Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/eAGo7tcphLVCScj4mWyqTWB40DE.roa
File: eAGo7tcphLVCScj4mWyqTWB40DE.roa (raw, json)
Hash identifier: vUYrbB3y1Fed1n+d3yU4y69AsjIYo8MsiwphvcU79ek=
Subject key identifier: 78:01:A8:EE:D7:29:84:B5:42:49:C8:F8:99:6C:AA:4D:60:78:D0:31
Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial: 019E6A2C46727C87B03D1EFFF608A12DCB2E
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/eAGo7tcphLVCScj4mWyqTWB40DE.roa
Signing time: Wed 27 May 2026 16:02:26 +0000
ROA not before: Wed 27 May 2026 16:02:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28709
IP address blocks: 128.140.170.0/24 maxlen: 24
178.237.16.0/22 maxlen: 24
178.237.21.0/24 maxlen: 24
178.237.22.0/24 maxlen: 24
178.237.24.0/24 maxlen: 24
178.237.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6a:2c:46:72:7c:87:b0:3d:1e:ff:f6:08:a1:2d:cb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
Validity
Not Before: May 27 16:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7801a8eed72984b54249c8f8996caa4d6078d031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:d5:02:4b:62:11:bf:75:b3:e1:2f:a7:e5:
3e:69:5a:99:80:d3:af:57:db:15:7f:3b:cc:81:9c:
2f:61:57:69:48:02:eb:be:b1:38:e8:b3:47:d1:32:
d5:34:b2:29:82:87:7a:c6:b6:d6:9e:28:f0:30:a0:
7a:68:4e:ac:fa:b8:8d:42:47:88:41:48:c5:50:3c:
09:91:ae:81:9f:c1:c3:6b:f8:a6:28:02:01:fb:4a:
25:d3:f9:64:0e:29:a4:70:ba:77:ad:62:07:dc:07:
62:68:8f:3f:f1:7f:52:72:87:d9:46:bf:18:3d:cf:
6f:d2:25:d1:bf:0a:10:78:ec:65:07:7a:26:a2:bd:
26:dd:74:73:97:59:20:36:84:a0:ad:26:ac:fe:95:
a4:58:f1:5d:d4:52:b2:85:d8:98:e0:1b:98:ae:3e:
b7:6e:4c:1d:a3:9d:72:b8:17:db:d6:64:7d:02:6c:
76:a5:c2:b9:b6:7b:4a:35:6e:bf:92:d0:72:20:4c:
6f:4d:d0:bf:99:c6:20:ce:cc:ad:2c:16:44:aa:de:
62:d6:2a:ba:99:c2:ad:f4:0f:9e:56:d2:b3:64:1e:
55:18:81:f0:9d:ee:27:38:72:d0:0a:dc:5b:db:42:
b2:6f:7c:0d:72:f0:d4:4e:05:63:d8:74:6c:9d:71:
49:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:01:A8:EE:D7:29:84:B5:42:49:C8:F8:99:6C:AA:4D:60:78:D0:31
X509v3 Authority Key Identifier:
keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/eAGo7tcphLVCScj4mWyqTWB40DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.140.170.0/24
178.237.16.0/22
178.237.21.0-178.237.22.255
178.237.24.0/24
178.237.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ca:2d:c6:f2:42:ab:6c:ce:35:7a:d7:67:0c:f6:40:7a:f2:
af:33:bf:3a:e6:94:8b:2d:af:66:79:c5:f4:01:93:18:36:ab:
02:b2:d3:1c:96:b1:1e:a9:1c:51:2d:f7:f9:43:da:88:59:59:
bf:d1:81:db:0b:d4:b1:11:07:da:86:fb:c5:0a:bd:20:1f:55:
f4:33:4a:01:64:a8:71:d7:ba:82:a4:eb:d7:3b:dd:03:d8:24:
d9:59:ef:ef:75:e1:72:ac:9f:90:98:78:98:83:60:7d:1a:e6:
1e:dc:37:61:10:2f:26:83:ce:54:e9:22:71:8f:c4:05:92:34:
db:ce:72:2f:9e:29:46:4e:cd:01:fa:b8:72:a9:34:79:b8:ec:
c3:ee:72:d2:24:12:d9:73:6e:16:e0:59:5e:03:d8:e1:e7:80:
5f:5e:8c:26:48:5d:61:d1:44:6a:39:b7:ce:7d:4e:14:5d:02:
ee:b3:19:6d:b7:b1:83:18:5e:6c:5d:0f:af:59:a8:27:6f:8a:
bf:7f:e2:49:de:54:2a:11:36:8b:41:67:66:d1:dd:2a:be:00:
f2:0f:1a:b2:d5:bf:2f:93:be:0c:d2:1c:0c:c7:3f:25:aa:21:
87:5f:e8:49:3f:ed:d1:61:c3:be:75:5a:d2:81:7c:08:ac:ea:
42:4c:d0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:33:19 2026 by rpki-client