Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/ez3sINlMTISdZyBV_hJqmoLINo4.roa
File: ez3sINlMTISdZyBV_hJqmoLINo4.roa (raw, json)
Hash identifier: SrEIOLPfYZlxkGiTaWbM6ObQhoWyRVfvSGT8gHOAs4Q=
Subject key identifier: 7B:3D:EC:20:D9:4C:4C:84:9D:67:20:55:FE:12:6A:9A:82:C8:36:8E
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A01A191C3650CEBB89F370CDC3112060BA
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/ez3sINlMTISdZyBV_hJqmoLINo4.roa
Signing time: Wed 19 Aug 2026 12:57:28 +0000
ROA not before: Wed 19 Aug 2026 12:57:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203446
IP address blocks: 91.109.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 10:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:19:1c:36:50:ce:bb:89:f3:70:cd:c3:11:20:60:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Aug 19 12:57:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b3dec20d94c4c849d672055fe126a9a82c8368e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:b9:57:ee:05:19:df:40:55:dd:41:58:07:
71:6d:80:4a:c8:9d:83:a4:5e:b5:f1:62:6b:3c:6d:
b6:e3:f5:4c:c7:dd:41:dd:24:fe:9c:10:c9:f6:ef:
66:68:fa:b5:1f:25:e9:0d:cd:6f:39:05:61:86:3b:
0b:fd:34:31:30:8c:ed:c9:7c:da:11:f0:e4:6c:56:
d8:71:c6:75:f5:0e:2f:36:c3:90:75:db:23:27:9f:
e8:c1:0a:3d:60:81:76:d1:bf:6a:cd:3f:23:dc:24:
3d:be:c7:96:9a:08:c7:bf:38:1e:23:50:21:e3:e8:
7a:b0:db:85:cc:39:01:85:8c:6f:a3:5a:9b:80:90:
71:d4:87:f3:60:49:2a:87:f5:49:5f:68:64:9f:d1:
83:18:a1:d3:5a:13:05:0b:75:d2:2d:e4:1d:2d:34:
1f:ee:0d:35:33:5d:10:61:b7:1b:bb:c6:63:94:91:
1a:06:4d:ee:c9:14:f8:78:b3:fd:02:1d:77:41:ef:
79:11:82:15:45:7a:14:31:b3:6c:be:37:d5:ba:d0:
99:df:51:3f:47:6f:97:fa:7b:2c:04:03:86:10:df:
2e:ca:bb:a9:f6:fe:be:5e:b7:a9:d3:1b:4a:f5:f3:
64:e4:11:e3:ef:c2:f4:3a:e3:19:a2:94:63:46:95:
d8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3D:EC:20:D9:4C:4C:84:9D:67:20:55:FE:12:6A:9A:82:C8:36:8E
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/ez3sINlMTISdZyBV_hJqmoLINo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.45.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:6e:07:58:fb:5d:ec:b4:6a:73:b2:de:f1:91:ac:01:8b:08:
38:ac:01:3a:11:79:f7:58:e0:81:65:23:ff:51:b7:45:2d:c5:
cf:10:3a:32:69:59:92:e6:06:32:4e:94:18:e9:42:83:bc:40:
09:20:b4:b7:0f:78:e9:14:77:73:2e:15:a7:c7:c7:25:93:8f:
94:c0:8d:1f:74:e9:e7:3a:39:a8:f1:6e:27:d1:83:18:39:62:
3d:ae:ef:95:fd:01:01:e7:64:33:e5:0f:11:af:a1:bc:f4:24:
51:4a:b3:be:86:98:75:13:32:c4:d0:13:13:21:59:24:31:08:
55:e3:43:e9:fb:67:68:bc:f7:cf:ae:35:4e:cb:57:6e:81:13:
ec:94:40:96:50:c8:08:19:07:c4:69:9e:cb:1c:a4:df:0d:4f:
d8:ed:fa:9b:b4:14:d8:b5:cf:49:9b:e2:ac:c8:b1:4e:18:0b:
d1:a9:7b:d7:0c:2e:d0:b0:87:63:fd:5e:ad:a1:05:67:59:0c:
76:d9:e4:71:d3:73:28:35:e7:db:4f:f7:84:ed:ff:75:fc:f6:
16:02:b2:ce:cb:52:0b:fe:44:15:c6:cb:11:d4:f9:32:0b:76:
5a:23:5d:08:a1:f4:df:43:9d:0c:24:f4:c9:71:6c:14:82:75:
26:21:96:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:44 2026 by rpki-client