Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/xEb1N4AwyVect931lichZax9gVc.roa
File: xEb1N4AwyVect931lichZax9gVc.roa (raw, json)
Hash identifier: pdzOa5bXnlYPaOn3EIizrdv+AlDnLHznGL3AGJ+IWmc=
Subject key identifier: C4:46:F5:37:80:30:C9:57:9C:B7:DD:F5:96:27:21:65:AC:7D:81:57
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F6830F36D70693D4389B96F5E00DCF24
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/xEb1N4AwyVect931lichZax9gVc.roa
Signing time: Thu 01 Oct 2026 08:09:38 +0000
ROA not before: Thu 01 Oct 2026 08:09:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213830
IP address blocks: 91.82.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:83:0f:36:d7:06:93:d4:38:9b:96:f5:e0:0d:cf:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:09:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c446f5378030c9579cb7ddf596272165ac7d8157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b5:72:bd:d2:2c:97:4d:5f:c1:b5:12:8e:2c:
59:b8:9b:aa:95:9b:1c:f0:c8:6e:97:12:2e:d1:71:
de:a7:d1:6e:3d:d4:76:22:ee:d9:f1:43:15:a8:8f:
c8:a0:e6:99:b1:70:c0:81:2d:62:66:63:51:f9:3d:
44:b8:c3:24:e3:9a:c7:0b:37:7a:69:07:58:45:b8:
d2:6f:91:06:06:2d:8c:42:49:50:8b:9e:8d:34:f4:
22:7d:60:36:74:5c:46:5d:c6:c6:c8:7d:3e:5f:46:
2b:e5:39:88:38:aa:2f:4e:8f:ce:98:ae:94:16:95:
e4:1d:ab:95:34:38:8c:24:a6:de:43:4b:39:00:06:
b2:4d:04:d3:9f:96:7d:75:20:93:ac:78:4e:93:85:
96:a3:22:16:46:eb:4f:21:db:4a:2a:b7:db:55:49:
b8:1a:7a:89:47:74:8d:1e:1e:03:19:6a:fa:0e:10:
9a:ab:58:9a:88:1e:7d:9a:28:9b:b1:4b:cb:88:29:
70:a8:2d:d5:7e:2f:d8:9c:ad:ed:c0:92:58:f9:0b:
65:a9:ef:71:03:0d:f4:70:bd:b5:53:7d:a0:3c:d9:
e7:e0:a5:69:93:da:ae:4d:d3:7d:6d:c9:b7:52:03:
75:bc:63:e5:bb:b3:93:5a:a5:cf:82:a5:84:3d:44:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:46:F5:37:80:30:C9:57:9C:B7:DD:F5:96:27:21:65:AC:7D:81:57
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/xEb1N4AwyVect931lichZax9gVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.82.75.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:eb:ce:d9:89:33:b5:91:38:55:44:88:5b:38:af:d1:39:da:
96:6d:2f:b0:ec:7e:70:fc:11:97:17:18:1a:f3:ec:99:31:f1:
40:bc:8f:a6:62:6f:38:16:5f:a7:77:af:c6:27:ab:19:95:ef:
c0:6d:71:4e:9d:29:d5:b2:59:db:75:81:dc:9e:8e:be:9d:42:
48:d1:57:31:8d:af:2a:fa:6a:d6:90:0b:c5:6b:ad:35:2b:ad:
52:db:f2:7a:6d:d7:67:7d:0e:0c:c0:9b:31:9f:f8:99:e1:33:
61:65:b6:73:6d:2d:08:74:94:34:03:18:a3:f5:5e:b2:1b:51:
7a:a2:81:d8:e5:97:29:98:b7:1e:23:76:c4:d1:39:ad:d9:85:
23:44:41:97:a9:1b:f6:4d:52:e1:4f:28:83:50:62:6b:40:a1:
d9:1f:08:7a:b5:f0:f0:da:89:65:38:e6:46:7a:f1:81:7e:c7:
36:2c:c4:64:38:ab:e0:dd:78:ac:a2:f4:87:a8:24:8e:e0:b1:
e4:e3:d4:af:e7:9c:0d:97:ff:99:87:b2:85:33:6a:9a:88:92:
ff:d2:4f:00:70:62:0d:2b:64:c0:bd:94:fe:cf:a8:de:fc:3f:
1a:5e:86:33:57:26:79:02:68:89:b4:76:a1:f5:26:2f:ef:5d:
b0:57:47:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:12:20 2026 by rpki-client