Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/E00sF0sF3Osy1vzG1VEYMsD6Cug.roa
File: E00sF0sF3Osy1vzG1VEYMsD6Cug.roa (raw, json)
Hash identifier: qyFKnrNr44PH/u1bDDovYfSCueMj8Ve4lZoOX8Mo6d0=
Subject key identifier: 13:4D:2C:17:4B:05:DC:EB:32:D6:FC:C6:D5:51:18:32:C0:FA:0A:E8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A115CF0954EF45C3ACABD30EBBEC5B4CFB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/E00sF0sF3Osy1vzG1VEYMsD6Cug.roa
Signing time: Wed 07 Oct 2026 10:00:52 +0000
ROA not before: Wed 07 Oct 2026 10:00:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199524
IP address blocks: 185.102.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:cf:09:54:ef:45:c3:ac:ab:d3:0e:bb:ec:5b:4c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 7 10:00:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=134d2c174b05dceb32d6fcc6d5511832c0fa0ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:4f:38:23:a6:cb:80:fc:5a:26:47:ca:f9:
73:59:32:20:74:97:ec:c3:98:cb:d9:b1:77:4a:79:
bc:a6:d8:8b:83:f3:b9:79:5b:9b:e4:a7:0a:2c:41:
fc:de:f3:2c:61:dc:a4:b4:89:73:58:87:63:ca:dd:
ed:ef:c2:17:32:70:27:06:40:dd:ef:0a:65:8e:71:
1f:73:ca:d9:7a:f3:cc:f6:b9:da:f9:c2:be:54:d2:
41:99:d4:bf:d6:38:39:b8:26:28:45:33:08:9e:41:
3d:01:84:30:ee:75:7d:f3:6a:18:37:15:c8:0d:16:
71:63:36:5f:90:67:f4:f8:95:1b:fc:b0:36:19:42:
e7:2d:b8:9e:2b:e4:06:f1:ed:51:51:66:2b:74:fc:
19:ed:72:67:d1:62:a6:f3:44:05:86:35:16:87:c9:
07:62:96:7d:0e:3b:65:e6:e2:16:ea:62:92:73:31:
dd:5c:3e:8e:8f:8e:5e:93:a4:05:0d:28:40:29:c5:
10:7c:43:a6:31:8b:91:ce:4e:a0:e2:03:48:77:cb:
b0:e6:ff:58:3a:e2:af:26:9f:e2:bd:c1:f6:78:2b:
dc:04:78:a7:c4:76:04:1e:f3:4e:ae:6c:10:4d:f8:
53:b2:2d:89:93:07:51:4f:6d:72:0b:c2:83:85:db:
e8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4D:2C:17:4B:05:DC:EB:32:D6:FC:C6:D5:51:18:32:C0:FA:0A:E8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/E00sF0sF3Osy1vzG1VEYMsD6Cug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.84.0/24
Signature Algorithm: sha256WithRSAEncryption
73:48:8e:9d:a9:50:30:cd:52:2e:af:10:76:39:20:20:4f:09:
04:7e:fb:21:38:f3:9e:fc:2d:24:86:15:7b:d6:cf:2d:bb:d0:
22:e5:16:16:0f:95:23:68:40:3d:50:45:a4:31:54:5e:32:c2:
3c:d9:43:49:ae:b8:3d:47:28:65:c1:7a:02:4c:db:d4:47:2c:
91:15:d5:f6:f5:40:6b:bd:a0:9f:3c:16:3f:3f:69:50:4b:66:
c7:c4:e0:f0:34:32:4f:7c:0e:51:66:4b:a3:c2:20:ce:17:9b:
fd:f8:e8:61:88:e2:42:cb:a6:b7:70:0b:81:22:cb:c3:28:fc:
23:5b:e9:73:c0:e6:7f:9e:f9:47:58:a6:2f:bb:0b:f2:b0:39:
38:1c:62:50:ca:f5:4c:78:89:86:a5:d5:67:0f:61:fb:7d:84:
60:b4:d8:8f:16:f5:03:73:b8:52:da:8f:63:07:7f:3f:5e:c4:
3e:8c:c5:7b:d8:51:38:dc:c0:75:d2:54:34:61:dc:89:61:8d:
1b:d8:41:4e:4f:71:24:56:3f:99:22:78:54:bd:94:3c:cb:14:
29:29:ba:34:c3:37:48:6f:32:8d:cc:f8:70:9a:59:ae:2a:94:
87:02:31:18:a5:a2:7e:02:b2:84:f6:bf:ae:00:32:54:f6:0e:
da:fc:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:11:06 2026 by rpki-client