Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/EKtIRD07koj3PioZOzCC9_Q7xak.roa
File: EKtIRD07koj3PioZOzCC9_Q7xak.roa (raw, json)
Hash identifier: lz0w7rq5fTE3a3NzEhEeOVrovs8rwD/BBZm7VfWq6Qw=
Subject key identifier: 10:AB:48:44:3D:3B:92:88:F7:3E:2A:19:3B:30:82:F7:F4:3B:C5:A9
Certificate issuer: /CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Certificate serial: 019F236851F96BC8029C789347C3B14446E8
Authority key identifier: 01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/EKtIRD07koj3PioZOzCC9_Q7xak.roa
Signing time: Thu 02 Jul 2026 15:17:47 +0000
ROA not before: Thu 02 Jul 2026 15:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200898
IP address blocks: 2a04:5d04::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:51:f9:6b:c8:02:9c:78:93:47:c3:b1:44:46:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Validity
Not Before: Jul 2 15:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10ab48443d3b9288f73e2a193b3082f7f43bc5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:51:c5:f9:d7:b2:3e:59:1c:99:d4:35:59:
56:b5:60:98:f6:34:74:8f:89:93:eb:d0:bc:4b:b0:
50:bb:11:38:e0:34:78:3f:a9:d9:bd:99:76:49:b8:
7a:d3:ad:50:1c:85:85:af:0b:e4:ca:9e:91:02:f8:
a7:20:9c:70:45:c6:7f:42:05:c3:53:41:c4:c0:24:
96:48:1f:c9:e8:f9:c8:cf:0e:4c:8f:a7:d7:50:2a:
a4:47:ad:c8:b7:d9:c4:72:6e:6f:53:9a:9c:f5:a8:
5d:a5:5f:7a:85:c9:87:4e:36:9b:fa:d6:a2:c9:f6:
f3:a1:a4:43:ee:08:63:e1:3a:69:3d:c3:d1:69:83:
a6:05:cb:6b:a2:12:cf:59:bf:ea:5d:c1:e9:fa:da:
d2:d5:82:3a:95:ce:00:f3:65:4f:f2:d2:81:6b:10:
74:f4:91:d0:2f:2f:50:08:f3:31:74:3a:58:c7:ce:
26:8b:e7:88:a5:1e:06:0a:b0:8a:c8:64:1a:55:b3:
97:0d:f2:f0:b6:b8:c0:e9:95:ed:b0:44:3f:44:9b:
38:4c:2d:e5:a2:33:2d:11:7a:53:65:32:53:a0:c3:
f5:e4:8b:ba:92:94:fa:fd:5f:72:88:ed:09:81:b1:
36:b5:15:a5:41:e4:a1:37:c0:e1:d9:95:bb:60:c9:
58:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AB:48:44:3D:3B:92:88:F7:3E:2A:19:3B:30:82:F7:F4:3B:C5:A9
X509v3 Authority Key Identifier:
keyid:01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/EKtIRD07koj3PioZOzCC9_Q7xak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5d04::/32
Signature Algorithm: sha256WithRSAEncryption
04:a5:da:08:c6:b4:1b:99:4a:0c:b2:53:61:9a:ac:67:29:98:
e9:89:7f:5d:ed:86:4b:e5:7e:89:d9:e9:c1:41:90:21:5b:7b:
25:52:54:a6:48:8b:b5:e0:91:87:1b:53:89:65:c8:3e:cd:0f:
52:39:bd:cc:2a:4c:da:ee:bf:c8:37:10:1b:27:15:e4:50:02:
b1:cd:9d:89:28:56:fe:1a:e4:98:5e:d3:5d:f2:ec:db:06:b8:
d2:fc:74:0a:2a:f1:e3:ae:e4:b9:ab:9e:72:5c:01:b1:69:25:
8f:c9:d3:1e:37:9d:3e:37:33:77:f1:08:c5:97:26:fc:9a:d8:
b3:22:d1:26:2d:85:85:d6:d8:e9:38:04:ea:61:05:6b:4c:52:
52:e5:b0:a6:06:51:f2:5c:ea:7e:08:05:fb:f7:98:5b:d3:d6:
ae:cb:3e:dd:c8:cb:85:d5:eb:59:c5:07:d5:f2:8a:1e:cb:48:
85:5f:ed:1e:2e:e9:35:26:ec:2f:49:53:d1:93:f6:e5:61:e8:
34:05:08:11:9e:b2:5f:aa:c3:df:1b:3f:6d:94:ae:5c:7d:82:
de:76:f2:50:93:ae:5d:d9:11:16:e8:44:34:c5:2f:a4:9a:88:
83:10:ba:54:b3:47:8c:94:4e:aa:4d:8e:8d:ed:ce:14:27:ac:
77:30:4c:1c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ8jaFH5a8gCnHiTR8OxREboMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZjgzNTc2MGUxNDJhY2VhNGJmMGE3ZmY4YWU3Njc2OGY1
ZGNkYzcwHhcNMjYwNzAyMTUxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGFiNDg0NDNkM2I5Mjg4ZjczZTJhMTkzYjMwODJmN2Y0M2JjNWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1ZRxfnXsj5ZHJnUNVlWtWCY9jR0
j4mT69C8S7BQuxE44DR4P6nZvZl2Sbh6061QHIWFrwvkyp6RAvinIJxwRcZ/QgXD
U0HEwCSWSB/J6PnIzw5Mj6fXUCqkR63It9nEcm5vU5qc9ahdpV96hcmHTjab+tai
yfbzoaRD7ghj4TppPcPRaYOmBctrohLPWb/qXcHp+trS1YI6lc4A82VP8tKBaxB0
9JHQLy9QCPMxdDpYx84mi+eIpR4GCrCKyGQaVbOXDfLwtrjA6ZXtsEQ/RJs4TC3l
ojMtEXpTZTJToMP15Iu6kpT6/V9yiO0JgbE2tRWlQeShN8Dh2ZW7YMlYAwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBCrSEQ9O5KI9z4qGTswgvf0O8WpMB8GA1UdIwQY
MBaAFAH4NXYOFCrOpL8Kf/iudnaPXc3HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWZnMWRnNFVLczZrdndwXy1LNTJkbzlkemNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQt
MzhlZThmZDY0ZTdkLzEvRUt0SVJEMDdrb2ozUGlvWk96Q0M5X1E3eGFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQtMzhlZThmZDY0ZTdk
LzEvQWZnMWRnNFVLczZrdndwXy1LNTJkbzlkemNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgRdBDAN
BgkqhkiG9w0BAQsFAAOCAQEABKXaCMa0G5lKDLJTYZqsZymY6Yl/Xe2GS+V+idnp
wUGQIVt7JVJUpkiLteCRhxtTiWXIPs0PUjm9zCpM2u6/yDcQGycV5FACsc2diShW
/hrkmF7TXfLs2wa40vx0Cirx467kuaueclwBsWklj8nTHjedPjczd/EIxZcm/JrY
syLRJi2FhdbY6TgE6mEFa0xSUuWwpgZR8lzqfggF+/eYW9PWrss+3cjLhdXrWcUH
1fKKHstIhV/tHi7pNSbsL0lT0ZP25WHoNAUIEZ6yX6rD3xs/bZSuXH2C3nbyUJOu
XdkRFuhENMUvpJqIgxC6VLNHjJROqk2Oje3OFCesdzBMHA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:40 2026 by rpki-client