Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ebvIgp-ilLNpz_cOaA_mQlZNQu0.roa
File: ebvIgp-ilLNpz_cOaA_mQlZNQu0.roa (raw, json)
Hash identifier: lY2OQbKTugYquATRPinU1vU2TxbWg7b0UoFpCIIPxnw=
Subject key identifier: 79:BB:C8:82:9F:A2:94:B3:69:CF:F7:0E:68:0F:E6:42:56:4D:42:ED
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A05D7382FD444CC3E2590B87AFA124AFF2
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ebvIgp-ilLNpz_cOaA_mQlZNQu0.roa
Signing time: Tue 01 Sep 2026 14:50:46 +0000
ROA not before: Tue 01 Sep 2026 14:50:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214466
IP address blocks: 213.218.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:73:82:fd:44:4c:c3:e2:59:0b:87:af:a1:24:af:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 1 14:50:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79bbc8829fa294b369cff70e680fe642564d42ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f2:69:e6:65:c8:1d:ed:1a:9a:89:db:50:58:
54:91:cb:7d:3d:dc:c2:c9:bb:d0:7c:f4:f6:18:da:
98:3a:28:6d:2f:57:aa:bf:c7:5d:ec:c0:95:eb:99:
9d:a4:b5:03:07:57:1b:40:78:36:f9:10:a9:9b:aa:
1d:f6:f6:8b:e1:a0:38:f2:25:01:9e:1b:be:d1:35:
ad:9e:fc:56:63:32:21:1d:83:1c:2e:c8:d9:ee:ab:
2c:7f:71:2c:ce:20:c4:f1:d7:c2:96:83:46:68:9f:
fa:93:7b:37:9d:61:dd:17:ac:9a:6e:12:db:c5:e2:
f2:b1:ed:84:2e:50:1f:c9:32:cb:c6:32:55:c8:aa:
27:90:d1:ef:c8:8a:e4:43:60:9c:73:98:5c:b8:40:
69:3c:04:8e:80:58:80:42:b8:ff:41:fd:7c:8d:92:
cc:32:a7:e0:96:d0:4a:ec:3f:ec:36:2d:82:ee:bb:
6b:e0:2e:5b:eb:83:ca:04:88:74:45:6a:ef:f6:72:
28:9a:c1:a2:5f:4e:49:83:d2:d9:75:a8:fb:1f:5f:
b4:68:30:38:2c:c2:32:8b:6f:88:b0:9b:47:78:87:
26:38:7b:0a:a5:29:93:73:06:20:7a:97:64:74:7e:
e8:77:58:93:8d:ff:f6:cc:ab:27:df:cf:25:22:29:
56:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BB:C8:82:9F:A2:94:B3:69:CF:F7:0E:68:0F:E6:42:56:4D:42:ED
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ebvIgp-ilLNpz_cOaA_mQlZNQu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.251.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:92:45:1f:94:da:54:b9:0f:de:ba:a3:30:cc:c9:c5:4e:96:
49:ab:3c:f8:3a:e1:8e:0d:e6:48:8e:c2:e7:31:e8:e1:2e:58:
3f:cb:6f:e5:ac:bc:72:4b:02:54:88:ad:ce:c2:df:6f:2f:24:
de:a7:25:d8:8f:68:6e:ab:56:58:b9:cc:1e:e7:6e:32:ce:0c:
c0:7e:0e:43:a7:08:58:ee:78:b5:da:1a:51:7f:0b:c8:70:3d:
61:ff:83:85:55:1f:f9:b9:c2:4e:55:d0:70:b3:55:dd:9d:75:
7b:ed:70:c2:6c:52:a9:2d:34:da:2d:01:8b:d4:7c:2b:b3:6e:
ff:34:e8:61:30:a7:ae:8c:a8:4c:24:94:19:64:37:23:8b:4e:
44:e2:43:3f:d7:2b:4a:0c:e6:b1:90:86:90:01:10:a3:e0:09:
be:37:a7:c1:f1:de:e2:62:72:fc:d0:38:6c:26:a9:15:2d:98:
6f:f5:3b:3a:79:f9:f4:23:67:e4:c6:7f:0e:a0:e2:1b:78:1b:
08:d4:91:5d:17:aa:b7:cb:46:c6:46:59:7d:03:36:ca:2c:37:
75:1f:4d:37:cf:44:37:fd:17:60:70:40:8a:4d:4d:02:f9:f7:
d0:ea:f5:3f:1e:2e:f1:e4:e6:e1:0f:f2:7f:c7:31:5f:6f:fd:
8f:0a:c9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:36:54 2026 by rpki-client