Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/EySyBrJAYfrjCqEYxsmXvPf3H5s.roa
File: EySyBrJAYfrjCqEYxsmXvPf3H5s.roa (raw, json)
Hash identifier: nhjndHhWgofWmTA2EVlrwEYSs042l2huk+iYyhoh+2o=
Subject key identifier: 13:24:B2:06:B2:40:61:FA:E3:0A:A1:18:C6:C9:97:BC:F7:F7:1F:9B
Certificate issuer: /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Certificate serial: 019CFAE57CF95B0DCFFF43EA1017C9CCED1A
Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/EySyBrJAYfrjCqEYxsmXvPf3H5s.roa
Signing time: Tue 17 Mar 2026 08:24:29 +0000
ROA not before: Tue 17 Mar 2026 08:24:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 194.147.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 08:24:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fa:e5:7c:f9:5b:0d:cf:ff:43:ea:10:17:c9:cc:ed:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Validity
Not Before: Mar 17 08:24:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1324b206b24061fae30aa118c6c997bcf7f71f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ae:7a:15:34:70:40:87:7f:86:b1:95:c3:45:
2d:38:ba:e6:80:ec:e2:af:8c:7d:59:cc:30:5a:4d:
10:d4:e4:38:fe:51:d0:87:db:8d:19:45:a6:91:76:
86:fc:4c:d6:e4:d3:1c:d9:06:4e:47:7e:41:b0:0c:
a1:ed:a8:95:c4:db:e6:2d:ba:70:c4:ed:4b:f6:77:
61:9a:47:ee:d8:9e:39:e3:2d:1e:54:2c:41:b4:b9:
af:21:a1:5a:0a:b8:55:ae:43:93:42:c4:68:b6:ac:
3e:3a:37:98:e7:4e:ce:60:0e:c4:8f:4a:b9:55:07:
cd:99:ed:9e:80:d9:de:80:c7:33:79:2b:a0:d2:f5:
9e:78:d7:11:11:b0:ce:a3:33:5c:68:35:be:7b:c5:
72:fe:7f:47:6c:21:f0:4b:2b:14:a7:af:22:f0:6f:
49:ea:96:47:af:81:92:e6:70:e9:ff:fd:7b:c5:2b:
50:8b:ae:61:b8:38:1d:2f:cf:cc:7c:8e:ea:fe:32:
bf:f6:1f:c4:e9:b0:b1:a1:88:31:5c:94:8c:b1:80:
c7:5e:90:51:05:51:40:6c:78:b1:44:d0:14:e7:cd:
4f:5b:b6:7f:3f:2c:f9:76:1d:02:6f:79:96:a8:a7:
f6:0d:ad:46:0e:71:cc:c0:b1:23:a0:29:66:be:20:
71:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:24:B2:06:B2:40:61:FA:E3:0A:A1:18:C6:C9:97:BC:F7:F7:1F:9B
X509v3 Authority Key Identifier:
keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/EySyBrJAYfrjCqEYxsmXvPf3H5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.44.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:1a:e6:c4:4d:42:1c:a9:db:99:b0:89:48:c5:fe:ed:a8:79:
bf:04:0b:82:69:ce:c1:d8:aa:f7:ca:b3:17:8a:76:81:aa:e2:
51:3a:f7:5b:a2:54:96:96:33:4e:ee:1b:67:7f:d3:70:84:59:
c4:3d:23:d2:3f:32:a3:60:30:5e:f8:fa:da:37:b1:e9:94:67:
91:a4:0c:60:08:b3:1b:9b:42:db:a7:ef:5a:7c:65:8c:86:cb:
01:30:bd:7b:e6:8e:36:d8:dc:62:79:c9:a2:03:c1:7b:11:a8:
84:73:bb:f5:91:9b:26:a0:6f:5f:c6:3a:df:20:7b:d1:0f:55:
59:97:f3:16:e7:39:ad:58:ec:8f:09:08:36:ec:81:50:9e:a8:
fa:ec:14:4d:d7:a5:b0:43:6c:c4:fe:69:f1:37:3b:be:6b:dc:
68:5e:c6:eb:3d:62:c0:9b:37:30:5d:03:24:48:26:88:36:1f:
9f:09:2d:dc:83:85:69:95:43:68:ed:b9:18:04:fd:40:0f:b0:
29:fe:a8:a5:bd:19:4f:28:f6:82:dd:ef:0f:3b:e6:90:f5:a8:
98:1e:55:65:b0:5a:eb:b3:cf:99:85:41:fb:16:1f:09:23:c1:
9a:9a:38:8b:f1:f4:bf:d3:fd:e2:01:51:7d:53:a4:3d:ef:62:
91:a5:7c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 15:26:57 2026 by rpki-client