Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/eIa1gVxQflCytUc_b2u9ZmQw5BQ.roa
File: eIa1gVxQflCytUc_b2u9ZmQw5BQ.roa (raw, json)
Hash identifier: QIIl/Ix6/I+Hp6SgsiucP9T56Bo/dGiQYU80fapUOyM=
Subject key identifier: 78:86:B5:81:5C:50:7E:50:B2:B5:47:3F:6F:6B:BD:66:64:30:E4:14
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019DCCF86F738F87FD7C3ED9D6955E315877
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/eIa1gVxQflCytUc_b2u9ZmQw5BQ.roa
Signing time: Mon 27 Apr 2026 03:25:26 +0000
ROA not before: Mon 27 Apr 2026 03:25:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209178
IP address blocks: 103.100.168.0/24 maxlen: 24
185.233.19.0/24 maxlen: 24
185.235.165.0/24 maxlen: 24
2a06:da40::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:f8:6f:73:8f:87:fd:7c:3e:d9:d6:95:5e:31:58:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Apr 27 03:25:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7886b5815c507e50b2b5473f6f6bbd666430e414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:8d:5f:23:02:26:76:8f:a3:6c:6c:82:54:
04:6d:c4:0e:08:d0:2a:46:61:6b:a8:9d:e7:35:75:
ab:70:c1:1f:e4:38:30:61:af:e0:78:13:91:82:04:
e3:8e:39:81:b6:6f:2c:e7:bd:e3:0b:4a:fa:9b:31:
dc:6a:17:86:c5:d2:de:fe:0d:76:8e:75:54:58:3b:
e3:1f:ab:09:5f:78:07:a4:4c:a3:e9:6c:20:5c:e4:
66:71:9d:b1:d4:d6:0c:d6:bf:e0:b0:b0:14:37:41:
bb:8f:69:67:9a:06:74:bb:99:1d:6e:20:15:e4:5f:
4a:2b:0d:3c:6a:e9:6f:c1:60:79:34:e9:af:dc:af:
88:07:47:b7:75:e6:40:77:a8:32:bb:cc:ca:1f:98:
6d:82:13:75:29:5a:83:49:ba:34:da:f8:33:78:c7:
f5:55:ee:b0:95:71:63:16:73:de:31:07:2b:1f:f8:
7e:4e:3b:06:3f:43:aa:95:ad:cf:16:a7:ab:c6:68:
12:f8:a1:de:29:3c:9f:3b:79:23:a8:65:18:69:28:
2d:c2:b4:7e:bd:eb:cf:8e:5a:27:0a:26:15:27:bf:
4b:4e:5f:76:41:0b:69:4e:ff:d1:27:50:76:58:7d:
76:4e:78:aa:15:56:83:4a:6b:5c:99:a4:4c:ca:47:
e8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:86:B5:81:5C:50:7E:50:B2:B5:47:3F:6F:6B:BD:66:64:30:E4:14
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/eIa1gVxQflCytUc_b2u9ZmQw5BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.100.168.0/24
185.233.19.0/24
185.235.165.0/24
IPv6:
2a06:da40::/40
Signature Algorithm: sha256WithRSAEncryption
8a:c0:e2:92:a9:2f:e2:56:06:bb:38:fb:99:f3:2e:c8:22:4f:
d5:0d:4b:f9:5b:88:c3:2a:6a:c5:4f:ca:b9:ca:c6:1d:a2:27:
47:36:18:da:ff:e9:fb:34:b9:bb:40:c9:34:1c:6c:d3:29:49:
0f:7a:52:40:a5:29:e2:1a:e6:0e:55:9e:33:1c:07:aa:b5:c9:
66:fe:ec:c4:7e:53:7e:f9:40:39:86:29:8b:01:40:1c:7b:50:
2b:67:b8:0d:6c:52:41:01:53:46:b1:49:a5:1c:3e:75:9f:ae:
a3:79:13:bb:63:b4:23:38:26:cf:d6:4d:1a:f5:95:0b:47:34:
4d:b2:78:aa:22:4d:2d:b9:e1:65:d2:b0:e9:8c:81:b2:81:47:
b9:46:3b:1c:e4:15:d6:d0:85:a3:08:92:75:cc:b6:3d:3f:ee:
99:0c:8e:28:77:d8:17:a8:7a:67:14:52:49:98:1f:df:1a:e5:
b4:24:e2:c5:5a:29:e0:7a:f2:3e:d4:88:65:c1:18:7e:ad:03:
3f:17:f7:95:59:f7:0b:f8:bc:c9:e0:a4:6b:06:a0:80:b6:5c:
d1:b3:87:4f:f0:c9:55:5f:48:fc:71:3f:43:fa:f9:19:2e:db:
d0:c9:81:15:02:c6:a4:ad:b9:a1:e1:5d:bb:51:87:c1:19:68:
b3:6f:a7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 22:21:48 2026 by rpki-client