Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/7HmEWomLxXEOvlLghbpH7_iogeE.roa
File: 7HmEWomLxXEOvlLghbpH7_iogeE.roa (raw, json)
Hash identifier: KcZM0SbOWgDbUiG6rx3l2wVF/43OOVBf1l90wExWVJ0=
Subject key identifier: EC:79:84:5A:89:8B:C5:71:0E:BE:52:E0:85:BA:47:EF:F8:A8:81:E1
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01A1CF80C7778B8C347EBECFBAC19470E62C
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/7HmEWomLxXEOvlLghbpH7_iogeE.roa
Signing time: Thu 12 Nov 2026 11:24:45 +0000
ROA not before: Thu 12 Nov 2026 11:24:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 2a12:5a00::/30 maxlen: 30
2a12:5a04::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:80:c7:77:8b:8c:34:7e:be:cf:ba:c1:94:70:e6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Nov 12 11:24:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec79845a898bc5710ebe52e085ba47eff8a881e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:3f:85:62:1f:4e:e7:c0:0e:fa:af:4e:52:
f9:ed:47:99:fa:3f:cf:4f:5e:b6:1f:22:76:52:90:
64:e7:17:43:cd:45:aa:15:17:f1:dd:29:49:68:05:
d1:84:40:6b:2f:90:b8:84:d3:8b:66:2b:7a:09:8d:
25:87:4e:b2:22:a4:d2:06:c1:33:4d:5f:35:94:b7:
51:f1:ec:37:38:49:b0:1f:6f:ae:93:b7:6b:c8:2b:
a7:c8:58:12:e1:28:56:bf:22:d9:68:30:07:cd:9e:
91:b5:00:d9:f8:7c:7c:b1:40:49:c6:8e:9f:8a:fa:
b7:67:64:d2:8f:c8:fd:c5:36:3e:f4:4e:e9:d0:43:
c1:de:50:d1:a2:e7:15:bb:af:2b:33:0f:e0:00:ac:
75:f4:b8:1f:ae:60:23:54:15:bc:87:74:4c:8a:4f:
3c:7b:6d:9a:98:8c:6c:50:01:fd:70:19:a8:f8:c3:
d8:db:53:10:08:13:ae:93:7c:a1:7b:1d:ca:98:08:
48:46:e8:a2:4d:57:01:12:fe:d8:ea:b1:68:8b:73:
ac:9a:66:a7:9d:f5:4d:e0:b8:79:ee:70:7f:6b:e5:
9a:78:88:4d:c9:de:2d:16:d0:14:86:ad:72:bd:37:
ff:20:4a:0e:63:17:9c:62:c7:4f:b1:9a:6a:ed:4d:
1e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:79:84:5A:89:8B:C5:71:0E:BE:52:E0:85:BA:47:EF:F8:A8:81:E1
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/7HmEWomLxXEOvlLghbpH7_iogeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5a00::/29
Signature Algorithm: sha256WithRSAEncryption
c9:42:3a:c8:de:c3:43:76:bb:d0:18:72:42:5f:ae:18:29:46:
b5:fe:62:dd:bb:07:2f:e6:7c:91:de:fa:dc:03:83:f7:e4:3b:
d9:c3:99:3b:7d:04:b0:e6:cc:7f:b5:4c:01:3d:f7:06:d7:bb:
99:09:32:32:32:e3:5f:60:47:4b:0c:19:f4:fc:8d:e3:f5:79:
fe:f1:76:93:f2:1d:a1:00:b0:ab:18:a5:71:4c:f8:8f:23:70:
7c:84:07:1e:1c:c7:0b:fa:d2:d1:bd:63:54:9c:26:3e:51:85:
1b:30:5a:70:9b:b8:29:d0:da:dc:d6:91:48:34:7c:02:24:ec:
89:bb:7b:e6:46:d3:bc:a8:b4:56:85:45:c9:d9:ea:23:95:73:
2c:2d:e1:b1:dd:8f:d5:25:6c:24:1b:77:54:b9:01:32:e2:e6:
65:43:d3:c3:59:ec:e0:a2:fe:1b:e9:76:8b:f1:5c:ec:b7:e6:
2f:4c:87:05:3f:15:12:0c:24:12:8e:61:3d:a2:33:b4:2f:8f:
e8:a1:02:33:6f:2e:e7:2d:b9:8f:47:d7:ab:a8:2e:f0:32:9a:
b9:d8:df:05:a5:13:37:e1:57:0c:ff:ba:ee:f4:11:50:50:e8:
e4:8b:dd:f0:b8:b9:1a:5a:36:1e:bd:f2:72:12:91:4d:57:da:
53:9f:6e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:32:17 2026 by rpki-client