Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ebVgMzCWRH16_hva7q0Hqg5IgZU.roa
File: ebVgMzCWRH16_hva7q0Hqg5IgZU.roa (raw, json)
Hash identifier: v89KuNhPwYIQCw32BZP3lHIyztH7JIllrjLhBFOH37g=
Subject key identifier: 79:B5:60:33:30:96:44:7D:7A:FE:1B:DA:EE:AD:07:AA:0E:48:81:95
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FB2BDE0A1E26EB46B62BD010C92EE6258
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ebVgMzCWRH16_hva7q0Hqg5IgZU.roa
Signing time: Thu 30 Jul 2026 11:16:55 +0000
ROA not before: Thu 30 Jul 2026 11:16:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39600
IP address blocks: 195.40.153.0/24 maxlen: 24
195.40.154.0/24 maxlen: 24
195.40.155.0/24 maxlen: 24
195.172.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:bd:e0:a1:e2:6e:b4:6b:62:bd:01:0c:92:ee:62:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 30 11:16:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79b560333096447d7afe1bdaeead07aa0e488195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:d3:5c:4b:fa:82:09:b3:1d:68:1f:2a:ec:
3b:66:bb:01:64:93:27:55:8f:67:13:64:b9:f1:d1:
e7:d6:59:24:f2:f9:e0:19:a5:74:f0:db:44:ad:8d:
f2:b7:43:47:cd:af:45:d7:6c:ce:fe:65:98:c0:36:
fb:f0:d4:d0:2d:1f:66:da:b2:d8:01:c7:46:87:52:
df:5e:63:51:3f:b7:4e:44:58:5c:6c:7f:d8:9f:6a:
a0:b3:e3:48:c7:44:ce:8b:68:1e:f9:de:2e:16:eb:
ee:b3:fa:f9:9c:d0:8d:00:76:21:13:5c:6b:1c:6e:
f1:b2:f3:7c:76:2f:94:a4:ef:b0:ae:00:0d:40:33:
9e:8d:c7:ff:ad:26:eb:44:5d:a6:35:1c:10:53:02:
3b:98:ca:52:ab:84:4a:a1:19:7c:3c:a6:73:68:ca:
88:6f:2e:b2:ad:93:33:96:c8:58:fe:c3:85:54:50:
fb:b6:cf:bd:34:b5:3c:a8:dc:98:8b:7c:da:3a:f3:
90:99:b8:5a:45:81:c3:9b:c1:96:be:48:8a:31:7b:
58:4d:5f:1c:60:f8:12:fe:65:27:1a:5c:f2:b5:6b:
dc:15:2f:ac:88:5b:9c:bc:c1:0f:0f:4c:67:87:b8:
59:96:b5:a3:9c:ca:f9:71:be:a7:d5:96:fb:75:21:
cf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B5:60:33:30:96:44:7D:7A:FE:1B:DA:EE:AD:07:AA:0E:48:81:95
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ebVgMzCWRH16_hva7q0Hqg5IgZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.40.153.0-195.40.155.255
195.172.120.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ee:24:73:4c:14:74:b9:dd:e3:02:6e:4b:c1:fd:3f:24:08:
0e:5a:d7:8d:29:b9:96:ef:dc:24:73:3f:b8:6f:5f:23:cf:e3:
b9:6a:66:8f:9b:f6:1b:a8:8c:a3:5a:93:c8:a4:ef:46:cd:6c:
32:9e:ff:8e:3e:25:63:31:aa:93:70:56:0a:2f:5e:1f:21:0c:
a1:66:92:40:23:cd:99:5f:65:f1:eb:e1:bf:4e:a3:52:2f:0f:
f7:ec:fc:82:6b:52:a1:e2:45:40:52:04:e4:89:97:c8:91:40:
32:f8:e9:1e:89:eb:23:70:b0:92:cc:33:78:36:80:b6:00:f4:
9c:a0:c7:96:3f:61:38:73:9c:7c:25:1a:10:44:93:7e:07:f3:
88:da:9f:5c:18:4c:22:08:bf:52:94:62:04:b3:f1:b1:b9:ab:
df:8c:4b:48:6a:91:8b:73:bf:a0:63:78:c8:93:cc:f0:bc:af:
db:57:36:6b:d3:80:1e:63:58:34:99:2a:40:b4:ed:10:6f:9b:
6f:a3:b4:8a:1f:4a:e5:df:10:e7:8d:22:c0:49:a5:5b:d0:68:
57:6f:b9:e2:28:01:8d:c2:a9:e0:1b:08:ab:16:74:ad:35:d0:
d2:23:a0:9e:8d:d7:60:6c:0e:ea:b3:49:d9:42:7e:9b:1e:dc:
f1:5a:cc:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Aug 14 14:14:15 2026 by rpki-client