Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/30be09-bcca-47a0-9c05-4ef0136ef895/1/e1VLPcxqXZzFtymKUqdvwO48bTs.roa
File: e1VLPcxqXZzFtymKUqdvwO48bTs.roa (raw, json)
Hash identifier: p4zXwBniO1VjFsv0SJrj61/SrRf6N8JOmIHYPQ+tQuw=
Subject key identifier: 7B:55:4B:3D:CC:6A:5D:9C:C5:B7:29:8A:52:A7:6F:C0:EE:3C:6D:3B
Certificate issuer: /CN=2edb3a774265d4c2440fe13799a3ebb72d2a9a7d
Certificate serial: 01A0D75B7BDCAD79430858BB77DE9ACBA6BA
Authority key identifier: 2E:DB:3A:77:42:65:D4:C2:44:0F:E1:37:99:A3:EB:B7:2D:2A:9A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lts6d0Jl1MJED-E3maPrty0qmn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/30be09-bcca-47a0-9c05-4ef0136ef895/1/e1VLPcxqXZzFtymKUqdvwO48bTs.roa
Signing time: Fri 25 Sep 2026 06:58:11 +0000
ROA not before: Fri 25 Sep 2026 06:58:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 193.37.240.0/21 maxlen: 21
194.36.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/30be09-bcca-47a0-9c05-4ef0136ef895/1/Lts6d0Jl1MJED-E3maPrty0qmn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/30be09-bcca-47a0-9c05-4ef0136ef895/1/Lts6d0Jl1MJED-E3maPrty0qmn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lts6d0Jl1MJED-E3maPrty0qmn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:5b:7b:dc:ad:79:43:08:58:bb:77:de:9a:cb:a6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edb3a774265d4c2440fe13799a3ebb72d2a9a7d
Validity
Not Before: Sep 25 06:58:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b554b3dcc6a5d9cc5b7298a52a76fc0ee3c6d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9a:e2:83:8f:6a:82:b5:98:e9:ff:70:6a:35:
45:ca:bd:cf:b4:4c:ae:54:af:1f:bc:d2:72:ad:51:
3a:71:fc:f2:2a:db:33:ef:f4:d9:e4:d4:bf:8d:14:
f1:af:99:21:91:32:89:bf:b3:c6:ab:8a:e3:e0:f5:
91:9a:51:b6:fa:71:2f:55:ad:0d:91:1e:c5:52:5c:
5e:52:e0:34:b7:ae:22:9b:02:da:2a:f8:fb:3c:2c:
22:87:97:b9:61:1e:23:a5:bf:7c:9f:e4:47:0a:5f:
dc:f0:04:74:81:11:26:d8:31:5a:b0:aa:79:a6:5a:
33:9a:67:dd:a5:65:ea:86:2e:e4:04:a7:cd:86:d8:
4a:8a:68:de:5b:6f:c7:0f:33:3a:8a:c2:ba:f9:27:
18:80:a5:0b:d1:7b:84:27:83:18:8b:2b:7d:a6:23:
78:9b:c7:cb:77:9b:81:a1:d3:1f:99:9b:4c:fb:da:
2d:5a:e4:d8:6d:2c:fd:8a:17:05:79:02:8b:0c:cb:
22:34:50:4c:d3:54:7e:6a:f2:03:93:8a:1b:0d:b2:
70:3a:c9:73:32:c5:8f:f8:59:57:52:95:0e:1d:e6:
c0:82:28:d6:56:3a:7b:f5:4d:8f:d6:c0:93:86:dc:
f1:83:46:65:7c:de:48:d2:c9:41:2d:8e:ce:f6:b9:
7f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:55:4B:3D:CC:6A:5D:9C:C5:B7:29:8A:52:A7:6F:C0:EE:3C:6D:3B
X509v3 Authority Key Identifier:
keyid:2E:DB:3A:77:42:65:D4:C2:44:0F:E1:37:99:A3:EB:B7:2D:2A:9A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lts6d0Jl1MJED-E3maPrty0qmn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/30be09-bcca-47a0-9c05-4ef0136ef895/1/e1VLPcxqXZzFtymKUqdvwO48bTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/30be09-bcca-47a0-9c05-4ef0136ef895/1/Lts6d0Jl1MJED-E3maPrty0qmn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.240.0/21
194.36.121.0/24
Signature Algorithm: sha256WithRSAEncryption
99:ad:88:76:6f:3e:0e:21:41:1f:05:43:9a:0c:6f:e8:d3:ba:
fa:30:31:47:cf:98:dd:f0:3c:90:b9:d1:9b:10:95:1d:0d:7a:
8b:0b:a2:50:fd:46:1c:bf:c9:68:1e:05:73:b3:3a:05:10:3c:
c2:c2:34:9a:72:05:2a:c7:8c:47:68:8f:5e:dd:f6:8b:65:7b:
c9:a9:d6:d9:7c:9d:cd:46:df:88:5b:76:52:92:f9:73:a5:e1:
1c:bb:10:8b:f6:46:cb:52:98:72:d3:4b:ad:a3:7c:fc:e4:15:
83:6e:24:c6:89:a5:4e:03:61:bd:76:db:b3:97:e3:f4:fe:98:
52:bf:54:d0:35:94:51:4f:28:c6:6f:ab:26:20:a5:41:12:9a:
4d:26:b6:eb:26:80:a4:9e:7a:e7:a9:c5:d5:7b:3a:09:87:fc:
32:32:cc:fa:bc:b9:d0:d4:d2:40:5a:3d:72:7b:b8:09:48:18:
fd:71:b0:7a:67:c7:70:97:e6:7c:b9:fb:c0:db:e6:f5:0e:d9:
09:82:43:87:db:d6:a8:57:5a:18:ba:ad:e3:2e:d2:a3:0e:e4:
dc:da:2f:47:e6:c4:22:10:58:fd:cf:27:e1:e3:b2:c7:f0:95:
78:b6:04:97:b6:f5:f2:9a:8f:ab:4b:cf:c9:ea:05:bd:e7:08:
77:d5:6a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:51:01 2026 by rpki-client