Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/eLNvcIhcifMiuZuVr-32k8Ix3FQ.roa
File: eLNvcIhcifMiuZuVr-32k8Ix3FQ.roa (raw, json)
Hash identifier: 89+ilmGcJ6hj7xwFlojvHqwE8OenZvCIJ6FtZfkz1MY=
Subject key identifier: 78:B3:6F:70:88:5C:89:F3:22:B9:9B:95:AF:ED:F6:93:C2:31:DC:54
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 01A1520DBD92FADBDCBFD2C19E5E889D6F5D
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/eLNvcIhcifMiuZuVr-32k8Ix3FQ.roa
Signing time: Mon 19 Oct 2026 02:46:34 +0000
ROA not before: Mon 19 Oct 2026 02:46:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 193.108.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:0d:bd:92:fa:db:dc:bf:d2:c1:9e:5e:88:9d:6f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Oct 19 02:46:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78b36f70885c89f322b99b95afedf693c231dc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:31:72:78:50:a1:8b:b7:71:b1:5c:df:a4:
b3:35:c4:5f:b1:bb:20:11:8c:28:b4:01:0d:a1:a5:
8e:43:f0:93:96:50:5d:b0:cf:fb:79:29:66:d5:45:
89:bb:3f:fa:af:d9:c0:50:ae:38:99:de:a4:44:09:
b8:ee:16:1d:0d:a9:08:a4:14:6b:c0:cd:6e:28:62:
08:3b:0f:80:fe:20:80:4c:5e:3e:b8:a0:03:e0:0c:
b1:7b:5f:c0:ed:1f:19:9b:9a:9e:d1:f5:85:9b:32:
00:0c:cf:3f:bc:d7:07:13:4e:70:a7:7f:6d:20:a2:
dd:ac:f5:d8:b7:1b:a5:a4:85:0d:f0:68:51:56:00:
cc:ce:94:a1:55:19:c6:df:05:4b:25:e2:ac:6c:6d:
8e:9f:87:f4:68:e3:41:43:34:c4:a0:d8:3b:7d:77:
f3:8c:6c:3f:bb:b1:30:94:4e:39:3d:44:fe:0d:13:
83:48:8c:64:de:cc:7f:17:19:d8:97:a8:18:2c:3e:
44:bb:99:37:4f:cb:b5:52:d3:40:7c:d5:28:b2:2e:
e2:e4:db:65:8f:a9:64:6d:61:a2:b1:b2:af:8e:6f:
bc:a6:10:09:15:5c:a7:17:f6:04:d5:21:c5:f7:34:
62:71:04:e9:fe:c5:7f:cb:50:bd:1c:61:fa:6a:96:
54:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B3:6F:70:88:5C:89:F3:22:B9:9B:95:AF:ED:F6:93:C2:31:DC:54
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/eLNvcIhcifMiuZuVr-32k8Ix3FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.105.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c1:9a:14:d3:2c:9e:65:71:e7:89:d7:10:6e:24:c8:3f:6f:
6b:0a:52:51:0c:b3:3a:28:42:ef:3b:03:6b:b5:cf:00:ab:c8:
63:27:65:04:e9:81:b3:16:15:db:a5:84:70:53:67:0e:12:5c:
b6:64:cc:d0:89:13:c7:d2:bb:e9:5e:b7:04:1b:a2:03:23:0a:
e2:05:9b:8f:ba:32:55:49:9a:88:87:e7:a5:fa:13:4e:f0:b3:
ba:bc:f0:79:41:ab:2d:68:86:46:45:cc:de:40:d9:39:b0:a2:
41:af:6c:85:29:3a:0e:9f:7d:fd:43:cd:42:c1:34:65:2c:35:
47:15:6b:e4:ec:60:20:64:94:50:64:55:aa:9a:2f:f3:26:38:
f5:30:ff:d2:7c:a2:e9:c0:24:76:4c:f5:4c:e9:5b:28:d5:16:
6e:fd:d3:13:05:f9:8e:e2:4e:6f:e3:f6:f6:cf:8f:76:c1:80:
7c:30:2f:cc:11:f0:a7:95:9a:ab:18:b7:11:7e:46:13:19:32:
a2:95:d0:54:ce:66:82:af:49:aa:bd:61:33:83:a3:7e:07:da:
a8:2e:54:84:8d:26:5d:44:81:44:b3:f2:43:cf:54:ef:a4:f7:
0a:6e:28:d9:76:d1:1b:50:b3:92:c8:16:57:16:25:ab:7d:2d:
49:be:18:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:35:54 2026 by rpki-client