Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/ekIg_EozOl2eKAl7YxwTNudO2Ck.roa
File: ekIg_EozOl2eKAl7YxwTNudO2Ck.roa (raw, json)
Hash identifier: H4suzunJCL6M7y1bzbaVMfsdpvdTVp5XzrKgoj5v1bk=
Subject key identifier: 7A:42:20:FC:4A:33:3A:5D:9E:28:09:7B:63:1C:13:36:E7:4E:D8:29
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 019D19DA4C5F4C49612448D5879194F2085E
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/ekIg_EozOl2eKAl7YxwTNudO2Ck.roa
Signing time: Mon 23 Mar 2026 08:40:29 +0000
ROA not before: Mon 23 Mar 2026 08:40:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400866
IP address blocks: 2a0b:21c1:602c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:19:da:4c:5f:4c:49:61:24:48:d5:87:91:94:f2:08:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Mar 23 08:40:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a4220fc4a333a5d9e28097b631c1336e74ed829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:0c:85:37:38:ff:71:1c:2d:13:e7:ab:2f:
cc:58:d1:49:3b:63:12:47:42:44:11:42:97:99:47:
0c:99:6c:81:2e:cc:2d:fa:70:f4:99:ed:b0:c7:1f:
c2:0c:8e:cf:45:b7:5f:6b:81:7e:94:0d:1d:c1:f1:
87:bd:cb:d6:9d:09:92:d2:dc:56:f9:24:e4:bf:38:
f9:77:1e:cc:09:68:9d:7b:f1:1e:33:72:4e:d8:58:
6f:51:0d:74:bf:55:1c:5e:33:f5:e7:fd:58:f1:ec:
7a:1f:b1:46:97:cb:fa:64:4d:92:71:5e:fa:1c:97:
d7:ed:bc:5d:c3:53:0d:7f:21:d6:ca:f6:5c:49:a8:
79:de:a4:c4:4b:5a:a8:61:97:a1:b0:bd:b0:7e:ee:
a2:a4:f8:48:8c:ae:19:7b:d4:47:88:63:7a:0a:69:
4b:99:43:69:0b:bd:97:d2:d5:da:5e:ce:cc:ce:51:
f2:63:3f:a1:5e:a5:2d:b5:82:95:15:97:fd:02:8a:
d5:c7:b2:bf:2a:ed:1b:b1:c6:69:50:11:3a:5e:e3:
41:31:76:df:b4:a4:96:2a:33:0b:b4:03:3a:c3:a4:
bc:2a:93:55:94:80:58:d4:4c:ad:f4:79:6d:fb:1b:
48:46:d3:29:5a:4e:81:4c:2b:99:da:87:c5:03:f9:
66:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:42:20:FC:4A:33:3A:5D:9E:28:09:7B:63:1C:13:36:E7:4E:D8:29
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/ekIg_EozOl2eKAl7YxwTNudO2Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:21c1:602c::/48
Signature Algorithm: sha256WithRSAEncryption
12:a2:2c:8e:5d:3d:99:e1:97:44:ee:25:28:59:3f:75:fd:ae:
4f:5e:c1:d9:79:fb:f3:67:52:14:62:90:d3:6a:4e:17:4e:f2:
24:e1:3e:0c:0c:06:c4:0b:d1:8b:b8:25:14:fe:ab:a3:82:58:
ed:dd:92:68:61:1f:a0:84:d7:81:f6:c2:9f:41:f3:2f:7d:07:
07:eb:59:f9:c1:3f:d2:97:fb:54:88:b5:a5:e7:ae:1f:a4:f8:
16:95:48:02:4f:c8:7a:96:11:af:29:b6:b0:d1:5b:58:83:95:
ea:52:2e:1a:84:0c:49:0b:8f:e2:f5:44:4b:36:d0:18:17:44:
d3:d3:56:4c:10:f1:58:73:8d:51:d9:ec:08:c3:de:47:16:3d:
49:5e:29:88:86:16:76:e8:ee:31:f8:bd:87:6a:15:83:07:50:
74:3a:72:44:f1:13:60:35:f4:4d:2e:b7:e1:93:28:06:82:34:
6c:d1:76:4b:93:db:4c:08:ac:0f:97:03:4a:13:cf:87:4b:8b:
94:e1:ef:a6:ec:65:e6:ee:f6:e7:4e:7f:06:80:7c:ac:68:de:
26:38:8a:ac:56:82:93:57:8d:a4:f1:53:d9:a3:ea:b1:5a:c1:
8c:86:32:5a:42:f9:b1:f9:68:43:a5:c8:bf:b2:f3:b1:d9:89:
3c:3c:db:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:19:49 2026 by rpki-client