Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eiF687YR3lAT0QEv65OmW6MPK0Q.roa
File: eiF687YR3lAT0QEv65OmW6MPK0Q.roa (raw, json)
Hash identifier: GB0oGGJNV51HFpKW1O9CJH61Fl52TG4BX9mKRbIdL0I=
Subject key identifier: 7A:21:7A:F3:B6:11:DE:50:13:D1:01:2F:EB:93:A6:5B:A3:0F:2B:44
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019D3E6780C16775CDDC14C647A284D23370
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eiF687YR3lAT0QEv65OmW6MPK0Q.roa
Signing time: Mon 30 Mar 2026 11:01:03 +0000
ROA not before: Mon 30 Mar 2026 11:01:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56755
IP address blocks: 45.148.118.0/23 maxlen: 24
94.177.122.0/24 maxlen: 24
139.28.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 Apr 2026 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3e:67:80:c1:67:75:cd:dc:14:c6:47:a2:84:d2:33:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 30 11:01:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a217af3b611de5013d1012feb93a65ba30f2b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:3d:48:f4:c8:26:d0:89:25:63:24:a2:ca:
d3:cf:30:65:c5:a0:d4:94:fc:b1:85:74:76:18:f6:
22:d0:66:c7:21:b4:92:2e:ec:6c:43:21:4c:0c:17:
92:5c:5e:32:55:0c:b3:a4:ab:e0:07:6e:a4:8e:b7:
a2:cf:af:24:00:0c:e5:c2:41:24:5f:c7:5b:30:f5:
fe:b8:55:eb:d0:dc:63:5d:6d:11:b5:63:4d:5e:63:
25:23:13:2d:0d:30:2f:5c:55:86:97:af:88:b4:04:
05:b6:85:9d:0f:3b:35:7f:3d:af:93:29:8a:b9:22:
1f:e9:bd:5e:73:13:6d:95:51:bc:00:47:75:37:88:
59:3e:2f:6c:73:9b:85:1d:84:d7:48:3e:8b:ce:03:
5c:f9:7c:36:5e:67:20:46:dc:84:18:af:28:75:38:
9d:74:3a:4b:58:47:da:3a:1f:5a:94:b8:b7:b0:6f:
d4:f9:49:04:7d:5a:9a:b5:ea:aa:98:ef:58:8e:a3:
cb:50:84:9e:d6:b8:1c:1a:af:c1:10:4a:93:47:92:
03:c0:bb:16:21:ea:89:7a:ad:b1:3e:ac:46:10:b0:
1a:d5:2b:a6:07:d0:87:39:42:4d:a4:93:66:9a:5d:
7f:47:d7:d4:1f:75:29:34:e4:0c:3c:8d:0a:df:75:
c0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:21:7A:F3:B6:11:DE:50:13:D1:01:2F:EB:93:A6:5B:A3:0F:2B:44
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eiF687YR3lAT0QEv65OmW6MPK0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.118.0/23
94.177.122.0/24
139.28.99.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:5c:ef:45:3f:df:80:a6:32:c3:71:4a:33:7d:20:d7:ea:dd:
b8:6c:1d:cc:3d:57:6a:b3:13:36:55:62:7d:23:98:2f:0c:d9:
b6:a2:76:4c:8e:57:3e:b6:50:c7:ef:91:95:5d:6d:3d:2c:ca:
0e:6a:58:4a:79:2e:6f:c9:11:03:42:bd:6f:dd:8c:2e:22:1d:
e0:76:39:2f:c4:8b:7a:5d:23:c9:4e:cb:65:b7:4b:6c:43:46:
a9:bd:f3:f1:64:97:bc:30:8b:cd:3a:fc:8c:39:4f:42:a2:94:
1e:5c:38:36:e8:8c:99:d9:8e:10:20:56:67:01:1a:86:f9:aa:
f5:cd:41:0d:b9:69:ef:71:d7:2b:a6:57:96:36:f2:82:70:66:
fd:7e:da:4e:ce:5a:1f:79:67:c0:e9:86:f3:aa:d2:01:9d:4f:
77:01:ba:c7:af:e3:3d:3f:3c:09:98:25:20:3f:1a:7c:f2:ac:
f5:33:28:5b:96:7d:89:90:17:46:37:be:4d:18:4c:80:d4:c2:
f3:6c:90:39:d6:40:c8:d0:b1:be:d5:ba:0f:c5:09:94:3b:8c:
f4:71:5f:03:ae:1e:dc:48:7e:cb:bb:d7:32:b1:96:20:11:e0:
7c:cd:d4:91:b4:13:79:8e:8a:e1:21:68:a9:a7:ae:00:79:ab:
eb:a7:7f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 15:40:41 2026 by rpki-client