Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/EsdKWeeH89lPs-xb14vozlffi5Q.roa
File: EsdKWeeH89lPs-xb14vozlffi5Q.roa (raw, json)
Hash identifier: aZzRUmI/E+w8cPe3zKb8Q0CXdJCPscIwEYbU8GG9mGA=
Subject key identifier: 12:C7:4A:59:E7:87:F3:D9:4F:B3:EC:5B:D7:8B:E8:CE:57:DF:8B:94
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 01A0E6C522C8EA8E6484FAAC8C6EED874B6D
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/EsdKWeeH89lPs-xb14vozlffi5Q.roa
Signing time: Mon 28 Sep 2026 06:47:54 +0000
ROA not before: Mon 28 Sep 2026 06:47:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.217.223.0/24 maxlen: 24
103.69.226.0/24 maxlen: 24
103.69.227.0/24 maxlen: 24
185.191.20.0/24 maxlen: 24
185.191.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:c5:22:c8:ea:8e:64:84:fa:ac:8c:6e:ed:87:4b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Sep 28 06:47:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12c74a59e787f3d94fb3ec5bd78be8ce57df8b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1b:f7:c3:be:e2:fc:d3:f6:49:31:86:42:db:
e3:7a:94:bb:d2:cc:89:68:da:b7:cb:b0:62:b2:44:
f4:f2:53:0b:6d:89:3f:5a:4b:63:ec:a9:b1:6e:0e:
dd:e1:22:2f:4b:96:d9:ba:e3:45:c2:e6:d5:0d:34:
91:a8:2a:d4:41:17:12:fa:3f:f6:8c:78:91:58:33:
37:d7:06:cc:fd:35:fb:d6:3c:3b:73:1d:d0:40:f8:
ed:34:3e:56:98:cd:2e:fa:c1:43:e1:fc:9c:4f:c3:
76:89:75:fa:23:49:9e:12:51:6b:21:40:4f:2a:85:
67:fc:c9:0e:8a:28:f4:2c:d3:fe:36:64:2f:78:b5:
4f:b6:d0:72:17:9c:13:2f:e5:16:45:33:c2:92:e8:
29:9d:9a:ed:b2:b3:28:46:44:87:1c:13:de:e9:a2:
55:ed:f4:18:46:7e:c0:3c:3d:42:08:9a:c3:ca:f5:
2a:5d:a0:c6:01:01:f9:5d:d0:ef:dd:a0:c8:3d:ed:
a1:fe:07:54:cb:33:33:f2:dd:35:21:07:a1:e3:07:
da:21:86:d8:6f:29:f9:c4:df:15:8b:96:66:b6:a5:
64:1c:62:09:f6:be:34:6b:f6:7a:a2:e2:9a:8f:20:
19:1f:a9:64:f2:ed:fd:09:41:36:93:3b:d7:5d:64:
3e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C7:4A:59:E7:87:F3:D9:4F:B3:EC:5B:D7:8B:E8:CE:57:DF:8B:94
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/EsdKWeeH89lPs-xb14vozlffi5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.223.0/24
103.69.226.0/23
185.191.20.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:c3:e4:fd:dc:ae:4e:39:1a:f5:b1:a3:4b:fe:e6:1c:f1:0c:
79:f0:20:9d:2e:e1:c5:6b:65:68:0f:96:38:b3:1b:77:ed:8b:
e0:a9:5b:f9:27:4f:4a:43:7e:80:c7:84:bc:bf:52:1c:78:d9:
d6:fe:fb:14:c8:cf:64:25:cb:bf:2c:7f:8d:89:02:b4:99:ef:
41:d4:d9:79:a6:9f:93:6f:9e:05:39:f4:26:67:ce:37:78:a8:
2c:7c:90:ba:12:71:e3:12:36:f6:67:4f:e9:04:a9:20:52:95:
f2:ab:98:bc:c9:f0:de:30:cc:3c:ec:45:07:8d:3f:23:b0:c0:
f4:88:8b:fa:6e:33:eb:f3:f4:19:29:cd:85:af:54:ae:4f:cc:
c0:a6:b1:8c:53:43:e6:4b:16:6f:9d:d9:d3:fb:33:5f:b5:a5:
4f:dc:2e:cd:cd:e7:c9:ae:9a:67:67:83:1a:d5:bd:4f:ec:fe:
6e:6e:a3:af:49:24:43:cc:7b:48:48:d4:72:19:4c:2a:7f:4a:
35:01:aa:2d:e8:cb:f1:74:6e:16:41:19:d7:aa:20:e0:b5:ca:
48:fe:f9:e3:ae:7a:6f:d6:7d:04:6e:4d:f6:5e:db:9e:a1:d2:
cf:e2:9f:8d:91:fd:18:f4:77:59:c1:aa:e8:5c:58:5c:2f:17:
71:33:19:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 19:41:59 2026 by rpki-client