Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/R6M5qpYqqxyZqbcHLnctbf1Dg8M.roa
File: R6M5qpYqqxyZqbcHLnctbf1Dg8M.roa (raw, json)
Hash identifier: RqgRuP5NzyvHUqZZDLI5gw5VV1GhQB+IWzarebNgEt0=
Subject key identifier: 47:A3:39:AA:96:2A:AB:1C:99:A9:B7:07:2E:77:2D:6D:FD:43:83:C3
Certificate issuer: /CN=b87e5aedb99a2979af8ab3193f5461ccc10993bb
Certificate serial: 019F23692D527E041AC99FE4323A9C78D361
Authority key identifier: B8:7E:5A:ED:B9:9A:29:79:AF:8A:B3:19:3F:54:61:CC:C1:09:93:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/R6M5qpYqqxyZqbcHLnctbf1Dg8M.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59749
IP address blocks: 2a01:73e0:e030::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2d:52:7e:04:1a:c9:9f:e4:32:3a:9c:78:d3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87e5aedb99a2979af8ab3193f5461ccc10993bb
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47a339aa962aab1c99a9b7072e772d6dfd4383c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4c:cc:5e:13:8c:c8:0f:1e:55:44:15:b4:8e:
8e:3c:54:64:71:da:99:6b:41:86:34:d4:80:bc:ee:
ad:dc:91:d7:bc:a2:f2:2c:c4:2a:1e:73:10:24:c3:
b9:e7:4e:d6:c1:3c:4e:cd:b0:d1:ef:3b:20:99:67:
c9:50:4b:fa:5b:fd:68:3c:71:44:dc:33:82:59:e4:
29:71:b5:53:eb:58:7b:9f:f8:6c:b2:b4:74:6b:ff:
aa:68:60:74:7f:9c:4c:e2:fb:77:c0:51:94:8a:d1:
90:a2:5f:63:89:e7:f8:ee:72:d4:d1:14:11:bc:49:
f2:90:fc:8e:bf:70:d7:59:d1:4f:b2:14:df:12:f3:
b3:8a:65:2f:88:28:b2:47:33:69:e0:48:d3:60:57:
be:9e:ac:aa:d8:b5:77:24:3f:51:82:58:6e:83:e4:
2f:62:88:2d:18:a4:44:0f:77:71:05:18:4b:21:3f:
97:03:c1:ba:c6:1d:4f:3e:82:c0:c9:46:a1:f5:e8:
8e:1e:89:5c:78:81:0b:fc:1f:98:ac:df:38:e8:cf:
04:9d:f1:bd:13:2a:2e:43:e6:70:65:10:8d:2e:93:
d3:88:74:24:f6:20:20:33:eb:37:ca:cc:35:f2:ae:
f4:78:70:46:a4:13:08:a7:9e:62:bc:3f:35:5e:75:
ee:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A3:39:AA:96:2A:AB:1C:99:A9:B7:07:2E:77:2D:6D:FD:43:83:C3
X509v3 Authority Key Identifier:
keyid:B8:7E:5A:ED:B9:9A:29:79:AF:8A:B3:19:3F:54:61:CC:C1:09:93:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uH5a7bmaKXmvirMZP1RhzMEJk7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/R6M5qpYqqxyZqbcHLnctbf1Dg8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/uH5a7bmaKXmvirMZP1RhzMEJk7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:73e0:e030::/48
Signature Algorithm: sha256WithRSAEncryption
59:75:8f:92:8f:c4:79:70:69:14:27:f8:d9:1e:ac:27:33:76:
