Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/eO1ffON5nbT2OPoW9bAv5XFoM0c.roa
File: eO1ffON5nbT2OPoW9bAv5XFoM0c.roa (raw, json)
Hash identifier: nf/FRjYGWUCqQufksNXwWR1Vh86qg0m8oczQhsAoKsY=
Subject key identifier: 78:ED:5F:7C:E3:79:9D:B4:F6:38:FA:16:F5:B0:2F:E5:71:68:33:47
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A06CA83FB48B2257E27D5593C2E81FD6DB
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/eO1ffON5nbT2OPoW9bAv5XFoM0c.roa
Signing time: Fri 04 Sep 2026 13:42:40 +0000
ROA not before: Fri 04 Sep 2026 13:42:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20724
IP address blocks: 80.244.12.0/24 maxlen: 24
80.244.13.0/24 maxlen: 24
91.227.62.0/24 maxlen: 24
93.95.24.0/24 maxlen: 24
160.19.94.0/24 maxlen: 24
185.244.104.0/24 maxlen: 24
193.104.245.0/24 maxlen: 24
195.182.25.0/24 maxlen: 24
212.46.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Sep 2026 18:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:a8:3f:b4:8b:22:57:e2:7d:55:93:c2:e8:1f:d6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 4 13:42:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78ed5f7ce3799db4f638fa16f5b02fe571683347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:bf:26:ba:84:88:f2:22:e9:9a:00:2d:e5:
50:8e:e5:6b:6e:f9:04:14:50:3f:fe:e0:13:12:db:
f8:5f:a4:04:b6:40:e6:0d:b9:b9:db:ec:15:2d:18:
63:a1:18:b9:cd:c9:8e:02:d4:6b:57:2b:89:1d:76:
d5:5a:65:2f:e0:fb:7b:4a:a1:a3:29:9f:5d:3d:e7:
8a:86:94:3c:a2:b1:ac:6e:b9:f4:ae:57:da:07:45:
90:de:75:59:df:ef:ee:2a:66:7e:b0:1d:9c:28:43:
4a:f9:15:d8:f5:36:b1:bb:50:b3:4b:22:91:96:18:
4e:0d:af:fa:b9:d0:8a:43:d8:3c:d3:4b:bd:cb:26:
4c:28:e8:9e:68:6d:2c:4a:fd:d4:42:7f:b3:12:21:
30:16:cd:c1:53:76:45:73:78:32:ee:cb:73:31:27:
60:8d:ae:16:da:56:1a:74:72:4d:34:4e:9c:8c:c1:
02:4e:a5:20:48:91:8d:f3:9d:98:42:8f:ba:1b:80:
09:eb:56:f8:ee:c4:76:2f:e9:f4:34:1a:4e:7a:65:
eb:9a:97:18:22:63:8a:94:da:20:94:b7:06:ca:00:
8c:bc:b8:b7:46:bf:09:21:39:19:30:34:53:45:95:
ab:1a:c9:24:66:1a:f1:a5:2f:2e:c8:3e:19:66:9a:
5d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:ED:5F:7C:E3:79:9D:B4:F6:38:FA:16:F5:B0:2F:E5:71:68:33:47
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/eO1ffON5nbT2OPoW9bAv5XFoM0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.12.0/23
91.227.62.0/24
93.95.24.0/24
160.19.94.0/24
185.244.104.0/24
193.104.245.0/24
195.182.25.0/24
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d8:f8:e2:bd:34:ff:25:b8:1d:96:6a:e1:a7:8c:d2:89:ce:
49:c3:49:91:63:3a:aa:c3:38:4a:3c:62:5b:b8:0b:16:a2:c8:
67:33:62:25:5e:30:e2:e7:83:27:ee:c0:14:ac:35:73:66:3d:
fa:28:71:49:0b:72:2e:90:ca:34:d4:89:7f:0c:52:1f:89:bd:
a2:f0:70:45:cf:8a:be:80:22:ab:cc:34:96:87:78:86:6d:b4:
d6:19:f5:7a:dd:59:0d:3f:3d:67:9b:3c:85:60:0a:9f:50:ba:
52:e4:d3:a4:2a:4a:b9:1a:6a:bf:a4:86:de:3d:23:55:13:68:
7f:13:d5:6e:2e:d8:79:fd:a8:2d:76:7f:74:6d:18:e0:94:1d:
ce:75:36:07:75:e1:0d:11:c5:ef:64:e4:f7:40:79:eb:72:6e:
e6:8c:2b:26:99:a2:93:52:b1:7b:2a:e4:eb:4f:a5:80:fe:8a:
24:ab:9b:86:63:32:7a:5e:f8:7b:2a:98:8b:17:0f:e8:a5:b8:
8d:00:cf:24:b9:12:1d:2f:b4:45:c7:aa:8b:b9:77:b1:64:fd:
e7:7d:25:e9:b0:45:c2:29:a0:c2:b5:77:11:65:13:e7:d1:ab:
19:64:4a:a8:80:2e:6c:83:12:9f:91:f6:cf:b0:bb:c7:a2:43:
5e:6a:45:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 01:41:09 2026 by rpki-client