Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/69GOpdzwlIydOctwPF6_V449w8Q.roa
File: 69GOpdzwlIydOctwPF6_V449w8Q.roa (raw, json)
Hash identifier: oepL/u5Uo8sKbDIefmYypO+csLtLFrgJjxhbnTvWVCs=
Subject key identifier: EB:D1:8E:A5:DC:F0:94:8C:9D:39:CB:70:3C:5E:BF:57:8E:3D:C3:C4
Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial: 019FCBBE51D8F01195479E3D56795E97C90F
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/69GOpdzwlIydOctwPF6_V449w8Q.roa
Signing time: Tue 04 Aug 2026 07:47:55 +0000
ROA not before: Tue 04 Aug 2026 07:47:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205297
IP address blocks: 178.236.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:be:51:d8:f0:11:95:47:9e:3d:56:79:5e:97:c9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Validity
Not Before: Aug 4 07:47:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebd18ea5dcf0948c9d39cb703c5ebf578e3dc3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:46:c4:57:b7:13:b2:3e:70:cd:a6:26:2c:
ae:67:86:be:ef:bd:fe:02:af:f7:20:d1:7d:16:43:
5a:2d:73:92:10:4d:84:fc:24:29:73:29:90:96:d8:
72:98:50:15:0d:cc:4c:4d:cd:06:da:b3:14:f7:f2:
2b:0d:6e:11:ed:36:0c:9b:86:5f:9f:45:fa:93:13:
22:62:ab:3c:7f:e9:07:40:0e:e9:81:4c:96:e3:09:
94:49:3c:79:80:f6:80:c3:55:63:28:9c:17:83:2a:
94:fc:a7:68:17:05:0e:78:19:f4:c0:a3:9c:01:d1:
72:4e:c2:59:97:d9:36:0d:a0:f7:66:d0:15:fd:1e:
47:26:de:bd:9e:f3:10:4d:6a:87:d6:64:29:64:55:
f7:6c:b3:33:e4:e0:22:cf:d5:ba:ec:fc:99:53:4b:
af:24:fd:a2:89:85:2e:14:ff:b3:f7:3d:1c:b8:ae:
31:88:12:a2:fa:b3:3c:13:3a:e7:6d:e4:fe:68:e6:
19:c6:dd:e4:16:06:3a:a6:69:a5:72:9a:61:c3:d5:
70:17:4a:14:c7:db:6f:1f:8b:09:a8:63:85:14:ce:
89:68:69:eb:a1:c8:10:cb:3a:db:b3:c2:6c:8c:4b:
ab:86:0a:7e:de:f0:2e:ba:aa:7d:4c:8d:5b:08:72:
e0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D1:8E:A5:DC:F0:94:8C:9D:39:CB:70:3C:5E:BF:57:8E:3D:C3:C4
X509v3 Authority Key Identifier:
keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/69GOpdzwlIydOctwPF6_V449w8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.138.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:1a:39:30:ac:2a:64:8a:7c:66:b5:0a:a8:d2:29:8d:63:e5:
9c:ca:6d:b5:3f:d8:de:e7:48:f7:0b:56:bd:3b:26:f8:df:ef:
3f:17:e2:6f:cf:10:6e:45:ba:e1:10:f3:7a:22:59:ce:b7:ea:
77:1c:f8:06:64:ac:d8:78:42:7f:c9:50:64:06:a1:bd:46:90:
a1:09:64:80:6d:48:b8:1f:e1:bc:35:03:85:1a:6b:2b:98:91:
59:4e:7b:72:af:cc:99:c2:f1:35:d0:35:77:01:27:0c:23:06:
84:80:13:69:c3:0e:48:e3:5a:22:a4:a3:0e:86:0e:ad:71:26:
ef:ac:11:48:af:26:fc:f6:b4:44:b7:32:7e:ad:09:4d:3d:be:
26:d6:19:e2:2d:8a:bc:06:7d:7d:f8:53:f8:69:32:3a:ff:2f:
0d:ef:82:90:2d:8e:10:9e:4c:88:cf:1d:af:04:b2:dc:49:f6:
2d:62:fd:9c:42:19:48:cd:0a:ed:c8:c6:73:b6:cb:04:87:b2:
08:82:55:24:ef:08:64:e2:8b:2a:c8:8b:e6:04:b5:a8:2d:6b:
98:fb:18:6e:c5:d7:64:c4:f1:e9:72:e1:f4:25:68:45:02:d1:
a8:0d:2f:34:d9:40:19:d4:51:b0:91:63:24:0a:b6:88:2f:3b:
4a:a2:d9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:44:17 2026 by rpki-client