Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/etjWizBtHZpTTuiOmD4quZ41Kck.roa
File: etjWizBtHZpTTuiOmD4quZ41Kck.roa (raw, json)
Hash identifier: JRsfEMnKlM8Ioil1qJo7+cG2FXvsJfuaml1woMy0K5w=
Subject key identifier: 7A:D8:D6:8B:30:6D:1D:9A:53:4E:E8:8E:98:3E:2A:B9:9E:35:29:C9
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019D2C21605CB85BF20232E92B1D08B88B3C
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/etjWizBtHZpTTuiOmD4quZ41Kck.roa
Signing time: Thu 26 Mar 2026 21:51:18 +0000
ROA not before: Thu 26 Mar 2026 21:51:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 146.19.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:21:60:5c:b8:5b:f2:02:32:e9:2b:1d:08:b8:8b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 26 21:51:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ad8d68b306d1d9a534ee88e983e2ab99e3529c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ac:85:c5:6b:bc:e8:74:fc:8e:91:e6:92:f4:
38:09:81:09:84:2c:40:50:20:67:75:00:de:4d:7d:
8b:fc:9a:d0:a5:cf:0f:9f:83:ef:53:5b:68:89:5d:
0d:d0:98:25:e3:82:50:6e:60:23:77:57:71:28:06:
34:70:81:dc:fd:f5:97:13:4b:51:de:9b:3f:f9:f7:
fa:d1:9b:51:28:23:74:c0:89:52:ee:b9:d8:48:96:
0e:c8:a6:33:10:e9:72:94:87:e7:33:cf:ed:4e:ee:
c8:67:d0:65:97:f6:bd:f8:96:56:f2:fc:ec:2b:c2:
a2:95:5e:39:80:17:82:62:35:86:0a:92:69:45:ed:
19:58:f2:4a:b2:6f:61:70:40:0b:3e:24:49:fc:0e:
d1:82:03:6a:da:19:a6:a2:fa:08:2a:3c:d7:52:b6:
38:44:71:f8:09:48:d0:49:3d:5d:0d:8d:fb:fa:15:
13:4d:0c:7c:15:e6:2d:1c:e9:7d:e3:09:fc:8e:0d:
1d:a0:ed:e3:15:2b:8d:40:f7:28:71:be:b9:95:ca:
5a:cd:8b:85:53:e5:5a:a5:67:f9:c2:e3:7c:76:03:
70:6e:d4:3c:5c:63:36:1a:48:26:91:23:25:44:c2:
c9:e8:98:5c:0a:02:84:17:a7:4b:70:f7:74:4a:c1:
30:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D8:D6:8B:30:6D:1D:9A:53:4E:E8:8E:98:3E:2A:B9:9E:35:29:C9
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/etjWizBtHZpTTuiOmD4quZ41Kck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.108.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e1:77:01:06:b5:53:f1:91:4f:11:1c:f4:29:79:cd:b5:b0:
0f:0f:51:90:53:43:e7:f4:9a:db:45:47:56:c2:6b:77:02:7b:
c7:2d:24:30:fb:10:88:38:fb:9c:47:7e:44:ce:41:70:9d:62:
88:4a:28:be:bf:62:fa:06:60:d0:54:57:37:7a:eb:51:ee:e2:
6a:ed:4f:a6:6f:29:c2:3e:7e:d1:d2:1d:e3:82:7c:08:d1:ff:
05:9e:3d:49:d1:bb:86:f8:db:e1:d9:e8:23:a3:26:ba:99:9a:
33:7e:d2:aa:3a:38:56:e0:85:bd:32:79:11:3d:7f:54:c7:f7:
12:05:9a:19:55:bc:04:81:ec:15:cf:62:24:5a:42:8a:1d:4d:
1a:75:03:31:ab:f8:d1:3a:99:39:c9:80:3f:80:5d:97:80:5b:
82:4a:70:0f:f9:82:e2:4f:ff:1f:ab:b9:15:ba:76:39:99:89:
cc:8d:28:27:3e:37:88:59:9c:c9:cb:98:53:d5:09:b9:99:18:
36:df:d5:ea:4e:2a:18:01:3b:c9:f8:0c:f0:ff:f8:d0:16:6f:
29:75:e2:97:c1:92:0d:5e:46:c6:fa:04:d7:7d:10:1c:36:ed:
c4:13:87:15:27:65:d5:a8:0e:0b:1b:ee:91:08:79:76:d1:48:
1a:4b:98:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 08:48:35 2026 by rpki-client