Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/eVVWCsR3SsLT4BetTTjquKU-q1M.roa
File: eVVWCsR3SsLT4BetTTjquKU-q1M.roa (raw, json)
Hash identifier: aeSr2d45S0h29TxwaX3O5Y/8gj9nHZ8GIzMdMwCrt1Q=
Subject key identifier: 79:55:56:0A:C4:77:4A:C2:D3:E0:17:AD:4D:38:EA:B8:A5:3E:AB:53
Certificate issuer: /CN=42e0d377ac225dde2de910cc7b816850f0b67132
Certificate serial: 019EDC6B1E172C6BB765EEFE1209BCC294A9
Authority key identifier: 42:E0:D3:77:AC:22:5D:DE:2D:E9:10:CC:7B:81:68:50:F0:B6:71:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuDTd6wiXd4t6RDMe4FoUPC2cTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/eVVWCsR3SsLT4BetTTjquKU-q1M.roa
Signing time: Thu 18 Jun 2026 20:27:48 +0000
ROA not before: Thu 18 Jun 2026 20:27:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3503
IP address blocks: 83.143.160.0/22 maxlen: 22
83.143.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuDTd6wiXd4t6RDMe4FoUPC2cTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dc:6b:1e:17:2c:6b:b7:65:ee:fe:12:09:bc:c2:94:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e0d377ac225dde2de910cc7b816850f0b67132
Validity
Not Before: Jun 18 20:27:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7955560ac4774ac2d3e017ad4d38eab8a53eab53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3b:17:d1:94:98:d4:44:45:39:a9:64:90:43:
7e:c6:16:37:bd:5c:02:76:5c:fa:79:3a:bf:14:2f:
e9:ba:33:4e:86:f7:8a:e7:0b:70:41:bc:a7:e4:8f:
91:c9:26:42:ae:6c:75:18:b8:e3:1e:b9:00:bc:04:
ca:cf:46:88:e2:25:36:67:eb:21:f6:1c:48:55:c0:
ac:77:6f:f4:99:1e:98:c4:51:b5:55:90:11:9b:5c:
44:66:f3:0a:13:e0:86:e7:98:72:f0:13:21:c1:07:
94:3d:f2:2f:31:6c:7c:53:2a:10:5e:29:ae:1c:d8:
42:c1:3c:3e:5c:f3:1b:f7:41:15:ac:2e:43:08:42:
c1:25:34:eb:a8:f7:e6:cd:fd:8b:1d:a0:44:52:89:
d4:7e:0f:6a:eb:44:65:f7:18:ab:13:ac:7e:1d:1e:
56:ce:3b:96:15:21:01:0e:b9:7e:b3:37:da:e5:ed:
26:29:24:27:ee:70:30:d3:8d:ec:b0:ff:2e:cb:e1:
72:f8:3f:fd:48:74:f7:33:5e:6a:dd:83:74:8e:ad:
30:bf:6f:72:0f:94:d8:95:aa:97:dc:13:b3:36:9c:
6d:39:5a:27:3f:24:79:b6:e1:1a:73:33:a0:06:27:
9e:3a:36:bb:35:a5:b1:98:62:3e:3b:7c:d1:b3:41:
d7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:55:56:0A:C4:77:4A:C2:D3:E0:17:AD:4D:38:EA:B8:A5:3E:AB:53
X509v3 Authority Key Identifier:
keyid:42:E0:D3:77:AC:22:5D:DE:2D:E9:10:CC:7B:81:68:50:F0:B6:71:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuDTd6wiXd4t6RDMe4FoUPC2cTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/eVVWCsR3SsLT4BetTTjquKU-q1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.160.0/21
Signature Algorithm: sha256WithRSAEncryption
80:f8:1d:46:dd:1c:98:30:f3:64:c9:0b:23:15:2f:8e:6c:7a:
34:34:09:a7:db:7c:4a:65:c4:1d:d1:2d:0b:46:59:af:ed:87:
e1:50:f3:07:61:d2:ec:75:35:f8:48:c1:0f:99:45:fd:3f:ad:
2e:ad:29:b0:a8:a6:6f:0e:3b:17:9a:bb:eb:62:72:ae:84:e1:
91:c2:0f:86:75:6f:16:3d:f1:3a:3f:bc:dd:67:20:c3:23:7b:
e2:df:0f:8d:bc:14:37:d9:79:d1:99:7e:21:9f:98:07:40:90:
3c:b5:e2:0b:8b:4c:f3:88:19:27:81:99:18:e2:a2:56:d0:8f:
b9:d5:a1:bb:e0:5f:f9:74:19:67:89:8f:34:4f:20:61:be:aa:
e3:c2:40:9b:7b:47:16:b8:73:0c:b9:d8:b8:84:4b:6c:d3:b4:
f6:83:0e:fa:30:5b:02:17:39:d1:75:b3:a0:82:57:9f:72:6f:
a6:80:79:62:e5:db:d2:78:de:31:b1:d2:95:b9:68:dc:2b:33:
b9:2d:c8:50:51:69:4b:fd:8e:8e:32:b5:4a:9f:ab:03:ce:53:
c6:5c:5c:2f:69:aa:c1:22:25:4d:24:2d:54:76:c7:02:4e:a0:
7c:b2:45:0c:a0:7c:5f:47:4f:60:f3:ad:eb:30:27:1f:41:16:
2a:44:ba:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:51 2026 by rpki-client