Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/e-vVrJZ-wUMzKbd5YAfmA9x0qgQ.roa
File: e-vVrJZ-wUMzKbd5YAfmA9x0qgQ.roa (raw, json)
Hash identifier: BA/0hbuhvoStHQX1fKvbqzVATh/m+qBTaz7v7V7bT6E=
Subject key identifier: 7B:EB:D5:AC:96:7E:C1:43:33:29:B7:79:60:07:E6:03:DC:74:AA:04
Certificate issuer: /CN=fabf88d2a1e94ac1dd3063c47330bbad75f65135
Certificate serial: 019F23683027C816749F26A47DF0B0632F60
Authority key identifier: FA:BF:88:D2:A1:E9:4A:C1:DD:30:63:C4:73:30:BB:AD:75:F6:51:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-r-I0qHpSsHdMGPEczC7rXX2UTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/e-vVrJZ-wUMzKbd5YAfmA9x0qgQ.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 139.11.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-r-I0qHpSsHdMGPEczC7rXX2UTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:30:27:c8:16:74:9f:26:a4:7d:f0:b0:63:2f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fabf88d2a1e94ac1dd3063c47330bbad75f65135
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bebd5ac967ec1433329b7796007e603dc74aa04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:ad:3a:a3:b2:b1:48:7b:4a:56:cb:38:07:
8d:fe:2f:1d:8b:80:6f:e1:34:be:59:a5:4b:75:48:
95:de:c2:3f:50:78:f2:08:30:20:a7:41:f5:cb:e1:
03:68:91:63:6b:9d:2e:d0:02:3a:27:5f:52:bb:da:
6b:cf:ae:32:d6:42:e4:70:d4:d4:61:e9:8e:ac:fb:
f8:e1:df:59:62:d4:04:de:ea:fa:6e:d2:b5:06:04:
cc:aa:c5:ce:3b:cb:89:33:59:01:e4:62:4b:d7:5b:
9d:56:4d:02:1d:11:32:2f:e1:6a:9a:5d:75:c2:19:
ff:c1:7e:de:00:d3:f9:8e:24:29:ac:58:e1:ea:68:
93:82:42:9d:86:dc:5a:0d:c9:ad:df:a6:c0:1d:64:
db:8e:21:dc:8b:51:d9:71:38:de:36:d5:3a:e7:4f:
80:2e:f8:7e:7b:dc:82:2a:37:18:bc:2a:44:01:51:
20:82:98:26:39:7d:a7:4d:f3:24:bb:03:97:bf:53:
88:bc:f7:62:3f:2d:34:00:d7:db:5b:9d:21:6e:3a:
ba:68:99:05:52:fc:05:09:91:3b:3b:d4:d4:7c:1d:
4e:f2:29:3b:b2:cc:07:94:19:9e:c6:e0:87:1d:90:
de:43:75:87:47:93:08:a5:eb:10:61:37:72:fa:a7:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EB:D5:AC:96:7E:C1:43:33:29:B7:79:60:07:E6:03:DC:74:AA:04
X509v3 Authority Key Identifier:
keyid:FA:BF:88:D2:A1:E9:4A:C1:DD:30:63:C4:73:30:BB:AD:75:F6:51:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-r-I0qHpSsHdMGPEczC7rXX2UTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/e-vVrJZ-wUMzKbd5YAfmA9x0qgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.11.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:bb:df:e1:3e:34:18:22:c1:5e:cb:c5:21:f5:63:0a:89:ea:
95:e9:76:39:11:89:70:49:86:19:c9:e8:84:47:ed:4b:71:b0:
60:8a:ad:f6:7b:af:9e:7e:93:65:88:b1:a9:46:d9:58:82:f0:
5f:ca:8f:ad:be:71:df:d8:51:af:ad:57:6f:b2:2e:09:e7:30:
44:67:9f:26:1e:4a:0b:cf:28:7b:87:2f:7c:fa:44:54:47:75:
24:7a:ac:fd:9c:42:de:5a:71:f8:bc:5c:d4:de:32:95:24:79:
bc:f3:20:96:4e:f8:00:0c:40:4f:86:00:88:13:05:58:11:04:
4a:dc:42:cc:37:03:8c:d6:95:ad:58:80:64:19:d9:53:a9:20:
5a:1f:a8:e8:0c:de:8b:fc:7f:c0:bc:be:00:db:aa:d7:bf:49:
f2:26:1f:13:9a:db:d3:32:da:ac:82:35:59:0f:5d:61:fd:82:
21:f0:eb:a9:c7:47:46:bd:49:9c:5a:aa:7a:c4:c2:62:9e:4d:
0c:79:87:93:8d:66:ef:a1:3c:ea:20:19:91:04:76:dc:cc:62:
cd:cc:ff:9e:4a:16:42:7b:da:36:2d:45:db:cf:9e:62:9c:85:
65:c3:0e:35:b3:e7:ed:6f:74:8c:27:17:28:29:1a:31:69:4d:
26:a5:48:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:43:17 2026 by rpki-client