Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eeHloeK7kkRIs2vySuKikO3CScQ.roa
File: eeHloeK7kkRIs2vySuKikO3CScQ.roa (raw, json)
Hash identifier: h5uNf1SttNB9QaPBUXXMCNJX1LyE9NT9vxNCz4eAGHw=
Subject key identifier: 79:E1:E5:A1:E2:BB:92:44:48:B3:6B:F2:4A:E2:A2:90:ED:C2:49:C4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CB9F63B8C2436B9F99A9C101C4E18FDB6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eeHloeK7kkRIs2vySuKikO3CScQ.roa
Signing time: Wed 04 Mar 2026 17:47:27 +0000
ROA not before: Wed 04 Mar 2026 17:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213250
IP address blocks: 5.83.132.0/24 maxlen: 24
5.231.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:f6:3b:8c:24:36:b9:f9:9a:9c:10:1c:4e:18:fd:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 4 17:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79e1e5a1e2bb924448b36bf24ae2a290edc249c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:8d:21:80:76:92:d5:45:d0:99:5f:25:f5:
c6:f4:89:f9:32:dd:62:c0:b5:d4:6b:d5:93:e5:e6:
62:6d:b2:f8:1a:e6:c1:8f:ec:42:eb:01:bb:cc:ee:
de:0c:c9:d8:52:a8:f8:3e:d9:d6:91:d3:b1:fb:c0:
26:33:85:b4:99:42:e2:cb:8f:f9:29:b2:34:af:a0:
87:b4:24:26:5d:28:d7:d9:b7:9e:40:a0:dd:58:5d:
99:62:d2:5a:bc:40:6c:2d:0e:81:a3:85:ca:d4:45:
0a:73:b7:01:be:26:d4:11:e8:ac:d5:3c:69:54:85:
30:89:69:5d:1e:3a:15:6a:6d:40:95:3d:e1:05:ca:
55:45:69:ce:58:57:30:cf:7c:29:26:0b:49:e5:8b:
51:87:22:46:f6:a7:30:f3:86:6f:b0:e5:56:5a:98:
24:4a:a7:ec:de:a5:20:4c:c1:eb:87:f7:7e:0d:bf:
f3:2c:90:bc:b6:b3:c6:10:cb:73:3f:61:35:ca:99:
9c:04:44:a1:db:06:97:4f:87:5d:d8:32:db:11:35:
31:38:51:9b:5c:ff:50:9e:24:2a:ad:f0:7c:c3:77:
7e:dc:ac:f0:e2:d1:21:bd:02:fe:b5:8c:75:82:d6:
f0:d4:2f:dd:88:b7:f2:dd:c0:48:b5:4e:d0:4d:a1:
1c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E1:E5:A1:E2:BB:92:44:48:B3:6B:F2:4A:E2:A2:90:ED:C2:49:C4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eeHloeK7kkRIs2vySuKikO3CScQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.132.0/24
5.231.108.0/24
Signature Algorithm: sha256WithRSAEncryption
71:18:35:2c:ab:12:ea:88:c7:d4:45:d6:7c:78:2c:b7:34:56:
7c:d9:50:f8:c5:21:2d:a3:88:eb:6a:5d:b8:38:9b:93:8e:08:
12:cc:e2:66:49:66:ba:1a:d5:6b:16:d3:6c:5a:7d:25:9d:4a:
e5:f2:9c:81:d8:95:02:19:ca:8e:2b:e8:c6:41:a9:bb:cc:ba:
f6:28:21:f2:ce:64:79:e1:8d:92:74:70:0b:fb:4e:57:ea:28:
26:3e:d3:ec:53:d3:84:a7:b8:2d:fb:b3:7e:13:98:3a:67:f5:
4a:3d:96:c0:89:ed:f4:45:7e:a6:9c:26:25:1f:11:78:3a:84:
48:3c:54:9e:23:8c:3b:fa:93:b2:96:14:3d:99:e1:ff:bd:94:
cd:b5:63:ba:25:42:59:ac:9f:89:4d:cc:28:0d:be:f2:88:87:
db:6f:e6:99:de:03:d1:50:e2:af:fb:f0:70:89:60:fc:d5:31:
3d:3f:ef:87:e0:8c:3a:3c:91:31:ea:a3:f0:48:82:21:3b:ff:
57:ff:75:d3:b1:87:f9:ff:86:17:20:45:93:87:54:38:9d:68:
42:ae:ee:96:e1:c1:62:c6:59:5b:3e:f6:a5:02:39:9f:09:c9:
d9:97:b8:61:88:31:43:2d:70:ae:d7:7c:df:23:60:17:a3:e7:
72:7e:1b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:39:08 2026 by rpki-client