Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ECHpO3PSIYOalCR8zexA81dZExE.roa
File: ECHpO3PSIYOalCR8zexA81dZExE.roa (raw, json)
Hash identifier: NQ2gdQIKubXxdM1PRDs2Xdcxt4eAPAVw16oiu4HzTQs=
Subject key identifier: 10:21:E9:3B:73:D2:21:83:9A:94:24:7C:CD:EC:40:F3:57:59:13:11
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A0802988126031BEAE9A37E88A853617BB
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ECHpO3PSIYOalCR8zexA81dZExE.roa
Signing time: Tue 08 Sep 2026 08:36:40 +0000
ROA not before: Tue 08 Sep 2026 08:36:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47440
IP address blocks: 170.168.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:29:88:12:60:31:be:ae:9a:37:e8:8a:85:36:17:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Sep 8 08:36:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1021e93b73d221839a94247ccdec40f357591311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:78:1d:72:96:1d:5f:e6:b8:e0:f7:d7:ce:63:
c5:87:a4:b4:5e:fe:cb:8e:c7:fa:c9:8c:84:9f:14:
c2:0f:b0:37:0e:f6:c0:e4:c7:30:6d:7a:c9:b9:d9:
61:61:83:b9:7e:50:66:81:e8:3c:52:13:60:fe:19:
be:62:0a:4d:f0:ac:25:3b:21:44:d6:b0:c5:66:0d:
63:60:2e:52:25:f8:72:45:a9:e6:66:db:9f:31:f3:
97:7b:80:d1:70:d2:6e:29:f4:b9:ae:56:a9:f6:e3:
a7:7f:cb:b9:dd:a3:8c:54:97:64:46:d3:67:ee:b4:
c9:94:1e:9a:57:1c:38:cc:ed:d4:a2:77:45:91:1c:
a8:01:4c:e9:d2:d0:74:7e:f3:bb:fe:53:cb:79:52:
81:cd:cc:52:83:40:9d:eb:d1:66:74:e7:ff:e7:c9:
81:fe:86:fd:56:35:54:d8:27:1c:5c:15:ea:8c:45:
be:03:0f:ed:34:71:a8:ef:56:a2:da:b1:ae:17:33:
ce:9a:d1:a8:83:39:1d:96:09:14:96:5e:8f:56:23:
bb:d4:eb:76:10:19:43:39:9a:46:d3:d1:e9:92:49:
ad:0a:c7:a2:45:eb:4f:92:d5:08:4e:e6:c4:ff:56:
52:2f:ca:b7:1f:da:e2:c4:bf:7e:d4:05:7f:06:b3:
31:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:21:E9:3B:73:D2:21:83:9A:94:24:7C:CD:EC:40:F3:57:59:13:11
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ECHpO3PSIYOalCR8zexA81dZExE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.19.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:30:c4:86:54:03:45:e1:b1:b5:d6:ef:d2:90:4f:69:8a:06:
70:f6:39:ae:a3:70:aa:51:df:b7:52:48:e0:44:05:23:b9:6e:
14:0b:a9:15:fb:fd:43:5e:42:d2:52:8f:72:3d:ab:b9:a8:c4:
1f:23:ad:10:55:2c:f1:bb:62:9b:8f:89:f7:b0:6f:4e:f1:20:
67:60:d8:c1:0c:27:71:2f:b9:75:66:6d:76:d2:07:e3:be:40:
8f:fe:38:84:6b:df:51:9f:22:02:f9:4a:4a:2f:41:f9:81:29:
2b:ae:a3:aa:24:b9:dc:21:63:cf:8f:d1:de:ea:62:7f:4a:2f:
f5:88:a0:cb:3a:d6:b4:3b:11:c3:56:58:1c:48:39:3d:33:5e:
54:c0:1e:4a:7d:46:ec:be:e0:48:7d:69:6e:d6:0b:c9:cc:7b:
6a:4c:92:49:68:d4:5f:23:0d:d5:c4:09:60:43:27:5e:2a:bc:
cc:15:e6:e7:9b:50:33:bc:6c:6b:84:18:4d:30:8b:7c:c6:8d:
b7:b6:c7:e2:84:26:d9:b1:28:4c:70:cf:15:ae:f2:a9:a6:2a:
b5:21:b0:88:07:49:3b:50:f4:1f:cd:75:d5:e2:4b:36:5e:37:
a6:47:5f:e0:ae:91:22:43:23:6d:6b:3d:69:72:a9:06:59:20:
93:b6:43:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:10:31 2026 by rpki-client