Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/eOxIbkHIe3c-4QwqPIT_wXMv1yE.roa
File: eOxIbkHIe3c-4QwqPIT_wXMv1yE.roa (raw, json)
Hash identifier: c9/fFRN/qvXD+q42RDZAblEsCeiavoAyvIx5PmbuCrQ=
Subject key identifier: 78:EC:48:6E:41:C8:7B:77:3E:E1:0C:2A:3C:84:FF:C1:73:2F:D7:21
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01A1A20181AFA82BB7EC05452DE1492537A8
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/eOxIbkHIe3c-4QwqPIT_wXMv1yE.roa
Signing time: Tue 03 Nov 2026 15:22:50 +0000
ROA not before: Tue 03 Nov 2026 15:22:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218220
IP address blocks: 2a0f:db80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:01:81:af:a8:2b:b7:ec:05:45:2d:e1:49:25:37:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Nov 3 15:22:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78ec486e41c87b773ee10c2a3c84ffc1732fd721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:4e:f7:be:56:f9:cf:4a:3c:1a:28:e2:3c:
af:9d:52:93:1e:64:60:67:24:6d:93:9e:e0:b4:ca:
7f:8a:55:c8:1b:b9:ec:38:40:db:ad:9e:02:a0:50:
65:69:60:23:3e:b1:21:f8:64:ec:12:87:11:5e:b2:
f0:83:de:83:95:f8:77:68:ca:ac:ff:94:e6:56:13:
c0:08:cb:0d:e0:f1:2f:7e:56:3b:a4:73:ef:4c:04:
be:9c:21:a8:e9:96:37:2f:9d:63:89:d3:80:2b:5f:
f0:05:b8:28:6c:3f:7e:c9:80:91:3a:bc:d7:de:c3:
a0:67:3d:2d:7b:d1:a6:bd:f6:b5:f0:0f:91:f0:0d:
28:6d:d8:a7:61:14:56:bd:b5:ae:23:d3:96:e1:1a:
ee:41:c4:27:61:24:6c:6c:53:c4:24:67:64:49:2b:
d3:59:f6:91:be:83:c8:6a:b2:46:67:7c:e4:df:e2:
94:51:2a:b2:04:aa:fa:1d:e7:5c:3b:ac:72:20:c2:
69:19:62:49:4e:da:40:4a:5e:30:34:af:16:b3:96:
13:2b:03:86:d2:c7:ed:b6:dd:df:ed:e3:e3:e9:e9:
53:ee:66:4b:04:ee:d7:f1:b5:37:e6:c2:08:12:80:
8e:96:67:d8:9c:59:ba:e6:c7:2f:3b:f3:e2:18:3a:
41:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EC:48:6E:41:C8:7B:77:3E:E1:0C:2A:3C:84:FF:C1:73:2F:D7:21
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/eOxIbkHIe3c-4QwqPIT_wXMv1yE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:db80::/29
Signature Algorithm: sha256WithRSAEncryption
24:46:24:61:fe:9a:b5:3c:eb:b2:ec:ef:e1:1b:05:25:ba:e4:
a0:a8:45:06:e7:c8:7a:a0:06:50:8f:4d:80:01:9c:14:66:95:
18:35:e6:9a:51:c2:92:44:80:38:94:fc:cf:a5:ac:45:11:c9:
ad:06:a0:7a:a0:fe:54:04:d6:b1:63:71:7d:da:a1:25:2b:12:
0b:ee:b9:05:31:f5:d4:93:81:d6:62:f9:61:2d:70:8c:99:27:
38:d5:2f:15:a8:60:45:80:57:47:df:84:92:d9:96:39:41:b3:
5c:c8:1e:e2:1b:2f:ce:36:60:c3:60:5d:2d:a1:cd:9c:dd:d6:
e2:4f:7d:ea:f5:1a:04:ee:51:33:d7:51:b8:66:b4:84:6d:8e:
1c:6d:2a:60:18:57:b3:8c:d6:ff:82:82:3d:67:68:e3:dd:61:
b0:94:8f:49:9f:43:7c:20:9b:09:45:1e:5f:16:7e:e3:e7:67:
ea:c4:8f:75:14:b9:56:71:ad:f9:89:29:11:c5:8a:dd:c6:78:
f7:8a:1f:5f:04:c9:e4:f1:f4:2c:d1:db:6d:a9:92:b4:9e:48:
8b:10:ea:7d:50:8b:e7:a5:7c:1c:8f:63:9d:57:62:df:9d:b1:
c2:4f:dd:da:8e:b2:ff:a8:5c:f8:07:5b:82:e5:05:49:81:bf:
34:99:12:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:26:02 2026 by rpki-client