Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/eeAdU61dAEl487F3Ap6OJwVb3nY.roa
File: eeAdU61dAEl487F3Ap6OJwVb3nY.roa (raw, json)
Hash identifier: Oh4fcwbJQjn9UMX01F08qYKp+6j3kQnbTRmMOn57gYE=
Subject key identifier: 79:E0:1D:53:AD:5D:00:49:78:F3:B1:77:02:9E:8E:27:05:5B:DE:76
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 01A10109E94011F1944BBE3E07BF7AB57643
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/eeAdU61dAEl487F3Ap6OJwVb3nY.roa
Signing time: Sat 03 Oct 2026 09:13:09 +0000
ROA not before: Sat 03 Oct 2026 09:13:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212335
IP address blocks: 45.95.224.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:09:e9:40:11:f1:94:4b:be:3e:07:bf:7a:b5:76:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Oct 3 09:13:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79e01d53ad5d004978f3b177029e8e27055bde76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:8c:5b:8c:25:6a:d3:f5:ba:a1:59:d6:5b:
e2:9f:7a:75:be:3f:04:8a:34:96:ee:30:51:0a:d8:
1f:2b:d2:d6:9c:cc:5b:e1:b1:6b:96:50:d0:7f:bd:
52:95:6a:22:d9:df:99:15:41:40:ce:f5:4a:21:b7:
fc:ff:7a:ed:47:4e:5b:f3:71:e5:f4:c9:f1:c1:2e:
d6:9e:23:6f:6d:34:15:cf:21:4c:64:12:80:79:8a:
66:b2:6e:a4:f1:58:8c:f8:d9:05:6e:1d:be:ee:0b:
42:93:4f:e9:79:e7:09:5c:4f:e5:ac:cd:cf:ef:e0:
25:84:c1:00:e2:0f:0a:3b:79:ef:40:b6:3d:6e:65:
d9:41:ab:95:2e:f5:54:d1:f9:dc:48:7f:5a:14:66:
82:63:95:8e:e6:a5:d4:aa:84:14:0d:af:5e:d1:62:
42:14:0e:81:36:84:e5:ed:73:9d:3b:ea:20:d4:e5:
ed:70:3e:48:64:3d:58:68:4c:c7:a5:c2:3e:e4:fe:
0e:7e:61:39:2c:f6:a2:af:1e:14:f2:89:67:57:4c:
d8:eb:ee:0d:12:d1:76:df:5e:58:17:d0:e1:64:2d:
d9:16:08:b5:fd:71:a5:4d:98:1e:3d:50:14:ad:97:
39:31:21:02:71:6f:c6:31:3a:85:84:21:cd:8a:a9:
f2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E0:1D:53:AD:5D:00:49:78:F3:B1:77:02:9E:8E:27:05:5B:DE:76
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/eeAdU61dAEl487F3Ap6OJwVb3nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.224.0/23
Signature Algorithm: sha256WithRSAEncryption
58:30:14:0e:4f:2b:3f:5a:74:6c:50:97:2a:45:09:e7:9d:cd:
fb:41:73:01:46:5b:19:6c:ba:a8:7e:2d:70:81:68:c7:c0:9c:
99:67:ba:39:a4:f3:fc:d8:61:28:4b:db:bc:ed:1d:96:a0:c7:
1e:70:af:65:29:1e:48:81:a7:6e:f1:a5:7e:55:f5:d1:07:c6:
20:65:93:f1:58:c5:c9:bb:55:1e:13:89:74:8a:d3:a3:22:57:
4f:3f:43:5e:50:60:2a:18:78:a3:de:75:d2:7e:ac:15:a1:b2:
af:3b:bc:41:a6:f1:38:09:23:62:9e:40:f9:9c:b0:08:e2:d2:
ea:c8:da:07:05:0a:5e:72:2f:9a:1a:92:ef:2d:5c:ee:79:9f:
07:5c:b3:51:05:f8:8d:e1:3c:90:da:27:ca:41:d1:70:c5:94:
22:4f:2d:c0:f1:80:91:76:24:ea:99:dc:1e:45:70:be:4d:4e:
fc:13:a4:07:dd:69:a4:51:67:6e:73:a7:62:6c:4c:fb:c8:cb:
18:a4:f3:14:b9:d7:a7:0f:d1:52:55:f0:57:6c:17:9d:52:ea:
ad:70:e2:11:d3:17:cb:ca:04:58:cc:b7:0f:11:33:46:eb:45:
0c:ca:e8:a8:83:79:cb:31:72:92:6b:56:b8:85:5d:48:b3:95:
2d:37:7e:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEBCelAEfGUS74+B796tXZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5
M2UzMDkwHhcNMjYxMDAzMDkxMzA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWUwMWQ1M2FkNWQwMDQ5NzhmM2IxNzcwMjllOGUyNzA1NWJkZTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDuMW4wlatP1uqFZ1lvin3p1vj8E
ijSW7jBRCtgfK9LWnMxb4bFrllDQf71SlWoi2d+ZFUFAzvVKIbf8/3rtR05b83Hl
9MnxwS7WniNvbTQVzyFMZBKAeYpmsm6k8ViM+NkFbh2+7gtCk0/peecJXE/lrM3P
7+AlhMEA4g8KO3nvQLY9bmXZQauVLvVU0fncSH9aFGaCY5WO5qXUqoQUDa9e0WJC
FA6BNoTl7XOdO+og1OXtcD5IZD1YaEzHpcI+5P4OfmE5LPairx4U8olnV0zY6+4N
EtF2315YF9DhZC3ZFgi1/XGlTZgePVAUrZc5MSECcW/GMTqFhCHNiqnybQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHngHVOtXQBJePOxdwKejicFW952MB8GA1UdIwQY
MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt
ZTZiZjMxNmM5NGExLzEvZWVBZFU2MWRBRWw0ODdGM0FwNk9Kd1ZiM25ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx
LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLV/gMA0G
CSqGSIb3DQEBCwUAA4IBAQBYMBQOTys/WnRsUJcqRQnnnc37QXMBRlsZbLqofi1w
gWjHwJyZZ7o5pPP82GEoS9u87R2WoMcecK9lKR5Igadu8aV+VfXRB8YgZZPxWMXJ
u1UeE4l0itOjIldPP0NeUGAqGHij3nXSfqwVobKvO7xBpvE4CSNinkD5nLAI4tLq
yNoHBQpeci+aGpLvLVzueZ8HXLNRBfiN4TyQ2ifKQdFwxZQiTy3A8YCRdiTqmdwe
RXC+TU78E6QH3WmkUWduc6dibEz7yMsYpPMUudenD9FSVfBXbBedUuqtcOIR0xfL
ygRYzLcPETNG60UMyuiog3nLMXKSa1a4hV1Is5UtN346
-----END CERTIFICATE-----
Generated at Tue Oct 20 07:44:18 2026 by rpki-client