Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/eCnE-AztecUH0Ii4xKzJKUvwNPI.roa
File: eCnE-AztecUH0Ii4xKzJKUvwNPI.roa (raw, json)
Hash identifier: kbLe39umBoFt3OqV1v6hrqR6Zd5EvOXtfjO+6C3/NUQ=
Subject key identifier: 78:29:C4:F8:0C:ED:79:C5:07:D0:88:B8:C4:AC:C9:29:4B:F0:34:F2
Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial: 01A028E0F9E9127CB4FDE7CAAACB3CFF393F
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/eCnE-AztecUH0Ii4xKzJKUvwNPI.roa
Signing time: Sat 22 Aug 2026 09:50:27 +0000
ROA not before: Sat 22 Aug 2026 09:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58249
IP address blocks: 194.33.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:28:e0:f9:e9:12:7c:b4:fd:e7:ca:aa:cb:3c:ff:39:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Validity
Not Before: Aug 22 09:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7829c4f80ced79c507d088b8c4acc9294bf034f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:33:76:e5:58:97:a6:d3:11:36:44:1a:23:
ab:98:6e:dc:cd:0f:62:79:4d:c7:c1:13:8d:90:1d:
e5:45:9c:20:53:b8:2a:8a:14:c1:bd:b0:c9:c9:12:
3e:49:21:5f:9e:f0:c8:d7:92:2b:f2:24:0d:e0:62:
a6:85:ee:dd:99:34:bc:d1:bc:11:a4:65:5a:a4:a9:
36:c6:57:17:95:87:8f:90:7d:1f:68:e2:83:c1:e5:
b0:95:07:fd:c0:13:d5:6c:ef:a8:9f:dd:b0:75:1b:
88:53:a4:61:83:f0:23:e3:07:a5:09:7b:45:3e:7d:
a0:25:f2:06:ac:a2:7f:88:89:6e:00:7b:25:f6:00:
c6:fd:f7:25:98:99:60:51:a7:ee:f7:5f:a8:96:5f:
49:47:54:27:b1:fb:2e:e3:cc:16:8f:97:e4:f7:8f:
c1:56:1d:69:ee:08:01:85:94:f4:8e:b6:64:78:d8:
07:4f:52:d3:29:83:d5:09:1a:4b:73:4d:71:c4:9f:
9a:c2:d1:d3:65:d4:c4:6b:e0:2f:de:ad:97:d1:a1:
f4:69:be:b1:99:77:ac:40:6d:1f:09:24:4f:41:33:
d3:eb:2b:8c:7b:48:35:9d:85:16:b8:2c:4e:bf:18:
22:d8:58:a3:41:a6:96:aa:d9:38:13:f1:a5:7f:1a:
02:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:29:C4:F8:0C:ED:79:C5:07:D0:88:B8:C4:AC:C9:29:4B:F0:34:F2
X509v3 Authority Key Identifier:
keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/eCnE-AztecUH0Ii4xKzJKUvwNPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.124.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:fc:ab:80:53:7d:1a:6c:85:f1:d1:8d:1f:ef:72:69:06:f5:
24:00:86:88:c8:4c:49:e1:f5:54:1b:53:44:87:07:c7:49:26:
89:45:d9:d7:90:a4:ea:9c:bd:52:96:63:a8:7a:28:72:e2:84:
36:15:30:98:5d:a2:74:23:c4:ec:f6:af:66:b6:fa:2d:49:bb:
ab:e7:3c:23:77:36:91:c4:22:40:3d:32:d1:ec:2d:75:0a:e7:
85:a2:7d:31:f7:4b:73:9c:e0:78:47:fe:42:b5:b4:9b:ce:a6:
65:23:f5:da:0d:25:ed:54:2c:8b:5d:79:f2:7f:ec:33:5e:bc:
ab:38:b3:3b:7b:8d:c1:da:c0:08:41:93:a1:78:5f:8b:e7:07:
0a:ce:97:a0:f0:6a:de:85:1e:70:55:6f:58:a7:6b:2f:9e:0f:
f5:ef:b4:a8:d4:8c:be:7d:30:67:ff:58:bd:d7:83:c1:97:bc:
8f:4d:2c:b0:93:ac:46:1c:0d:be:13:6f:b6:f4:44:53:95:30:
7c:cc:8a:61:fe:80:e2:93:2b:0b:07:3b:48:86:c0:c0:31:63:
9d:52:a5:93:ed:ca:ec:98:64:8a:32:25:40:12:8c:a4:15:68:
5b:c8:0b:44:32:6e:f2:c0:09:6b:f7:81:b5:90:7a:36:9d:a1:
c6:60:3d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:35 2026 by rpki-client