Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/ESPHPr7LBdioiAtN7vAzIbAY8uI.roa
File: ESPHPr7LBdioiAtN7vAzIbAY8uI.roa (raw, json)
Hash identifier: w6HAvIWt/kQOFfQE6ClUTC58ao3Rat6v87kD8koKUa0=
Subject key identifier: 11:23:C7:3E:BE:CB:05:D8:A8:88:0B:4D:EE:F0:33:21:B0:18:F2:E2
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 019EE6255AD37A667AAD2219918777A7B33D
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/ESPHPr7LBdioiAtN7vAzIbAY8uI.roa
Signing time: Sat 20 Jun 2026 17:47:48 +0000
ROA not before: Sat 20 Jun 2026 17:47:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50132
IP address blocks: 185.184.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e6:25:5a:d3:7a:66:7a:ad:22:19:91:87:77:a7:b3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Jun 20 17:47:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1123c73ebecb05d8a8880b4deef03321b018f2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:59:48:de:27:b1:ab:b0:ea:75:85:db:5e:
03:53:e6:2a:22:2f:e0:81:74:29:4c:82:51:4c:99:
f3:ad:8c:c0:b6:b7:09:63:07:c6:0d:81:f4:48:08:
34:75:9f:80:65:e8:c4:ba:42:41:58:75:ae:89:95:
17:65:4e:5d:3e:07:ff:a0:3d:59:91:a9:c7:e9:57:
e4:e9:67:bc:4f:d6:be:5d:98:b2:14:cf:18:68:b9:
44:02:7d:bb:01:e0:50:63:fe:62:d1:6f:ea:9b:27:
0d:df:ec:03:bf:08:e9:45:e7:cb:ae:fe:a6:f6:25:
d3:d6:f5:ac:9e:9c:63:b3:3e:eb:05:73:91:8b:dc:
aa:63:55:37:0a:cb:cb:2a:6a:96:1c:67:72:e4:90:
b2:05:96:99:bf:c5:ae:b2:91:14:e7:9a:ff:69:79:
59:03:37:91:2a:da:8d:fc:cf:4e:94:bb:11:97:fc:
c9:d0:74:cf:bb:ee:64:0d:4e:57:a0:33:66:74:a2:
a8:f7:ca:7b:6e:13:53:fc:60:1b:f1:87:b1:03:2d:
0e:eb:a3:b8:57:a7:51:22:d5:c9:fe:cf:76:a1:c2:
83:5f:b1:64:fc:42:35:ae:ed:5c:45:2e:85:b5:4d:
38:f9:7f:2b:99:41:45:47:f6:07:09:08:49:04:b2:
d5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:23:C7:3E:BE:CB:05:D8:A8:88:0B:4D:EE:F0:33:21:B0:18:F2:E2
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/ESPHPr7LBdioiAtN7vAzIbAY8uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.42.0/24
Signature Algorithm: sha256WithRSAEncryption
83:af:b7:67:98:5f:2d:1e:64:dd:5d:b2:68:4a:72:cc:21:b2:
a7:1c:4f:b4:a9:36:b1:f4:54:56:e6:98:65:d6:81:b1:c7:f1:
ff:46:b6:5a:39:71:02:d6:3d:03:15:89:7c:2a:b7:d9:43:db:
62:61:5c:71:24:34:01:fc:37:27:b8:da:a3:b4:35:14:42:48:
ff:25:2e:77:92:55:9b:c6:ed:78:cd:98:d5:2e:24:4d:c5:6d:
6b:5a:91:aa:5d:b5:9d:5f:6e:1f:54:4b:fa:c6:7c:48:ed:8f:
e1:2c:9b:f3:df:f1:76:c4:ea:89:24:2d:05:f0:de:91:73:d4:
13:64:df:9e:b7:f3:e6:71:74:c6:88:d8:57:ba:5c:94:ba:8e:
fc:f5:43:88:d2:b9:25:7b:ee:ea:2b:5c:9d:7f:22:d4:d3:dd:
b8:cf:08:26:af:21:4c:22:16:d3:5e:9e:61:b5:c6:fc:ac:e4:
85:84:83:b9:0c:f4:17:d6:a2:50:81:97:9f:08:9c:21:3d:9e:
cd:d1:2c:70:68:53:27:9e:b8:fa:2b:98:6d:13:66:7e:88:37:
1c:57:f5:74:58:f8:41:4b:89:c5:8c:3e:45:56:a7:ab:04:53:
6d:61:3c:a9:b5:95:2a:2e:50:78:19:3f:ef:ef:fe:fe:ed:f0:
84:a7:1f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:28 2026 by rpki-client