Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/eif41r_-3o6gJdDyF1qc7lHSk-o.roa
File: eif41r_-3o6gJdDyF1qc7lHSk-o.roa (raw, json)
Hash identifier: RCii2XB1uZ3fKnOwfPOjCgjXmQunfteSRzbCjDDdRqw=
Subject key identifier: 7A:27:F8:D6:BF:FE:DE:8E:A0:25:D0:F2:17:5A:9C:EE:51:D2:93:EA
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A0E6B2D4FE857715E07C2360D7BB9E9CAD
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/eif41r_-3o6gJdDyF1qc7lHSk-o.roa
Signing time: Mon 28 Sep 2026 06:27:54 +0000
ROA not before: Mon 28 Sep 2026 06:27:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 213.214.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 13:09:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:b2:d4:fe:85:77:15:e0:7c:23:60:d7:bb:9e:9c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 28 06:27:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a27f8d6bffede8ea025d0f2175a9cee51d293ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:9e:2a:60:98:e2:7e:61:b1:f1:f6:a8:c9:
ec:41:05:05:6f:3d:7d:24:8e:c4:cb:c3:98:69:29:
39:ae:41:16:58:dd:b8:4e:af:a2:4f:45:b8:9b:d6:
06:e3:7e:1f:ad:0a:b6:63:fc:ab:55:db:22:3c:79:
65:d2:f4:37:b9:e5:fd:bf:ea:be:99:fe:15:22:00:
21:dc:3c:f5:52:24:8c:60:99:81:b5:6c:19:91:6b:
4f:7e:a3:da:de:8b:a2:ee:aa:1c:b7:ee:ef:57:1b:
2b:07:d5:13:98:d7:26:75:8f:2c:0f:27:9d:b4:e4:
f7:2d:18:26:60:46:44:3c:f4:56:22:f5:78:54:1a:
f4:92:e9:33:15:ea:2b:b4:f0:d8:ce:c2:9f:6b:d4:
79:7d:f0:bb:66:5e:bc:80:cf:ae:93:75:6d:e6:68:
eb:f5:8d:d7:d1:85:4e:47:53:03:0e:18:36:1f:1a:
e2:1d:90:1d:49:f7:8c:ba:46:00:d5:62:fc:94:b6:
d9:8e:fd:df:3f:d5:47:15:67:e7:c1:21:c8:63:15:
e3:38:d3:92:c8:4d:3b:fb:f6:e3:3d:3d:45:b2:9d:
85:88:e3:3e:22:78:f4:3e:53:f2:c6:ed:b8:5f:12:
72:15:cc:df:9e:ad:42:ab:36:b5:5d:58:45:ca:d5:
ab:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:27:F8:D6:BF:FE:DE:8E:A0:25:D0:F2:17:5A:9C:EE:51:D2:93:EA
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/eif41r_-3o6gJdDyF1qc7lHSk-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.214.104.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f5:ec:b4:16:32:6e:3e:54:6c:ab:28:03:42:a1:2c:36:fa:
ef:a1:ea:a6:6b:09:09:d1:90:4e:d1:3b:51:11:01:dd:20:ea:
b1:27:6a:db:95:f7:6b:68:2b:77:ce:eb:0a:ea:4e:8d:1b:ab:
20:86:53:9b:fc:c0:78:83:ef:ef:b4:90:8d:61:fc:ab:26:ea:
7a:58:6b:ec:ff:36:06:25:6f:d8:57:be:8f:67:e9:05:b0:28:
7d:ff:c5:e6:51:7b:b1:83:c6:88:d1:17:e8:99:fd:0a:ab:1e:
c6:4d:a3:89:31:81:eb:32:86:03:47:8b:65:2d:36:b5:e5:1c:
fc:6c:43:c4:00:3e:dd:ad:3e:26:66:a4:ee:26:14:e2:e2:b2:
2c:af:0c:1d:89:0f:1f:d3:87:01:89:92:07:06:a7:41:29:7e:
59:f0:18:2e:ff:41:f6:5e:82:dc:f8:cc:ad:47:8d:b5:86:a1:
43:8a:37:56:99:86:d1:05:f6:1c:07:5b:ae:03:a3:7e:1c:32:
74:b7:af:86:84:8e:44:72:5e:6e:79:67:84:75:ea:2c:c0:59:
2b:04:47:99:66:47:9c:a2:c5:2a:4f:8e:f7:26:64:78:96:09:
ce:1f:62:57:08:cb:3c:ab:41:04:fd:bf:a1:19:6d:41:34:e2:
79:cb:b0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:57 2026 by rpki-client