Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/REjOlHvNrNp4zfq8Qm8yGcVUclY.roa
File: REjOlHvNrNp4zfq8Qm8yGcVUclY.roa (raw, json)
Hash identifier: tD0v1uK+hPTK/RlV/6ODvMGxpQiAEG6J1TrpjGl/eeg=
Subject key identifier: 44:48:CE:94:7B:CD:AC:DA:78:CD:FA:BC:42:6F:32:19:C5:54:72:56
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019E6FDEB643C6E370357FACA33E138C73D9
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/REjOlHvNrNp4zfq8Qm8yGcVUclY.roa
Signing time: Thu 28 May 2026 18:35:27 +0000
ROA not before: Thu 28 May 2026 18:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197191
IP address blocks: 109.122.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6f:de:b6:43:c6:e3:70:35:7f:ac:a3:3e:13:8c:73:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: May 28 18:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4448ce947bcdacda78cdfabc426f3219c5547256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:aa:06:27:8b:af:fb:b8:e6:45:29:e3:48:
a2:ac:91:b4:11:fb:69:0b:a3:6d:6f:04:4b:e4:73:
ce:d5:9c:73:78:fe:b3:1a:cd:04:34:03:45:63:50:
6d:a5:55:bb:c0:73:a3:82:dd:61:ab:c0:5b:c7:77:
95:42:6a:34:4c:85:ae:47:37:73:c7:d8:d5:5c:96:
d0:0e:75:b5:8e:89:20:a5:6d:79:ee:93:34:23:3d:
77:37:93:a8:ca:13:e4:a8:d6:ad:d2:a5:74:28:cb:
ed:3b:79:68:c7:52:f2:1b:53:5a:e3:a4:4d:16:1e:
43:66:bc:8f:fd:c2:bf:68:66:5c:af:75:cc:f4:74:
7a:40:f8:5e:9e:b0:9d:60:cd:3a:09:89:8e:86:c2:
63:26:02:d1:8c:85:bc:47:36:d7:6c:63:53:1a:7b:
9f:d3:d1:38:44:62:2d:ec:cc:59:fd:5d:bf:db:12:
14:a4:ba:4b:d1:15:b6:4c:06:76:1b:5a:92:d0:fc:
0c:bc:98:b4:7e:73:9f:60:88:5c:ce:2a:a2:9f:4b:
46:d5:76:91:7c:ad:9a:dc:01:17:bb:39:2d:f3:b7:
36:aa:c0:95:a0:eb:19:98:07:38:a7:ec:24:a3:51:
70:9c:82:3b:7f:7c:38:ba:da:35:d4:0c:97:27:74:
a6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:48:CE:94:7B:CD:AC:DA:78:CD:FA:BC:42:6F:32:19:C5:54:72:56
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/REjOlHvNrNp4zfq8Qm8yGcVUclY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.59.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:68:d2:8e:ea:3d:49:c3:2b:f2:df:ab:b0:ba:2a:c8:92:29:
64:55:d4:30:b1:e9:1a:ef:1d:04:3d:09:0f:25:77:13:cf:82:
5e:ff:66:dd:5e:fb:75:da:34:8b:92:23:71:1e:f4:ff:29:08:
8e:04:44:c4:a2:79:15:77:80:ff:50:86:38:ce:34:6a:03:e5:
36:5d:ac:06:a3:b5:43:f4:bd:2b:38:5f:d9:c8:ee:a1:d1:16:
f8:54:d8:7f:91:bb:84:21:a4:37:fe:ae:da:c4:4c:23:49:38:
14:88:68:d0:5f:1e:25:61:7d:81:18:c2:78:41:b9:8c:aa:b3:
9d:8f:38:1d:06:56:b3:8f:2c:a4:92:72:a7:6e:cc:81:90:f2:
13:7e:ea:d8:4f:51:85:d7:49:02:b9:7d:67:2f:4c:9a:6b:28:
01:0f:fd:3c:6d:26:8a:fa:99:cc:7e:c5:16:a0:36:c3:5b:fb:
34:bd:1c:33:a1:d8:35:08:2c:72:b1:a3:36:44:96:19:af:d0:
e0:b4:d0:6e:ea:85:6a:59:3f:53:d7:a8:5e:cf:bf:cb:08:26:
13:5f:c0:2a:9d:df:ca:e8:8a:c8:5e:c1:b6:83:15:2f:15:dd:
1e:bb:46:25:15:9d:9f:7f:42:50:7b:24:6e:74:2a:b2:48:9c:
41:87:e5:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5v3rZDxuNwNX+soz4TjHPZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1
ZTNmOTgwHhcNMjYwNTI4MTgzNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDQ4Y2U5NDdiY2RhY2RhNzhjZGZhYmM0MjZmMzIxOWM1NTQ3MjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCaqBieLr/u45kUp40iirJG0Eftp
C6NtbwRL5HPO1ZxzeP6zGs0ENANFY1BtpVW7wHOjgt1hq8Bbx3eVQmo0TIWuRzdz
x9jVXJbQDnW1jokgpW157pM0Iz13N5OoyhPkqNat0qV0KMvtO3lox1LyG1Na46RN
Fh5DZryP/cK/aGZcr3XM9HR6QPhenrCdYM06CYmOhsJjJgLRjIW8RzbXbGNTGnuf
09E4RGIt7MxZ/V2/2xIUpLpL0RW2TAZ2G1qS0PwMvJi0fnOfYIhcziqin0tG1XaR
fK2a3AEXuzkt87c2qsCVoOsZmAc4p+wko1FwnII7f3w4uto11AyXJ3Sm5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFERIzpR7zazaeM36vEJvMhnFVHJWMB8GA1UdIwQY
MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt
OWNkNjYyYmM4MzIwLzEvUkVqT2xIdk5yTnA0emZxOFFtOHlHY1ZVY2xZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw
LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXo7MA0G
CSqGSIb3DQEBCwUAA4IBAQDQaNKO6j1Jwyvy36uwuirIkilkVdQwseka7x0EPQkP
JXcTz4Je/2bdXvt12jSLkiNxHvT/KQiOBETEonkVd4D/UIY4zjRqA+U2XawGo7VD
9L0rOF/ZyO6h0Rb4VNh/kbuEIaQ3/q7axEwjSTgUiGjQXx4lYX2BGMJ4QbmMqrOd
jzgdBlazjyykknKnbsyBkPITfurYT1GF10kCuX1nL0yaaygBD/08bSaK+pnMfsUW
oDbDW/s0vRwzodg1CCxysaM2RJYZr9DgtNBu6oVqWT9T16hez7/LCCYTX8Aqnd/K
6IrIXsG2gxUvFd0eu0YlFZ2ff0JQeyRudCqySJxBh+U1
-----END CERTIFICATE-----
Generated at Thu Jun 4 15:02:35 2026 by rpki-client