Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/e3b8EHdLF8GwLGUB3Yez42vr9dI.roa
File: e3b8EHdLF8GwLGUB3Yez42vr9dI.roa (raw, json)
Hash identifier: +EaOq/qo0wkzzygSzDkMoWbg2ll5ttXsI4Gysnn+gmE=
Subject key identifier: 7B:76:FC:10:77:4B:17:C1:B0:2C:65:01:DD:87:B3:E3:6B:EB:F5:D2
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019F84D1DF961A45D21BDD1A50ED48A6D57E
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/e3b8EHdLF8GwLGUB3Yez42vr9dI.roa
Signing time: Tue 21 Jul 2026 13:16:14 +0000
ROA not before: Tue 21 Jul 2026 13:16:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203359
IP address blocks: 2a0d:e247::/32 maxlen: 32
2a11:77c2::/32 maxlen: 32
2a11:7d02::/32 maxlen: 32
2a11:7d04::/32 maxlen: 32
2a12:e82::/32 maxlen: 32
2a12:e87::/32 maxlen: 32
2a12:bc86::/32 maxlen: 32
2a12:d800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:16:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:d1:df:96:1a:45:d2:1b:dd:1a:50:ed:48:a6:d5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 21 13:16:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b76fc10774b17c1b02c6501dd87b3e36bebf5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:92:48:ea:b8:a7:2f:28:60:a6:e8:2a:c4:04:
4d:c5:f1:58:ed:21:4b:cc:16:8d:2c:8a:1b:12:18:
c6:70:39:ef:01:24:91:1e:12:d9:b5:b4:0e:7a:76:
d1:fd:01:46:f5:49:d2:aa:c8:f8:b1:9b:eb:88:e3:
62:86:53:a1:d5:88:50:c3:dc:b9:c9:53:5b:bf:ed:
83:15:27:26:fc:da:78:a3:3f:56:b1:b1:7d:53:53:
1a:31:01:00:6c:3f:e2:63:f1:02:2e:34:d0:d9:43:
e0:97:73:84:83:b4:f3:78:e0:e8:c2:d7:c4:68:67:
9b:81:56:e2:2d:76:ec:78:f1:36:84:54:bd:76:56:
34:9f:2b:23:68:83:94:59:68:09:39:09:83:d5:0b:
13:18:36:47:38:16:91:f3:b1:49:bf:42:44:d6:ef:
15:df:22:89:28:5b:41:0d:c3:9a:d8:96:c4:96:57:
5f:7c:b5:a8:f4:cf:b9:1d:ef:2f:42:56:79:be:25:
f9:2b:c0:8a:7b:9e:3d:c1:0c:c4:d2:da:85:d9:0c:
ee:47:8c:e7:0c:77:c9:6e:dd:2e:ad:14:48:5e:a5:
c0:da:1a:3c:3d:54:21:ec:5e:55:a1:b0:0b:e7:ef:
29:af:12:44:0e:c1:62:b5:39:63:14:17:11:d3:9c:
52:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:76:FC:10:77:4B:17:C1:B0:2C:65:01:DD:87:B3:E3:6B:EB:F5:D2
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/e3b8EHdLF8GwLGUB3Yez42vr9dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:e247::/32
2a11:77c2::/32
2a11:7d02::/32
2a11:7d04::/32
2a12:e82::/32
2a12:e87::/32
2a12:bc86::/32
2a12:d800::/32
Signature Algorithm: sha256WithRSAEncryption
02:52:79:d4:6c:27:f9:21:ea:8f:6b:bf:eb:a6:25:ba:46:5f:
38:84:e3:28:73:ed:a3:20:8a:19:eb:40:8e:1e:29:08:d3:7a:
75:b4:b6:26:e5:bf:4b:44:83:94:9f:d2:9f:21:51:ab:dc:4b:
79:93:ec:28:77:d1:32:72:4f:95:cc:ce:1c:31:9b:e9:4c:bb:
5e:e4:a9:73:75:bf:70:26:05:f3:37:d2:45:b1:18:7d:3a:b0:
e8:01:fc:f7:e1:2c:88:16:40:57:a2:da:57:90:b7:da:d2:1a:
a1:54:01:f5:86:bd:30:07:73:41:14:a4:f7:aa:2b:02:9f:1a:
d3:a0:2c:31:8f:4f:1b:ad:19:e0:a9:09:65:08:8a:ae:9e:fc:
e8:93:01:86:d5:06:48:0c:b1:4e:d2:0e:2c:f8:95:ed:30:57:
20:7d:68:32:8d:b8:ce:7a:8f:8d:70:da:78:06:4e:0b:3a:26:
18:d9:8c:8a:4f:7e:34:90:07:d1:7c:3c:86:e9:fc:18:02:3c:
fb:31:54:03:cb:64:93:db:cf:16:f5:23:8b:c7:51:84:2b:54:
74:23:21:fb:b1:00:03:2f:d1:c4:e9:64:bf:f4:49:22:ad:f2:
5f:0e:2a:8c:d6:4a:b6:f7:fc:ce:ae:f5:c2:e9:0c:f7:ab:c1:
55:ed:6c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:37 2026 by rpki-client