Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/E3b8U4MK9zLHSw0vVgZu65brCFM.roa
File: E3b8U4MK9zLHSw0vVgZu65brCFM.roa (raw, json)
Hash identifier: boy8Q47zYskY8Da4ltEfvmVWaHLuWoM/3t70bBBpqRE=
Subject key identifier: 13:76:FC:53:83:0A:F7:32:C7:4B:0D:2F:56:06:6E:EB:96:EB:08:53
Certificate issuer: /CN=d4206716db9233feea9f8eb972de8912bc5b83f5
Certificate serial: 01A08A1701832099045BF5C9D31529FCB6A2
Authority key identifier: D4:20:67:16:DB:92:33:FE:EA:9F:8E:B9:72:DE:89:12:BC:5B:83:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CBnFtuSM_7qn465ct6JErxbg_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/E3b8U4MK9zLHSw0vVgZu65brCFM.roa
Signing time: Thu 10 Sep 2026 06:52:38 +0000
ROA not before: Thu 10 Sep 2026 06:52:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1257
IP address blocks: 80.85.112.0/20 maxlen: 20
185.208.68.0/22 maxlen: 22
2a01:b880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CBnFtuSM_7qn465ct6JErxbg_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:53:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:17:01:83:20:99:04:5b:f5:c9:d3:15:29:fc:b6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4206716db9233feea9f8eb972de8912bc5b83f5
Validity
Not Before: Sep 10 06:52:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1376fc53830af732c74b0d2f56066eeb96eb0853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:60:d1:44:1d:98:dc:c0:ba:44:25:2e:d1:c8:
ec:c6:a6:51:7b:00:66:01:88:b3:34:0b:ea:a5:60:
c3:6b:79:dc:95:99:d6:c9:e8:4f:5e:64:a8:10:a7:
6d:2a:28:3d:3c:7d:ae:28:d7:84:35:3f:2d:d9:02:
c4:f5:32:4e:0c:69:63:6f:76:c0:46:56:58:b8:41:
aa:a1:12:8b:34:cb:fc:b4:b6:bd:28:cf:cf:75:31:
0d:bd:79:90:0e:1e:a4:fa:6f:1a:36:c5:33:c8:85:
14:f4:36:ab:3e:5c:b2:c5:1c:ad:ba:88:0e:ad:4a:
38:2c:a3:a9:5c:00:81:1d:20:da:1c:c3:22:da:2a:
3e:f6:2e:fd:0e:52:d1:0e:a4:50:f7:ca:dd:08:30:
83:b3:14:c9:eb:68:31:d5:7d:f1:7b:2b:93:84:0f:
9d:63:96:53:f1:f2:ca:6a:a1:68:d2:9b:4c:a2:72:
ff:c0:73:a9:fd:03:e3:c4:5a:8e:c6:ff:0c:fb:c7:
19:a6:b3:3d:53:db:9f:40:4d:dd:8a:c3:e9:ec:19:
44:04:10:37:16:af:c4:c5:02:6a:b8:b1:21:5e:72:
48:37:cb:e0:fd:6a:6c:8b:c7:e8:56:6b:eb:fe:31:
4e:5b:10:54:5c:2e:d7:1d:76:72:d7:d3:09:9a:91:
70:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:76:FC:53:83:0A:F7:32:C7:4B:0D:2F:56:06:6E:EB:96:EB:08:53
X509v3 Authority Key Identifier:
keyid:D4:20:67:16:DB:92:33:FE:EA:9F:8E:B9:72:DE:89:12:BC:5B:83:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CBnFtuSM_7qn465ct6JErxbg_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/E3b8U4MK9zLHSw0vVgZu65brCFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.112.0/20
185.208.68.0/22
IPv6:
2a01:b880::/32
Signature Algorithm: sha256WithRSAEncryption
6b:3e:e6:e1:f2:a0:db:9f:e6:80:23:6b:2b:03:d8:a8:ec:40:
ec:86:85:a2:b4:e6:8e:51:e8:29:38:72:00:d5:b8:c6:b7:fa:
6e:a0:d7:0b:4b:79:68:26:d4:91:f4:da:d0:66:3d:28:f7:1c:
02:5e:a8:ab:46:4a:c5:c9:24:68:67:78:58:2b:ba:56:f7:63:
e1:67:83:a5:69:fc:c9:c0:43:84:7e:ac:14:f2:3c:c6:73:c8:
34:27:76:11:b0:e7:3d:2c:af:9d:fa:51:d3:94:47:a3:47:1c:
6a:e9:a6:e8:5f:10:d6:b9:aa:fa:62:7d:91:52:ea:26:9e:3d:
9f:5b:8f:44:60:c2:d7:eb:49:a0:fd:5c:0c:41:82:c0:3f:ce:
e4:d5:4d:22:3c:ac:a5:33:02:d7:22:1a:98:8d:ce:9d:c7:87:
ee:ac:89:d3:11:74:2c:17:fa:ba:95:b4:c4:e0:92:30:be:5a:
1e:af:bd:01:3e:ed:f5:b4:80:5b:75:ca:82:b5:19:48:8a:8c:
7d:c4:b7:38:64:2d:85:a9:1d:19:c0:6f:6d:e7:9d:d6:b1:e8:
03:03:84:34:3c:8a:a1:ab:9f:89:1b:73:8f:76:9c:9d:4f:45:
37:ec:08:d6:0b:93:1a:23:c6:e6:35:ed:85:5a:8e:12:ea:59:
4b:f9:4c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:18:23 2026 by rpki-client