Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/eFBF7KJREDGfRRNv4X3kGTSIJcE.roa
File: eFBF7KJREDGfRRNv4X3kGTSIJcE.roa (raw, json)
Hash identifier: 44sPTTWebAxNVFu7fogOUNdH33UMKVkhaMU8cm9wJLM=
Subject key identifier: 78:50:45:EC:A2:51:10:31:9F:45:13:6F:E1:7D:E4:19:34:88:25:C1
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01A120B80D3DACADF8D971766F23DA1E2612
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/eFBF7KJREDGfRRNv4X3kGTSIJcE.roa
Signing time: Fri 09 Oct 2026 12:51:35 +0000
ROA not before: Fri 09 Oct 2026 12:51:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13378
IP address blocks: 95.82.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:b8:0d:3d:ac:ad:f8:d9:71:76:6f:23:da:1e:26:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 9 12:51:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=785045eca25110319f45136fe17de419348825c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:32:53:3b:08:24:de:4c:41:54:99:7a:5b:
1e:30:e8:bb:c7:ff:7a:95:1d:86:f1:e0:31:89:2c:
5c:5e:d9:9d:38:f3:fa:1b:3e:c6:08:c5:0d:f7:2a:
43:44:24:4d:49:ba:58:7a:9b:c2:54:b4:61:9f:98:
de:30:83:a6:d3:0b:52:b3:0b:b0:69:76:70:04:2c:
7c:ed:52:63:d7:28:74:7c:37:19:b7:91:86:26:e7:
85:55:31:d2:d4:0d:62:b6:25:c4:68:0e:13:ed:aa:
ab:9c:4a:12:62:af:bd:95:62:67:68:22:6c:af:8e:
f8:eb:b2:01:1e:23:9e:b6:8a:21:34:26:51:ec:d0:
03:53:a9:60:7d:e9:0e:e3:e0:1e:00:89:84:f8:0c:
a3:21:b2:8b:57:11:68:16:f9:44:7c:99:61:af:74:
d6:23:96:2f:87:9c:1b:17:aa:12:cf:db:f5:c8:f7:
94:2a:d5:1c:c0:32:1d:51:0e:6e:f2:b1:b5:eb:fd:
59:54:2c:6c:a6:3f:af:80:82:6b:62:17:48:ef:69:
a3:80:80:4d:ba:2e:06:6c:65:4a:47:a5:c4:16:3e:
38:ca:08:1f:2c:d4:a2:50:3f:62:d4:bb:0f:87:a2:
81:f1:5d:9b:3a:86:32:49:ec:4d:f9:a0:54:a4:02:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:50:45:EC:A2:51:10:31:9F:45:13:6F:E1:7D:E4:19:34:88:25:C1
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/eFBF7KJREDGfRRNv4X3kGTSIJcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.8.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:70:95:30:39:f7:d9:48:84:c2:83:e2:0c:a7:6f:2e:25:40:
35:69:0d:ac:ee:dd:e7:82:b1:95:ac:e1:20:ec:a8:4e:2e:ec:
99:76:de:f0:4f:ea:6f:c9:57:15:b4:00:57:ee:df:f2:74:97:
a4:b9:e9:6c:86:52:f6:8e:0c:53:c4:6f:17:2b:c5:9d:62:2b:
0d:8c:cf:e2:5b:5d:cd:53:c9:db:ff:38:40:f5:1c:c7:51:16:
ad:20:1a:d1:eb:01:0c:55:cd:be:b4:bb:2e:9a:fb:38:b8:c4:
eb:61:35:50:f1:5c:b9:76:17:40:fa:e3:4b:42:b3:6d:8a:d6:
7d:c2:12:ff:18:de:92:52:bf:fd:4b:14:98:45:ea:d8:5b:ae:
a2:4a:21:30:00:55:be:a1:bc:5c:a1:a8:c6:61:7e:08:d5:59:
97:72:29:dc:83:10:5a:cc:6a:1d:aa:c4:ef:41:0e:d9:cd:40:
d5:d7:f2:50:46:70:b8:26:3e:f3:1e:4e:6d:79:47:51:e7:4e:
98:a3:1b:74:56:77:a5:66:ab:78:0e:d2:ca:62:00:59:c1:e0:
0d:eb:c5:f8:73:8f:f7:bd:62:e4:c7:ff:c7:26:d2:26:89:a6:
06:86:91:5d:86:6a:8f:8f:aa:3c:af:29:0a:f9:92:0a:cc:9c:
83:23:c4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:47:37 2026 by rpki-client