Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/ebblHkxH_4mxEtlIvQdRAh9glJA.roa
File: ebblHkxH_4mxEtlIvQdRAh9glJA.roa (raw, json)
Hash identifier: 3iH299M2+mtu/XgvXbZ9sMSTDosmnZ7V4KjCGJX9hzQ=
Subject key identifier: 79:B6:E5:1E:4C:47:FF:89:B1:12:D9:48:BD:07:51:02:1F:60:94:90
Certificate issuer: /CN=4ce0c48974e0ae705af50ed0d65247d1a7e62fdb
Certificate serial: 019F23686462964B78E947CCBE64179F6DC4
Authority key identifier: 4C:E0:C4:89:74:E0:AE:70:5A:F5:0E:D0:D6:52:47:D1:A7:E6:2F:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/ebblHkxH_4mxEtlIvQdRAh9glJA.roa
Signing time: Thu 02 Jul 2026 15:17:51 +0000
ROA not before: Thu 02 Jul 2026 15:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47176
IP address blocks: 185.238.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:64:62:96:4b:78:e9:47:cc:be:64:17:9f:6d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce0c48974e0ae705af50ed0d65247d1a7e62fdb
Validity
Not Before: Jul 2 15:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79b6e51e4c47ff89b112d948bd0751021f609490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:dd:fc:4b:75:d7:5f:a1:79:5b:27:7e:62:
5c:68:98:48:8f:37:74:ad:cb:34:3c:84:5f:30:79:
2e:d0:c3:d0:b9:b0:dc:de:8e:44:e9:a9:1c:dd:2c:
57:92:3b:f5:c8:8b:65:10:6e:4a:ae:70:17:86:35:
f9:3f:58:a8:16:89:cf:9a:f6:4f:94:68:43:2f:4f:
a0:e7:0c:37:9e:ef:31:38:88:1e:44:0d:31:1a:f7:
bf:29:34:44:ea:e2:7f:56:bb:ed:d3:0d:10:f1:54:
44:df:f8:2e:7b:3c:17:14:3b:bd:4f:2a:9d:b7:75:
99:f6:1d:14:80:e1:90:be:4f:35:f5:3f:ee:b0:6f:
60:90:0f:98:d0:bc:b4:8c:41:27:89:ca:a3:2e:1a:
0d:7b:3e:8d:51:fd:f2:75:00:b1:ea:38:0d:78:05:
78:d5:2e:ec:c0:5c:ac:7b:bf:e8:91:21:64:d1:bb:
17:84:fd:c2:9d:f9:d3:2f:23:4e:d1:86:c3:11:a5:
11:ea:ef:f0:53:c0:b9:78:20:f6:25:62:ae:cb:eb:
32:d3:12:b5:de:c9:10:19:86:6d:d5:39:6b:b8:28:
08:e4:4d:de:48:57:93:15:68:60:a7:a1:90:53:f0:
9b:a8:7a:e2:c2:02:50:6e:d0:a9:3e:6e:8b:a5:d4:
e9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B6:E5:1E:4C:47:FF:89:B1:12:D9:48:BD:07:51:02:1F:60:94:90
X509v3 Authority Key Identifier:
keyid:4C:E0:C4:89:74:E0:AE:70:5A:F5:0E:D0:D6:52:47:D1:A7:E6:2F:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TODEiXTgrnBa9Q7Q1lJH0afmL9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/ebblHkxH_4mxEtlIvQdRAh9glJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/TODEiXTgrnBa9Q7Q1lJH0afmL9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.12.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:b8:74:b2:3d:c0:8a:88:8a:7c:76:5d:50:3f:8e:d6:c1:79:
f4:b1:11:d1:64:70:b4:85:74:17:a2:29:53:b0:87:44:59:a7:
6c:95:d1:b3:c7:c6:1f:7d:84:a5:ec:88:b1:b7:38:a1:9f:c3:
7f:5e:b6:09:05:13:ee:91:6b:17:26:46:81:08:6e:34:72:f2:
0e:65:3a:34:5a:0d:b0:a9:0b:06:26:69:17:55:ef:82:45:4a:
a9:07:5e:08:2b:65:fc:c3:5b:ae:1a:68:67:de:34:61:2d:e1:
40:2c:01:41:55:2e:60:86:5e:61:2e:f7:6b:da:41:50:e8:0d:
88:4e:29:ca:24:ab:e2:6f:03:c4:d7:14:ab:6d:d6:3f:c9:7b:
b3:7b:c8:71:72:3d:a9:98:20:5d:70:d6:08:c2:66:57:0d:b3:
19:f4:c8:fa:5c:9d:f1:15:cc:3c:d2:a4:af:d0:c6:44:99:9b:
bc:29:44:49:ac:44:90:77:0c:46:ec:56:ea:02:49:0d:cb:fb:
4a:b9:ad:ae:db:44:d4:4c:96:21:9a:49:c4:7e:18:a5:7a:c0:
f2:6c:86:ac:7c:07:62:ed:55:8e:2f:de:3c:8b:84:b4:96:07:
89:69:12:2e:7b:3e:40:30:89:ab:86:d3:ec:5a:17:1b:e7:d0:
17:16:0a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:39 2026 by rpki-client