Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/ejc7CksT3ZPS3w1ifD23YQmLp3w.roa
File: ejc7CksT3ZPS3w1ifD23YQmLp3w.roa (raw, json)
Hash identifier: CKSzAXHOt9rhyCkadztzGUyoFEHvoO/T+jaN/eeTuLE=
Subject key identifier: 7A:37:3B:0A:4B:13:DD:93:D2:DF:0D:62:7C:3D:B7:61:09:8B:A7:7C
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A186C60962521F1A5AF0B95550B4864537
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/ejc7CksT3ZPS3w1ifD23YQmLp3w.roa
Signing time: Thu 29 Oct 2026 08:28:07 +0000
ROA not before: Thu 29 Oct 2026 08:28:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206007
IP address blocks: 191.44.116.0/24 maxlen: 24
201.7.25.0/24 maxlen: 24
201.7.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:c6:09:62:52:1f:1a:5a:f0:b9:55:50:b4:86:45:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 29 08:28:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a373b0a4b13dd93d2df0d627c3db761098ba77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:f5:84:0b:f3:28:29:9a:3b:39:76:de:06:
0a:ad:74:74:f1:06:0f:61:c6:c2:20:89:d4:87:2b:
83:ab:0c:23:f8:16:01:f2:df:0f:ff:3e:35:c0:d7:
7b:69:8f:01:6e:a0:fe:4a:9e:70:7a:14:81:85:26:
e9:53:98:ab:20:db:4d:ad:e7:89:7f:bf:33:50:99:
4f:53:7f:e2:80:71:e2:b6:62:c1:41:fe:98:35:3d:
61:b1:3d:0e:6d:0b:df:e3:23:1d:c0:4a:a2:43:64:
56:03:04:ee:77:bf:3a:1a:46:25:3c:db:53:65:5d:
73:40:10:1b:40:f7:3c:09:b8:74:ed:03:c4:23:5c:
a2:dd:7e:48:0b:4e:f3:83:1a:55:d9:ec:05:7e:18:
51:97:35:1c:31:63:21:60:5a:b7:9b:a3:25:72:ef:
0f:48:76:05:f7:f4:1e:7c:8d:02:47:af:6d:1a:38:
56:be:51:92:58:4a:db:aa:e1:9a:1a:61:50:9a:80:
a9:e1:a9:70:fb:3f:16:2d:c8:6e:f0:2f:47:9d:de:
8d:2d:22:fb:34:ff:b9:d2:99:33:4c:d4:e7:cc:a2:
36:7b:cc:a1:de:d6:e6:c6:18:ec:ae:2f:ca:ce:cb:
4f:5b:18:e3:c4:36:4b:7e:18:1e:89:4b:d4:e0:c5:
6f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:37:3B:0A:4B:13:DD:93:D2:DF:0D:62:7C:3D:B7:61:09:8B:A7:7C
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/ejc7CksT3ZPS3w1ifD23YQmLp3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.116.0/24
201.7.25.0-201.7.26.255
Signature Algorithm: sha256WithRSAEncryption
9d:be:9e:83:8c:46:b4:22:da:33:04:98:e1:a6:e1:80:5d:0e:
1e:58:a1:be:f2:b5:ad:93:0c:f8:6b:da:17:3e:f9:be:a1:3f:
4c:71:e0:e2:9a:59:a1:1c:a7:f0:0e:21:d6:60:d9:99:dc:6f:
33:ba:b1:cf:a0:2b:f2:ae:56:89:f1:41:0a:b7:63:ab:4a:8d:
a6:6d:4c:97:27:56:f3:c1:74:0d:ec:b3:87:6b:01:f4:59:6a:
c6:11:9e:87:13:27:42:f9:ad:89:d8:24:2b:f1:88:33:08:cf:
77:c7:13:7e:be:86:99:5d:59:cc:1d:1c:2d:19:5c:fe:1a:05:
a0:55:f0:08:44:3a:22:1e:26:87:ff:24:43:06:1d:d8:f5:c8:
57:f3:42:05:80:0a:4e:15:8c:cb:28:80:3d:9e:fb:b9:e9:f1:
04:c6:69:ca:9f:81:56:df:2e:a9:8c:c5:a1:97:70:b8:a7:d6:
ed:3a:f5:2d:24:b0:7d:0e:f9:66:b9:06:6c:6f:c8:0d:2b:65:
ef:85:ed:4e:a5:80:05:8d:a6:de:ac:5a:71:dc:df:a9:a5:f6:
c5:35:7e:f4:09:79:f2:55:88:c2:3e:db:57:0b:8e:3a:4e:9a:
57:2f:ac:fe:2e:27:e5:d4:85:94:e0:f6:05:da:c6:a1:a4:be:
83:7e:85:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 1 23:33:58 2026 by rpki-client