Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/e8JFd8VPzn6eSCeb_fE39Tsa3YM.roa
File: e8JFd8VPzn6eSCeb_fE39Tsa3YM.roa (raw, json)
Hash identifier: sR08HW7miURourQ62qZUvMKx/vA1RBx4agOQPdm7Fls=
Subject key identifier: 7B:C2:45:77:C5:4F:CE:7E:9E:48:27:9B:FD:F1:37:F5:3B:1A:DD:83
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A0E84ED259CA6340E9645D251B1F755EE6
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/e8JFd8VPzn6eSCeb_fE39Tsa3YM.roa
Signing time: Mon 28 Sep 2026 13:57:54 +0000
ROA not before: Mon 28 Sep 2026 13:57:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 45.152.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:4e:d2:59:ca:63:40:e9:64:5d:25:1b:1f:75:5e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Sep 28 13:57:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bc24577c54fce7e9e48279bfdf137f53b1add83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d2:99:22:88:57:2b:16:d0:7d:f0:a8:b2:09:
1e:94:a0:68:b9:4b:4e:25:59:5e:a8:fe:e6:fa:e0:
07:d4:b2:f1:e6:4f:d8:02:dd:5c:40:79:0f:69:94:
5f:55:0a:73:0b:28:7a:0c:f9:14:87:c5:c3:d3:d1:
b5:da:6d:14:7a:10:8c:2e:49:42:57:86:9f:be:28:
7c:00:24:23:61:88:56:9d:e6:bb:b5:dd:07:13:18:
73:e9:c8:83:4e:57:9c:ed:ca:47:62:78:06:d0:08:
a3:fe:d6:ed:1d:94:7e:cd:d9:0c:f1:1e:df:1c:83:
99:03:b7:a3:f0:16:13:ce:aa:96:ee:45:fc:da:68:
71:9e:63:74:b3:e4:8c:da:a5:6c:6e:3f:3d:08:b2:
3a:46:2b:f7:aa:bc:9b:b5:21:d6:87:6d:61:04:75:
63:c1:fc:78:1f:09:c7:d9:54:67:da:ef:79:02:e8:
25:fd:4f:cc:99:6c:b4:2f:77:45:71:68:a4:bd:27:
39:7a:86:df:41:21:10:07:da:d2:7e:53:80:59:d9:
df:b0:d1:9d:8e:93:bc:06:8f:6b:8a:6b:27:04:ae:
b8:9f:f8:84:3d:b6:1e:d4:d4:c1:0e:75:f5:d0:35:
7f:06:0e:e8:96:74:45:99:04:24:71:80:49:fb:74:
69:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C2:45:77:C5:4F:CE:7E:9E:48:27:9B:FD:F1:37:F5:3B:1A:DD:83
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/e8JFd8VPzn6eSCeb_fE39Tsa3YM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.139.0/24
Signature Algorithm: sha256WithRSAEncryption
94:86:e8:52:73:e1:1e:c1:3e:cf:4b:49:88:99:a0:e1:4b:c5:
ba:07:fa:f0:a3:bc:60:1b:b7:51:db:7e:fb:d6:73:be:90:46:
9e:e8:66:2d:aa:5a:ec:e3:84:ef:22:ef:24:22:d9:09:37:b3:
ef:ae:bb:e2:cb:a7:2a:8f:2e:ac:bc:48:d5:b9:38:9b:55:e2:
61:08:5c:c4:20:24:c4:96:5f:77:84:22:d5:95:b4:84:c8:35:
5c:ac:d0:56:0b:a9:38:fe:5f:05:2e:62:97:26:ef:9c:6e:bc:
39:97:b1:66:28:3c:07:ac:8a:d3:2a:66:eb:83:41:cd:a1:75:
5a:ac:96:22:6c:9c:18:9f:84:7c:90:b4:da:4f:c3:8c:04:fc:
80:1f:ba:3e:de:bd:57:3d:85:54:2d:66:db:35:c7:1c:02:df:
a5:db:43:3d:0d:f2:69:2a:06:b3:3f:7e:89:1e:87:5a:b9:ff:
ca:8a:c1:be:24:01:78:94:3b:87:53:b3:be:59:04:04:6f:7a:
a5:a3:2c:76:14:28:31:9c:4a:f7:07:6a:ca:0d:a0:91:cf:1c:
f1:08:0c:6d:83:d4:65:fc:c7:5d:b1:6e:d5:56:67:b1:4b:cc:
f8:a1:34:94:dd:ab:d7:13:19:fd:65:2c:3a:11:20:13:31:79:
c4:32:27:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:06:29 2026 by rpki-client