7e:78:63:13:a1:f7:dd:9e:86:d4:3b:a2:4f:7d:55:cc:2e:2d:
4b:b5:88:8b:e9:77:ed:b4:25:3e:38:94:d9:ad:9a:a7:13:84:
f2:50:46:e9:52:3b:1e:4d:d6:b3:9c:32:ec:f6:2f:d8:79:be:
cc:c5:df:f9:6f:eb:01:09:17:73:41:bc:eb:36:41:0b:71:62:
a8:4f:e5:22:f5:c3:f3:5b:68:e3:74:fb:1c:38:e2:01:d5:6c:
cf:62:1b:94:6f:f6:a3:df:e4:56:2c:50:4e:ec:de:9b:3a:0b:
56:e4:72:84:9f:51:5b:e3:69:e4:56:f7:c7:c8:7b:96:e1:36:
d1:0e:b7:8f:3f:20:ba:02:ff:a1:9e:24:80:c6:28:48:cb:e6:
8d:a9:1c:b7:24:02:1c:aa:1e:05:79:4a:c8:d4:64:11:4b:70:
a1:c7:79:87:21:0a:e5:bd:3f:1c:77:86:dd:e3:ea:f6:c1:9f:
d7:05:23:4a:59:3c:e1:9f:fe:d5:81:73:70:c1:d3:21:c5:5b:
95:64:40:cd:20:85:52:38:d4:be:9f:04:0a:ba:25:92:8b:fb:
c5:0c:76:a1:a4:56:6a:04:ee:65:a7:f1:36:a6:03:bb:eb:60:
a6:5c:4a:fc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaS1SfgQayZ/kMjqceNNhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4N2U1YWVkYjk5YTI5NzlhZjhhYjMxOTNmNTQ2MWNjYzEw
OTkzYmIwHhcNMjYwNzAyMTUxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2EzMzlhYTk2MmFhYjFjOTlhOWI3MDcyZTc3MmQ2ZGZkNDM4M2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UzMXhOMyA8eVUQVtI6OPFRkcdqZ
a0GGNNSAvO6t3JHXvKLyLMQqHnMQJMO5507WwTxOzbDR7zsgmWfJUEv6W/1oPHFE
3DOCWeQpcbVT61h7n/hssrR0a/+qaGB0f5xM4vt3wFGUitGQol9jief47nLU0RQR
vEnykPyOv3DXWdFPshTfEvOzimUviCiyRzNp4EjTYFe+nqyq2LV3JD9Rglhug+Qv
YogtGKRED3dxBRhLIT+XA8G6xh1PPoLAyUah9eiOHolceIEL/B+YrN846M8EnfG9
EyouQ+ZwZRCNLpPTiHQk9iAgM+s3ysw18q70eHBGpBMIp55ivD81XnXu2QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEejOaqWKqscmam3By53LW39Q4PDMB8GA1UdIwQY
MBaAFLh+Wu25mil5r4qzGT9UYczBCZO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUg1YTdibWFLWG12aXJNWlAxUmh6TUVKazdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85MDk4ZmQtN2RjMy00ZTEyLWI4OTMt
ZmQyMmRmM2I1N2Y2LzEvUjZNNXFwWXFxeHlacWJjSExuY3RiZjFEZzhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS85MDk4ZmQtN2RjMy00ZTEyLWI4OTMtZmQyMmRmM2I1N2Y2
LzEvdUg1YTdibWFLWG12aXJNWlAxUmh6TUVKazdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgFz4OAw
MA0GCSqGSIb3DQEBCwUAA4IBAQBZdY+Sj8R5cGkUJ/jZHqwnM3Z+eGMToffdnobU
O6JPfVXMLi1LtYiL6XfttCU+OJTZrZqnE4TyUEbpUjseTdaznDLs9i/Yeb7Mxd/5
b+sBCRdzQbzrNkELcWKoT+Ui9cPzW2jjdPscOOIB1WzPYhuUb/aj3+RWLFBO7N6b
OgtW5HKEn1Fb42nkVvfHyHuW4TbRDrePPyC6Av+hniSAxihIy+aNqRy3JAIcqh4F
eUrI1GQRS3Chx3mHIQrlvT8cd4bd4+r2wZ/XBSNKWTzhn/7VgXNwwdMhxVuVZEDN
IIVSONS+nwQKuiWSi/vFDHahpFZqBO5lp/E2pgO762CmXEr8
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:24:53 2026 by rpki-client