Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/eSvAFbt4I_ny3rlI1qsQVvR095k.roa
File: eSvAFbt4I_ny3rlI1qsQVvR095k.roa (raw, json)
Hash identifier: ASQ/McMElv2jG1XUE+eDIGnRMZkt0bsbVgcxyB63q5k=
Subject key identifier: 79:2B:C0:15:BB:78:23:F9:F2:DE:B9:48:D6:AB:10:56:F4:74:F7:99
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 019F269E6920B7A78C54FF19C1BFF398E80E
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/eSvAFbt4I_ny3rlI1qsQVvR095k.roa
Signing time: Fri 03 Jul 2026 06:15:43 +0000
ROA not before: Fri 03 Jul 2026 06:15:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.148.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:9e:69:20:b7:a7:8c:54:ff:19:c1:bf:f3:98:e8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jul 3 06:15:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=792bc015bb7823f9f2deb948d6ab1056f474f799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:72:11:95:34:8e:62:aa:b8:0b:06:55:8e:
df:6b:11:14:d2:51:aa:e0:08:1b:46:bd:1a:7a:75:
22:e2:16:8f:18:4c:12:6c:b2:11:fb:0f:b9:da:68:
c4:36:a8:50:bc:75:34:27:fe:71:c1:5f:e0:08:43:
b4:e9:b3:d2:bf:db:80:8e:d0:57:d9:f3:1f:fe:c9:
62:20:64:ad:22:fe:26:e6:f5:21:3b:cc:3e:e9:46:
b2:97:56:cb:9b:2e:00:de:30:43:49:30:2d:de:15:
a4:76:9e:5c:ef:1d:d7:bc:77:ee:7a:b3:6e:dc:db:
40:8d:2b:29:f8:b5:43:50:5f:c0:6f:f3:af:27:fa:
a8:ac:bf:a8:b4:75:74:25:3e:b4:e3:33:66:6b:a6:
54:4c:2c:19:7f:96:a8:33:c4:c2:20:98:66:eb:f0:
cd:23:1d:29:c1:10:c7:4f:3f:33:4d:4d:c9:6a:c2:
4d:0a:b2:b3:a7:f5:e9:5d:30:35:05:09:2a:f7:ee:
5a:94:9c:18:a0:68:89:85:fe:a8:b1:f8:a7:fc:b6:
8f:72:85:a7:20:a4:14:78:7b:f1:27:5b:3e:76:88:
0a:24:82:47:44:e8:08:09:06:62:53:02:af:b7:53:
03:cc:53:f9:dc:de:7b:31:82:69:d1:89:9b:d3:cf:
bb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2B:C0:15:BB:78:23:F9:F2:DE:B9:48:D6:AB:10:56:F4:74:F7:99
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/eSvAFbt4I_ny3rlI1qsQVvR095k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.68.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:5f:e6:cd:eb:a9:0b:76:50:11:74:13:5d:bd:0f:02:2f:0f:
52:03:46:dd:c4:b8:38:a2:a3:61:b7:40:d7:a6:e5:cf:22:4c:
ba:ba:e3:97:6a:a3:d0:33:bc:a1:fb:cc:97:4f:af:12:b6:32:
38:c5:2f:21:0b:58:1b:3b:95:7d:78:9f:f5:fc:c1:1f:c9:27:
c3:56:c1:65:02:b5:e5:4f:9b:9e:69:00:00:45:15:b9:f0:6a:
83:91:3f:da:f9:90:ed:a7:7a:09:3c:d3:80:08:3d:e3:79:27:
35:cb:fb:3c:d3:10:1e:07:31:4c:20:18:20:8a:2c:2a:dd:4d:
1e:bc:30:d5:fe:23:82:21:30:05:01:9d:5e:fb:33:31:eb:52:
95:a1:6e:db:b0:ab:75:8d:da:6b:9e:ca:0e:ed:d1:4e:81:30:
22:f3:fc:a9:cb:da:15:85:6f:49:b5:14:43:46:3a:40:44:47:
ee:2f:07:cc:fc:e7:bd:23:51:54:42:b2:21:d7:63:0c:ee:48:
1e:31:b7:fa:87:66:0f:55:ea:22:d6:0c:24:ed:f0:75:ad:5b:
d3:bf:7d:b2:45:f4:7e:fd:6a:24:bb:6a:90:95:2c:56:77:a5:
2c:87:bb:e9:00:5c:45:5b:fb:e1:92:0f:13:5b:e7:07:40:ec:
ff:98:72:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:51 2026 by rpki-client