Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Eh68WceL7xdK1loicRgA5rKPt2k.roa
File: Eh68WceL7xdK1loicRgA5rKPt2k.roa (raw, json)
Hash identifier: QYKLEKccaPNpt5ORP7XClYeG+zkPmU2+7XZiGT5TnbU=
Subject key identifier: 12:1E:BC:59:C7:8B:EF:17:4A:D6:5A:22:71:18:00:E6:B2:8F:B7:69
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0E3BBDE81EF74FCF3A3341865A93C16B3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Eh68WceL7xdK1loicRgA5rKPt2k.roa
Signing time: Sun 27 Sep 2026 16:38:55 +0000
ROA not before: Sun 27 Sep 2026 16:38:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 94.156.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:bb:de:81:ef:74:fc:f3:a3:34:18:65:a9:3c:16:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 27 16:38:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=121ebc59c78bef174ad65a22711800e6b28fb769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:75:97:a0:83:08:6f:ba:89:e6:a9:d1:6b:3e:
83:8d:c5:ce:9f:1b:c1:9b:6c:64:f2:a1:50:0c:cd:
3e:ac:c9:9d:5e:aa:7a:4b:0d:1e:5d:0b:7a:b1:2b:
32:3c:98:fe:2d:f2:1f:6a:81:41:51:79:55:9b:8f:
29:d7:f3:c7:53:af:c1:72:d6:d8:7c:e9:91:bf:1e:
c7:28:57:e9:93:af:c7:ec:86:07:98:c6:f9:ff:d0:
f9:08:45:84:d6:14:0f:81:c4:30:e9:6d:78:0f:a1:
d0:86:35:0a:91:bf:71:c4:72:8d:30:92:aa:a8:a5:
dc:83:38:f2:89:1e:7a:72:f3:55:b0:f2:76:d0:67:
95:62:b7:86:05:16:ec:36:17:65:28:25:a1:4d:4f:
ff:da:d4:ff:91:5d:e3:15:01:1c:5b:0c:e9:e5:1b:
df:d3:45:3f:06:5e:fe:c1:12:0a:20:24:e7:96:13:
a9:e0:a5:71:a6:a1:0e:df:70:86:25:b8:d6:09:d9:
7c:28:e6:76:44:be:18:39:6f:09:f0:2d:82:74:10:
2c:d4:a5:bf:e0:b9:52:9a:93:d9:9c:af:a4:f3:27:
fe:90:ad:46:f0:9d:bd:1f:74:61:9d:8e:b3:90:d6:
a2:c9:53:c7:bf:ca:08:06:12:bd:3b:90:fa:66:de:
db:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1E:BC:59:C7:8B:EF:17:4A:D6:5A:22:71:18:00:E6:B2:8F:B7:69
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Eh68WceL7xdK1loicRgA5rKPt2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.10.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:bf:b9:cd:12:dd:15:4e:fd:7d:92:ae:e3:2a:36:20:1f:e4:
43:90:e7:ce:18:e4:53:5e:19:ca:b2:5c:46:ac:5e:53:31:f3:
79:b4:cc:a3:af:5d:c6:ec:f2:93:91:9b:33:fe:57:9f:e1:8f:
34:d5:15:9f:15:a8:17:a3:91:1e:97:46:83:a8:7e:49:b5:77:
d0:23:aa:b1:87:33:af:84:3e:95:0e:5a:f7:85:0b:ab:ac:ce:
de:94:07:4b:ed:ca:e6:d8:f2:44:1d:bc:1f:2f:a2:10:36:c9:
07:a2:bf:32:5e:49:67:42:49:19:e9:83:36:56:78:56:c2:9e:
8a:24:a5:69:17:25:f4:a4:71:f8:c2:5f:d6:30:4c:54:35:e2:
14:e9:e5:b3:d4:68:0d:c6:99:63:c7:81:27:36:ab:03:1c:9e:
40:a6:41:7f:07:fd:0c:75:cf:ca:e8:70:50:37:a9:4a:fb:23:
5a:70:95:c3:7f:09:ae:49:00:99:2c:51:c1:f3:b1:1a:46:68:
24:59:b8:b6:ac:5a:4d:7a:e3:3c:d5:25:91:7a:f1:83:e5:3c:
c1:ab:0c:32:ec:20:4d:9f:ff:6c:9f:1e:f7:3d:09:c5:1a:8e:
c4:e2:97:91:43:b5:c7:d5:7d:7b:1c:72:07:62:8a:28:1c:63:
ab:c8:d5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:09:25 2026 by rpki-client