Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ewn2Dew19snko6rmqORa8K2gIIY.roa
File: ewn2Dew19snko6rmqORa8K2gIIY.roa (raw, json)
Hash identifier: oNOlFQHSm9+Ikk85pCDgwbdJFl3bsSnSYNLTpkBDaxY=
Subject key identifier: 7B:09:F6:0D:EC:35:F6:C9:E4:A3:AA:E6:A8:E4:5A:F0:AD:A0:20:86
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A1631ED59BE6732FA8DF8DEE396A66DDD1
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ewn2Dew19snko6rmqORa8K2gIIY.roa
Signing time: Thu 22 Oct 2026 10:18:47 +0000
ROA not before: Thu 22 Oct 2026 10:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 194.163.115.0/24 maxlen: 24
212.224.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:1e:d5:9b:e6:73:2f:a8:df:8d:ee:39:6a:66:dd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Oct 22 10:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b09f60dec35f6c9e4a3aae6a8e45af0ada02086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7d:2d:ad:ab:77:5b:4c:6a:7c:5b:7e:fd:1b:
52:8b:f8:c0:48:86:59:78:a0:e1:c0:97:8a:2f:f3:
99:8a:7e:78:04:02:54:f0:f9:b0:ca:c2:29:bd:62:
29:7c:d8:74:8d:2e:6e:ce:52:17:19:e6:93:1c:2f:
64:ee:03:d1:82:25:93:ba:5f:82:59:42:26:98:84:
00:67:14:2b:1e:c0:24:15:fa:2d:a5:d9:a0:38:4c:
78:98:91:73:13:cb:9a:dc:49:db:1c:f4:2b:35:1d:
cb:47:a2:d2:3a:ef:d7:5c:17:ba:e0:a4:24:6e:59:
67:c6:4c:fa:8b:d0:46:a8:8d:80:62:94:a3:c4:bf:
b4:c7:29:ed:76:da:10:20:41:c2:f4:df:79:4d:a7:
df:d3:f2:f8:dd:53:97:87:dd:1e:e1:50:68:d5:91:
3c:4f:5d:c6:66:7b:86:7e:23:80:72:0c:71:73:0a:
88:f9:8b:f4:bf:d2:0f:be:20:7b:47:68:f9:ae:fd:
12:9b:73:86:0d:26:eb:d3:25:c8:31:7b:a3:d2:e8:
de:ec:53:f7:d0:11:c4:6c:63:93:0b:77:2c:85:87:
51:99:62:0a:b4:72:9c:d3:ec:e8:22:9b:dc:ef:4a:
14:8a:36:59:78:7d:c9:b3:7c:7a:f2:90:4a:e4:16:
44:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:09:F6:0D:EC:35:F6:C9:E4:A3:AA:E6:A8:E4:5A:F0:AD:A0:20:86
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ewn2Dew19snko6rmqORa8K2gIIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.115.0/24
212.224.15.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:20:3b:2d:b8:50:ed:97:14:49:48:2b:b7:74:e3:87:8a:8a:
35:96:c4:da:6f:00:c0:27:43:15:15:d7:dd:34:82:08:ad:ca:
1c:ff:7f:18:e5:52:d7:9f:e3:ad:50:80:0a:50:81:63:80:f7:
29:31:b4:a3:82:95:2c:1e:ce:8e:bc:db:9c:68:88:10:b6:69:
bd:60:b1:a6:8f:fe:f0:bf:c2:86:b2:21:51:f5:3e:3e:f8:a9:
4f:e0:5a:79:02:0f:03:25:70:c0:8d:67:65:d2:88:49:20:cd:
ad:02:e8:c3:66:9e:43:ae:2b:a0:49:f6:28:dc:41:b0:1c:10:
3b:56:a9:5b:af:05:c5:1e:fe:7d:b4:05:f1:e2:0e:d7:85:9b:
ab:e2:e1:9e:43:2b:1b:0f:d6:4c:a6:05:d3:9f:2a:69:85:fb:
c0:3d:32:7b:eb:96:70:87:c0:df:06:7e:8b:66:72:23:d0:8b:
50:a3:7a:31:16:27:ac:dc:ef:94:7e:64:35:7e:63:42:16:7e:
7d:5e:c1:45:89:14:e3:ed:ae:d3:8b:a0:7f:51:fc:6c:52:02:
ae:de:9b:5e:47:d0:dd:23:39:9a:26:f5:b9:21:96:c0:7f:ee:
4d:b4:a2:65:52:62:f5:a3:56:6c:c2:87:e3:09:7c:d9:89:6b:
9d:2d:14:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 21:15:32 2026 by rpki-client