Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/449b8d-ef29-4be7-b948-d9c7fca26dc8/1/Tv7ZPw5_eiFXNAe6vilKrqDlHEE.roa
File: Tv7ZPw5_eiFXNAe6vilKrqDlHEE.roa (raw, json)
Hash identifier: 3t2oEpWoY32ZN9cu+lZB2U7F/vOJcj35YBGC3TSPoBY=
Subject key identifier: 4E:FE:D9:3F:0E:7F:7A:21:57:34:07:BA:BE:29:4A:AE:A0:E5:1C:41
Certificate issuer: /CN=b4b7d67eba849060fd7f0f9d1db8a43af2530b73
Certificate serial: 01A1BD26A3C11FE65640CC22C5EF5F909346
Authority key identifier: B4:B7:D6:7E:BA:84:90:60:FD:7F:0F:9D:1D:B8:A4:3A:F2:53:0B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLfWfrqEkGD9fw-dHbikOvJTC3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/449b8d-ef29-4be7-b948-d9c7fca26dc8/1/Tv7ZPw5_eiFXNAe6vilKrqDlHEE.roa
Signing time: Sun 08 Nov 2026 21:53:08 +0000
ROA not before: Sun 08 Nov 2026 21:53:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212706
IP address blocks: 2001:678:139c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/449b8d-ef29-4be7-b948-d9c7fca26dc8/1/tLfWfrqEkGD9fw-dHbikOvJTC3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/449b8d-ef29-4be7-b948-d9c7fca26dc8/1/tLfWfrqEkGD9fw-dHbikOvJTC3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLfWfrqEkGD9fw-dHbikOvJTC3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bd:26:a3:c1:1f:e6:56:40:cc:22:c5:ef:5f:90:93:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b7d67eba849060fd7f0f9d1db8a43af2530b73
Validity
Not Before: Nov 8 21:53:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4efed93f0e7f7a21573407babe294aaea0e51c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:37:72:56:e1:99:b2:1d:21:46:82:a9:40:
bf:e5:24:ce:04:73:4c:c3:67:f7:ea:c1:44:0a:e5:
57:a7:bf:b4:00:51:e5:eb:91:f5:2f:65:77:17:d4:
4a:5a:49:8b:e2:a3:b1:2e:98:53:e6:47:68:49:22:
a9:46:ec:60:d3:5a:fd:42:9f:73:89:81:6a:67:53:
40:8a:0d:13:82:fe:35:c3:df:fa:f0:f5:c3:de:19:
ca:50:eb:32:37:05:50:a5:1c:5c:ff:4c:b9:1a:53:
10:06:fd:83:45:ea:c3:f5:34:8c:36:70:aa:d6:6a:
e1:59:ed:82:0a:27:f6:29:d3:89:fd:98:88:8f:bd:
b0:e9:95:a0:6d:35:5e:49:af:90:36:3c:56:eb:95:
1f:87:1b:06:87:bb:1a:64:e5:83:39:34:2f:b7:5f:
de:b8:4f:d3:98:7d:dd:59:58:b4:f3:5d:51:96:4f:
f3:2e:c5:55:d8:cc:90:3a:22:e5:7c:ff:d5:86:ac:
28:b9:27:aa:fb:e0:b7:e5:f5:5d:33:42:eb:19:c2:
d1:ee:45:9e:42:f3:2d:77:5d:38:f1:f2:7f:58:06:
cc:9e:98:1b:a8:01:d9:b5:32:f5:fe:e1:11:0d:f2:
f3:01:ec:6a:e4:4b:b7:0c:2b:18:30:59:d3:6d:09:
1c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FE:D9:3F:0E:7F:7A:21:57:34:07:BA:BE:29:4A:AE:A0:E5:1C:41
X509v3 Authority Key Identifier:
keyid:B4:B7:D6:7E:BA:84:90:60:FD:7F:0F:9D:1D:B8:A4:3A:F2:53:0B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLfWfrqEkGD9fw-dHbikOvJTC3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/449b8d-ef29-4be7-b948-d9c7fca26dc8/1/Tv7ZPw5_eiFXNAe6vilKrqDlHEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/449b8d-ef29-4be7-b948-d9c7fca26dc8/1/tLfWfrqEkGD9fw-dHbikOvJTC3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:139c::/48
Signature Algorithm: sha256WithRSAEncryption
2b:17:83:fc:51:55:65:f4:13:de:88:27:a6:29:62:66:f2:c2:
57:e4:25:a7:b8:fa:7e:4c:be:ff:cb:02:11:55:f6:c4:cb:5f:
f3:75:8d:60:be:a4:38:bc:6d:0f:93:66:c5:c7:03:b7:47:94:
9c:bb:43:1b:f1:72:cf:df:61:ef:e8:90:da:d0:2b:b2:03:dc:
37:2e:ad:d1:43:9c:4c:65:28:f4:f7:9e:48:39:d1:f5:03:bc:
f0:3d:a3:cb:a9:43:55:b6:1d:3d:e7:ec:c3:7f:dd:7c:a9:3c:
a2:12:06:f0:fa:4f:13:ea:b0:95:b9:fb:f6:6e:e8:af:68:93:
a2:41:71:54:07:54:3b:9a:b6:e3:01:cb:65:4d:3c:2a:99:ca:
d8:f0:9a:58:4f:f6:50:67:3d:fd:aa:15:f7:de:1f:61:6e:ee:
4e:14:c1:c9:71:35:fe:e9:0b:24:ff:bb:50:b8:19:5c:21:32:
0c:aa:ab:5b:ac:4b:e6:5c:2e:f6:a1:4a:52:43:47:66:2b:5f:
08:87:f0:32:3b:52:92:99:8e:97:71:27:0a:a7:62:96:83:b0:
bb:c0:3b:48:00:2e:fa:06:da:98:12:fe:8c:2a:91:16:c1:0e:
f7:ab:d8:d2:fb:c4:f8:74:24:44:15:64:f2:fc:e2:2d:9b:2c:
0d:49:43:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:41:46 2026 by rpki-client