Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/eP1DylZ8xsjMvq4oqIDid-IBCjs.roa
File: eP1DylZ8xsjMvq4oqIDid-IBCjs.roa (raw, json)
Hash identifier: 9GEJJMLHxi6eqk7vPZLxDkt59Z5da9XWsMmbi1nm2rw=
Subject key identifier: 78:FD:43:CA:56:7C:C6:C8:CC:BE:AE:28:A8:80:E2:77:E2:01:0A:3B
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019ECB5CC13AB5EDB45238B32CFCC7D548A3
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/eP1DylZ8xsjMvq4oqIDid-IBCjs.roa
Signing time: Mon 15 Jun 2026 12:58:34 +0000
ROA not before: Mon 15 Jun 2026 12:58:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153508
IP address blocks: 195.21.155.0/24 maxlen: 24
212.222.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 14:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:5c:c1:3a:b5:ed:b4:52:38:b3:2c:fc:c7:d5:48:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 15 12:58:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78fd43ca567cc6c8ccbeae28a880e277e2010a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:49:dc:6b:41:c0:d1:12:5f:66:d1:15:a1:4a:
58:5f:f8:6b:67:b5:09:a1:7a:eb:77:57:01:1b:13:
10:63:aa:24:16:6b:88:fe:7f:56:c5:17:1b:86:fd:
08:f6:64:b8:e4:fc:81:cb:23:bb:12:f3:3f:b5:d9:
c8:3a:00:0a:4b:20:61:05:3d:84:e6:53:18:23:4d:
16:24:85:97:52:85:8a:1f:a6:05:b4:87:5c:77:59:
54:3e:5f:a1:59:f8:43:a3:07:9d:71:d0:ed:86:95:
fc:e8:dd:31:9b:f6:a5:14:6d:7f:e1:57:65:28:a9:
dc:ec:cb:c9:48:b5:2c:27:74:e4:be:f0:72:cb:d3:
e8:46:bc:17:38:f4:1c:2d:1e:70:0f:02:7e:6d:fb:
ba:59:e9:fc:b0:61:cd:c7:16:1a:4c:45:cb:62:b5:
4e:34:5a:27:e9:16:70:76:0a:47:c3:19:95:a6:b2:
1a:69:bb:da:b1:e0:80:69:12:e7:a8:b9:5f:f6:c6:
88:36:e0:90:0f:1c:30:83:8d:42:4c:62:eb:7d:ca:
20:66:9d:3a:5a:09:de:d3:3a:3a:b2:8b:4f:3b:60:
5b:b4:28:35:1a:c8:43:04:33:10:b8:4d:aa:45:42:
3d:3a:28:f0:6b:d3:98:b8:09:3a:13:60:01:d6:14:
dd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FD:43:CA:56:7C:C6:C8:CC:BE:AE:28:A8:80:E2:77:E2:01:0A:3B
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/eP1DylZ8xsjMvq4oqIDid-IBCjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.21.155.0/24
212.222.112.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:f8:40:7a:8e:5b:5c:63:e5:a7:60:e0:d5:64:1a:8f:e0:8b:
1c:52:ea:e3:09:65:5b:f5:47:07:1b:19:06:28:bd:9c:dd:72:
74:12:62:da:51:5d:45:1d:1b:73:0d:8b:b8:ec:f6:ef:79:8f:
ca:eb:cc:eb:e2:c1:65:ab:99:fe:d6:ad:0b:19:67:e0:88:8d:
17:8d:e0:e0:65:6b:42:1f:bf:e9:fe:ad:13:8f:34:37:90:81:
5f:9c:32:4a:be:4a:56:cd:19:2a:39:ba:e8:17:5e:74:39:fb:
a6:dd:aa:31:89:5e:2e:91:a0:85:b0:80:bd:7c:5f:cf:e6:c4:
3d:2f:9e:17:1c:14:af:16:07:ec:36:67:e3:1c:be:77:7d:b4:
d9:0d:ce:ae:a1:7d:42:bc:80:3f:dc:0b:90:8b:41:46:fc:e9:
6a:ef:7b:55:25:83:be:46:b8:30:9c:56:22:a0:5c:d3:4a:52:
e8:17:4d:5c:24:30:5a:69:da:5f:a4:bc:b1:8b:6c:0c:76:66:
b5:67:44:3b:98:b9:50:44:4e:ec:35:22:b6:d0:6e:cd:70:ab:
e2:1a:8c:80:73:ab:e2:7c:39:b1:9c:9a:25:64:2b:9e:40:75:
32:23:8c:67:2f:4e:b6:b1:83:74:75:d2:ab:6e:7e:4d:9f:24:
ec:cc:96:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 22:31:15 2026 by rpki-client