Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/eCdQZ7MN6WhOs_2N8KnesTkhtHA.roa
File: eCdQZ7MN6WhOs_2N8KnesTkhtHA.roa (raw, json)
Hash identifier: cRgQPVKvEmN3oy9y2b/U/naDZIEgS1/Y23VWpGAjn2M=
Subject key identifier: 78:27:50:67:B3:0D:E9:68:4E:B3:FD:8D:F0:A9:DE:B1:39:21:B4:70
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019E2055888917310A28B30AC1BDB7692BD4
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/eCdQZ7MN6WhOs_2N8KnesTkhtHA.roa
Signing time: Wed 13 May 2026 07:55:36 +0000
ROA not before: Wed 13 May 2026 07:55:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211415
IP address blocks: 194.15.150.0/24 maxlen: 24
212.52.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:55:88:89:17:31:0a:28:b3:0a:c1:bd:b7:69:2b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 13 07:55:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78275067b30de9684eb3fd8df0a9deb13921b470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:2b:6a:48:46:16:98:b4:84:99:5c:79:9c:
1c:93:15:2d:af:96:ba:19:37:47:83:7d:6a:3b:17:
cc:e1:e5:8d:8a:4d:5e:c6:5c:de:57:f2:3d:1b:c4:
c2:63:d0:92:15:8c:5f:db:b3:d1:23:41:83:44:db:
4b:eb:ba:06:00:88:40:40:cc:ea:cf:af:42:63:0c:
fa:7c:b7:f9:9e:c1:1b:bc:9f:47:b7:e2:d7:2c:aa:
75:3c:4a:dd:fa:4d:11:54:1f:a7:ca:22:b0:ff:57:
66:03:b7:3e:0a:77:28:12:f1:c1:22:b3:20:5e:33:
b9:bc:43:18:87:5d:ec:f0:a8:02:a9:2e:86:70:9a:
84:9a:5e:85:0a:e8:72:8b:33:0f:40:a9:71:ef:cb:
d6:95:92:12:57:ff:7a:2d:91:99:55:b8:d5:9b:eb:
3c:41:d7:d6:b4:fa:e8:91:14:11:e6:74:1c:a5:7d:
59:22:b9:af:cb:0b:73:b9:0f:8a:96:3f:59:66:a1:
53:d4:37:45:89:26:4a:01:20:c2:97:51:55:de:ff:
99:f5:db:77:46:8c:8c:e0:e1:7a:a5:78:7d:56:8c:
3b:97:2d:46:5c:d0:2b:03:90:48:b5:73:40:95:31:
de:12:fa:22:7a:f3:ab:8e:f1:be:71:71:e6:97:ae:
8f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:27:50:67:B3:0D:E9:68:4E:B3:FD:8D:F0:A9:DE:B1:39:21:B4:70
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/eCdQZ7MN6WhOs_2N8KnesTkhtHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.150.0/24
212.52.2.0/24
Signature Algorithm: sha256WithRSAEncryption
22:67:bd:76:9f:20:8e:1e:1a:1b:c8:dc:12:f9:8f:0d:52:33:
11:50:d1:87:b3:39:c6:9d:39:17:76:43:80:e3:f0:0c:5a:e9:
14:84:ef:2d:ed:19:6a:dd:9c:17:5c:e6:9a:54:85:4f:da:07:
9d:41:2c:fe:1d:48:c6:f5:79:c0:6a:31:b2:60:29:c5:6d:96:
e5:44:53:ad:e0:fe:16:88:be:f8:b3:25:1a:0a:a1:32:65:98:
87:9c:27:23:45:4b:e8:32:e6:08:dc:24:4a:7d:61:f7:35:b3:
bc:34:23:ba:0a:01:52:72:35:a4:31:3f:56:16:bb:f4:ec:81:
13:37:3f:03:fc:75:38:44:c1:c3:dc:3d:63:ff:91:e8:52:83:
4a:1f:e4:ae:f6:95:b6:c6:4d:d5:fd:9d:fe:db:e2:ce:fe:7c:
51:da:be:9e:72:91:84:fa:e8:39:7b:6b:90:4f:9d:1d:b2:e8:
ec:b9:4c:5e:0a:fd:30:d5:b7:2b:50:45:cd:64:72:66:8c:04:
f1:35:75:4a:06:9a:c3:22:95:be:4b:0f:86:fc:cd:c9:53:15:
29:71:e0:7b:a7:a2:29:79:85:76:1e:5f:6b:9c:57:07:d8:59:
96:7c:b5:79:af:9e:d8:d2:49:e4:3a:11:14:dd:c9:c5:24:77:
7f:f2:0e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:52 2026 by rpki-client