfAKGFS1ZnJg
A9Agqty0C+wPIjOuIwW1NTM8pXlGLWzGMbbG4bYU+0/HbRMMZOrGowuw+8vpp1SA
hfkCfg+oxot3XSTpUZ3UNkyJSfxj2N/NWYLz1Zt05qMfdXtObOrxR6rVTgBmNwjK
zT1yGG+loCasBivgf5veIvPvNpZrVSin3fwg5/4NWm21Y8VfMnMdqjqSmr4/sNdG
nvGls93340IOdECio4AVBT+SbtF70FDN7A8RgAWq/Qq3cA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:59:12 2026 by rpki-client