Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/eNJDQxkz_xTpdhZ0EB_Y7GIkyPg.roa
File: eNJDQxkz_xTpdhZ0EB_Y7GIkyPg.roa (raw, json)
Hash identifier: ZfkYPeWj2nNNj75ZWAdhOzBe550shTgoGilyVfjwfls=
Subject key identifier: 78:D2:43:43:19:33:FF:14:E9:76:16:74:10:1F:D8:EC:62:24:C8:F8
Certificate issuer: /CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Certificate serial: 019F2368B3452E428A3687034D563F9AA089
Authority key identifier: 25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/eNJDQxkz_xTpdhZ0EB_Y7GIkyPg.roa
Signing time: Thu 02 Jul 2026 15:18:11 +0000
ROA not before: Thu 02 Jul 2026 15:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12859
IP address blocks: 93.175.159.0/24 maxlen: 24
2001:67c:2d7c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b3:45:2e:42:8a:36:87:03:4d:56:3f:9a:a0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Validity
Not Before: Jul 2 15:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78d243431933ff14e9761674101fd8ec6224c8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a1:39:85:b3:76:ba:af:2e:63:03:5a:0a:68:
d8:b5:1e:e4:d1:bb:20:d6:f6:75:6a:df:b2:15:6c:
c4:1d:07:03:6a:e7:1b:80:70:79:ab:37:70:1c:64:
df:42:e6:a2:37:2b:82:ad:6a:c9:60:45:ea:5b:1e:
ad:ca:2f:50:f2:3e:0f:10:b2:6e:89:b4:89:4f:03:
42:62:fa:fe:96:19:8b:6e:d0:f4:a1:2d:5f:cf:5e:
92:16:44:ad:37:74:e3:a5:6f:0b:e9:3f:a8:43:c6:
c1:eb:25:67:c0:d0:05:14:47:29:ef:f1:08:1b:10:
e3:2c:04:86:8a:2f:8b:f3:fc:3d:26:54:51:f9:07:
2f:2a:a3:6e:ce:bf:f4:90:75:a0:37:1e:13:4e:51:
ac:62:53:a1:a9:16:c0:5b:fb:f5:5a:42:4b:60:43:
64:b0:1d:5a:32:a4:52:01:69:eb:86:6e:c9:32:35:
e0:e6:98:30:e0:7d:10:3c:03:e5:6d:34:f2:ac:ab:
18:c3:38:50:79:28:1b:c6:2e:72:0c:c8:84:40:4a:
a2:da:c2:4a:fc:e0:4b:79:bf:b0:98:81:a7:14:3d:
ad:70:c2:0a:6b:02:22:73:61:13:0f:a9:92:aa:3f:
79:dd:41:9f:97:ab:a1:af:0b:ae:94:47:77:cc:af:
06:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D2:43:43:19:33:FF:14:E9:76:16:74:10:1F:D8:EC:62:24:C8:F8
X509v3 Authority Key Identifier:
keyid:25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/eNJDQxkz_xTpdhZ0EB_Y7GIkyPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.175.159.0/24
IPv6:
2001:67c:2d7c::/48
Signature Algorithm: sha256WithRSAEncryption
60:4a:9d:a0:19:95:61:89:bf:dc:ee:f4:8f:1f:3e:bf:18:69:
ac:ec:a9:02:45:9a:c8:cc:bb:20:e8:fc:51:12:f9:2f:a4:ea:
5d:7b:a0:22:17:87:78:20:23:e9:d6:64:9a:86:7b:88:1c:53:
63:30:ba:44:1a:e2:a5:25:71:4f:e4:6a:18:62:ab:ee:c8:8a:
19:7a:b8:fd:05:46:ae:f1:9c:bd:ed:5d:bf:58:b4:19:00:c4:
07:d8:0f:e2:d0:d4:b6:a2:92:63:e4:89:8f:be:f4:a8:3e:96:
32:53:23:c4:92:39:ec:ac:87:6b:e7:55:c3:5b:47:3e:73:f6:
6b:ce:10:79:26:ff:43:6c:47:3c:5c:56:95:f0:2f:08:23:ed:
0c:03:5c:57:88:15:92:7a:63:75:ba:2d:52:35:ec:74:cc:dd:
44:87:2c:9d:50:e2:9c:20:14:d6:37:72:a3:97:07:52:30:6d:
ec:3f:ae:c4:85:c2:a2:2a:a3:75:34:e4:df:56:c2:ce:b3:39:
ed:fd:a1:6c:43:9a:c8:f2:fd:e4:d0:38:8e:4f:fb:a5:c8:f9:
2e:be:8c:92:1f:62:bf:1a:af:b6:b5:c7:a6:aa:bd:e6:4c:88:
ef:01:7a:44:72:8e:79:b1:89:33:4a:cc:bb:8f:4a:62:3f:10:
e9:3b:ed:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:58:27 2026 by rpki-client