Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/eAwe97dVH12OZjKN7EehtB-Yo6M.roa
File: eAwe97dVH12OZjKN7EehtB-Yo6M.roa (raw, json)
Hash identifier: XqaHjR9ul+9RWjUtTfABSrzhyAhQCTFgBCu22kxsy5U=
Subject key identifier: 78:0C:1E:F7:B7:55:1F:5D:8E:66:32:8D:EC:47:A1:B4:1F:98:A3:A3
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A16B3743E041CBA7044C966043DEEA9BF1
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/eAwe97dVH12OZjKN7EehtB-Yo6M.roa
Signing time: Sat 24 Oct 2026 00:02:26 +0000
ROA not before: Sat 24 Oct 2026 00:02:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197646
IP address blocks: 212.189.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:37:43:e0:41:cb:a7:04:4c:96:60:43:de:ea:9b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 24 00:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=780c1ef7b7551f5d8e66328dec47a1b41f98a3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7a:7f:1a:f3:c2:48:14:8c:f9:74:99:8c:00:
24:bc:21:3f:52:00:44:b2:ca:be:25:5a:56:7d:98:
2b:3d:46:6d:1c:af:46:2a:3e:9d:39:34:c6:90:53:
89:b9:44:01:95:5c:fa:87:27:a8:3b:ea:c2:13:23:
2a:35:cb:9d:18:2e:30:da:fe:f1:19:60:2c:91:c6:
80:63:bb:19:b2:93:c8:67:74:e4:36:21:05:09:dd:
37:ae:6b:02:f4:97:72:ff:d3:8c:e1:6e:35:3b:69:
39:fe:c7:72:ba:39:28:89:6e:5d:92:b7:6f:b0:e3:
31:f8:56:40:c8:c3:7d:88:62:ce:52:f8:ef:71:b4:
79:18:fd:8a:89:70:99:43:70:c3:c7:08:f0:f0:bd:
62:4c:c4:ec:30:2c:33:74:6b:e8:45:74:a7:08:e8:
0d:77:f2:b8:e9:15:ea:fc:ed:3e:61:cd:7e:11:00:
f3:87:b2:2d:c3:b2:f3:d0:9b:46:fb:18:6b:22:15:
8a:82:2b:5b:1f:d7:fb:e0:43:21:1f:bf:96:5c:ab:
4a:9a:84:45:fa:f5:85:da:05:77:45:c1:65:84:34:
89:fd:4a:1e:9c:1a:78:d9:30:7a:f6:f3:91:98:64:
f1:72:e2:f9:15:eb:4a:95:ed:4e:08:77:77:ac:8d:
09:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0C:1E:F7:B7:55:1F:5D:8E:66:32:8D:EC:47:A1:B4:1F:98:A3:A3
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/eAwe97dVH12OZjKN7EehtB-Yo6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.64.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:15:39:6f:c8:76:f3:7c:41:38:f9:61:5e:6a:0c:ef:f2:fc:
83:d7:82:59:68:0d:eb:09:7e:a1:7c:fb:58:b9:d7:2a:3a:5b:
af:76:f7:93:63:98:05:a4:f6:5f:0b:45:c4:9c:54:c2:80:b9:
50:0e:e3:49:2a:72:da:e4:73:b7:ef:7f:bd:51:ec:2d:59:f5:
18:c4:af:17:92:f8:29:65:b8:2f:b2:2b:cd:d1:31:12:3d:89:
8e:7f:d0:e2:d1:e1:38:ff:a2:ed:ff:02:51:90:26:20:1a:20:
29:94:50:b1:0c:82:d3:32:06:40:e9:61:91:b0:89:28:57:a9:
20:1a:41:cb:0d:b4:20:55:49:90:ab:1e:3f:50:f9:5d:f7:66:
dd:59:15:ed:c3:4f:80:ef:1d:80:38:eb:3f:2d:b8:2b:12:3c:
5f:5e:52:c7:cc:a6:02:87:b0:92:d0:71:55:d5:11:2c:0e:09:
3d:c5:c7:50:4b:63:2e:fb:36:76:3b:61:85:3e:d4:65:2c:a8:
1b:8b:a1:8f:76:40:dc:a5:b4:6d:fc:07:16:83:24:15:0f:b7:
9b:72:43:11:ed:97:8c:2d:23:91:72:0c:e7:ff:11:a5:ff:e0:
32:a9:3b:e5:a0:04:11:8a:61:7b:9c:e4:3a:bf:bf:0a:85:6d:
ae:3a:e4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:34 2026 by rpki-client