Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/eneHjQFySlrWD8kaa01sRa3w-1U.roa
File: eneHjQFySlrWD8kaa01sRa3w-1U.roa (raw, json)
Hash identifier: 1j+eu+JDM0T7d59pZ3IEJRYReimsrkWRN3oI13pildU=
Subject key identifier: 7A:77:87:8D:01:72:4A:5A:D6:0F:C9:1A:6B:4D:6C:45:AD:F0:FB:55
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019EF4D1E2EECF14663FF634343F7EDAD1E1
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/eneHjQFySlrWD8kaa01sRa3w-1U.roa
Signing time: Tue 23 Jun 2026 14:10:56 +0000
ROA not before: Tue 23 Jun 2026 14:10:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198550
IP address blocks: 87.232.119.0/24 maxlen: 24
87.232.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:d1:e2:ee:cf:14:66:3f:f6:34:34:3f:7e:da:d1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jun 23 14:10:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a77878d01724a5ad60fc91a6b4d6c45adf0fb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:86:14:14:b5:a3:c0:30:d5:47:9b:6a:e3:
8c:26:89:6f:7d:65:81:d6:f1:e1:f8:ab:b6:87:bc:
fd:41:73:1b:01:20:2d:90:9c:89:88:86:bc:83:c0:
fd:38:5e:be:8e:bd:a6:56:55:d0:e8:5a:f4:14:e8:
79:d6:cb:23:0b:86:99:13:8a:ed:b8:95:f1:31:f3:
2c:ea:7d:9f:8a:02:43:a5:25:4c:8e:11:65:ad:64:
98:a5:c9:2a:a3:8d:23:93:a7:9f:59:2b:ce:a7:16:
c0:4b:46:1a:a3:8e:51:30:80:0a:39:ed:5a:99:89:
68:8f:e5:67:43:dc:59:3b:d1:b9:75:66:91:79:71:
9d:ac:ac:af:2a:a6:33:d0:aa:02:33:de:bd:ad:14:
b0:30:08:47:0a:97:9a:a3:9a:22:1b:e4:ff:9d:99:
b5:72:c5:c9:89:5c:4e:16:85:bd:28:f1:84:7b:09:
6a:f8:b8:b3:69:29:3d:a6:ae:60:24:19:cb:4b:e3:
fe:04:90:69:fa:b0:17:9c:af:86:0d:80:6e:66:68:
fd:79:3e:d0:38:8d:0b:f2:26:7c:63:07:bd:60:bd:
57:ed:51:3c:bb:d3:1d:8f:b8:1c:11:b2:48:1b:5e:
f3:8e:7b:69:08:10:b2:ba:98:bc:9e:ce:d7:e6:d1:
e9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:77:87:8D:01:72:4A:5A:D6:0F:C9:1A:6B:4D:6C:45:AD:F0:FB:55
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/eneHjQFySlrWD8kaa01sRa3w-1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.119.0/24
87.232.123.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:03:80:1c:10:45:72:04:d6:57:f6:15:05:23:c2:a0:91:36:
45:a0:c4:a5:16:d8:5a:86:0f:c4:a7:f1:26:58:f9:82:f8:d5:
6c:56:ba:ba:93:61:54:27:c9:71:89:d6:9b:f4:84:a8:95:a9:
f9:95:01:9d:97:46:f0:f8:5a:76:c8:d8:25:c6:dd:6c:9e:6e:
a9:d1:08:54:e8:bb:45:e7:2c:f8:2d:94:9d:52:50:4c:8f:3f:
8b:51:a5:6d:64:33:d6:df:0b:86:60:f8:9d:d5:0b:70:4d:bd:
71:a8:35:0a:1f:53:5d:38:fd:a8:1d:7d:6c:f4:37:13:3d:81:
c3:00:9f:a1:59:49:54:30:9f:b9:51:4c:cf:de:6c:2d:5e:21:
06:c3:82:62:ae:04:6c:77:fa:a2:d1:22:23:28:05:0c:c8:7b:
52:3c:40:bc:1e:4c:57:75:00:5a:b3:6d:6d:0b:42:eb:90:13:
ab:0e:b0:a7:cb:a4:84:62:fa:cf:4c:b4:4e:7f:67:47:bc:64:
94:e0:d1:f8:b0:a6:b5:0c:4a:76:56:a3:db:95:a9:44:11:fc:
60:e8:a0:18:82:07:52:3a:d1:9e:1c:13:2c:75:a2:b8:e7:5d:
3a:e1:c0:a6:a8:28:3a:28:2f:e8:d3:38:0e:a5:fa:76:3a:0e:
6f:9a:74:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 13:22:11 2026 by rpki-client