Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/egNs0fvR0rvTeNy38L9Ly5HNBxw.roa
File: egNs0fvR0rvTeNy38L9Ly5HNBxw.roa (raw, json)
Hash identifier: n+9hTIbfmjtYB8IlfS0V4nQrh2GVHp+ZwL3oJyr2kwA=
Subject key identifier: 7A:03:6C:D1:FB:D1:D2:BB:D3:78:DC:B7:F0:BF:4B:CB:91:CD:07:1C
Certificate issuer: /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial: 019DB08BD2515760BB98CDB3346319F4B825
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/egNs0fvR0rvTeNy38L9Ly5HNBxw.roa
Signing time: Tue 21 Apr 2026 14:57:26 +0000
ROA not before: Tue 21 Apr 2026 14:57:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34309
IP address blocks: 194.191.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 May 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:8b:d2:51:57:60:bb:98:cd:b3:34:63:19:f4:b8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Validity
Not Before: Apr 21 14:57:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a036cd1fbd1d2bbd378dcb7f0bf4bcb91cd071c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:b1:b9:77:1c:ed:34:e8:bc:e6:ff:f1:24:
c8:c3:b9:a2:7a:84:ac:a1:f1:ad:03:ca:f9:66:4a:
2a:11:2d:fc:39:45:a3:9e:24:a7:ae:06:51:dc:fb:
f2:90:92:49:6d:db:1c:b0:15:71:b9:f0:f8:02:aa:
f3:12:f8:e4:42:ce:c3:b1:68:fc:30:1e:e0:22:f2:
a8:61:bc:85:bf:35:6e:3d:6f:4b:e3:b1:ff:20:20:
86:57:42:47:90:c0:2b:d2:94:4b:01:98:98:5c:be:
3a:e3:8c:a6:ed:2c:44:46:de:e0:0b:25:7a:79:f0:
dc:fa:aa:ff:8e:19:37:0d:22:7b:7f:85:a2:ec:7f:
43:a3:8f:cd:99:9c:1e:00:c4:77:e7:ff:9b:31:3a:
e6:fb:66:2d:f4:ea:2b:81:bd:80:f0:b7:83:7c:eb:
20:b6:c4:a0:3f:b3:49:43:42:63:11:b5:d0:80:76:
7b:2d:c9:97:99:7e:fe:79:28:f6:04:58:58:62:b1:
46:d4:4c:72:96:11:bb:f8:2b:1c:fd:a9:d3:ce:34:
f9:a3:d5:8b:0b:3f:b1:af:5a:59:3b:e9:52:54:cb:
ca:28:19:9c:b4:21:df:c9:0d:db:ac:6e:4d:e7:07:
e9:4b:47:1f:59:fd:25:28:ea:e6:c5:f6:3b:8d:5f:
4b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:03:6C:D1:FB:D1:D2:BB:D3:78:DC:B7:F0:BF:4B:CB:91:CD:07:1C
X509v3 Authority Key Identifier:
keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/egNs0fvR0rvTeNy38L9Ly5HNBxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.191.16.0/24
Signature Algorithm: sha256WithRSAEncryption
18:43:02:8f:11:fa:96:f1:00:f6:65:1e:fe:d4:1a:c9:df:0d:
6d:85:1c:49:9a:1d:bf:d8:f1:4d:5b:1a:8e:96:bf:07:9d:81:
e6:03:a2:15:b0:d8:a8:26:b7:ef:c2:d1:97:e1:e0:91:3e:8c:
1f:68:f7:d8:b8:3c:37:59:1f:ad:6a:54:88:b4:a0:de:47:c2:
56:8f:64:62:82:17:b8:87:3a:29:bd:cf:36:cd:19:35:4a:47:
03:e2:70:13:d2:9c:57:60:dc:12:64:df:f5:ac:eb:73:94:12:
7c:88:ab:f7:d5:d1:86:eb:c7:b1:30:01:8e:92:b2:b3:d9:c2:
00:41:58:4c:9f:a9:3f:72:44:dc:3f:95:8d:28:43:0a:cd:43:
d1:b5:45:f0:28:45:4f:0a:8a:71:2c:4d:94:79:1c:8f:c4:14:
a5:9c:c5:a9:14:75:4b:e8:56:1a:13:b7:77:ec:b8:ba:f7:18:
3b:3c:c2:6e:c7:46:75:35:a5:1e:0d:4f:12:4a:d3:26:d2:51:
ba:65:8e:df:07:bf:f1:9a:7c:e7:8d:74:4a:e3:09:56:60:92:
90:ab:e3:4f:8b:3b:41:4f:e9:0d:cc:b5:4f:a0:26:ad:e4:8f:
55:18:aa:81:24:2c:a5:81:b0:b4:f9:2f:44:ae:fb:af:bb:a4:
51:6c:74:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 06:57:49 2026 by rpki-client