Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ecEwq8kzjmUz4wAl5y9NY23nHP4.roa
File: ecEwq8kzjmUz4wAl5y9NY23nHP4.roa (raw, json)
Hash identifier: C9B98Hr14zxeLb9pyxpcpUi6RBAGhUr5GBAo9feKiQo=
Subject key identifier: 79:C1:30:AB:C9:33:8E:65:33:E3:00:25:E7:2F:4D:63:6D:E7:1C:FE
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01A04155BC4D5A6428065BA1471042907D84
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ecEwq8kzjmUz4wAl5y9NY23nHP4.roa
Signing time: Thu 27 Aug 2026 03:48:52 +0000
ROA not before: Thu 27 Aug 2026 03:48:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 195.216.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:55:bc:4d:5a:64:28:06:5b:a1:47:10:42:90:7d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Aug 27 03:48:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79c130abc9338e6533e30025e72f4d636de71cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:56:2c:e3:79:a5:af:c6:45:3b:47:ec:8a:a7:
a7:a0:e3:9d:ce:64:51:3d:85:ac:e9:83:64:3c:9c:
30:6e:cd:1d:9d:c3:05:1c:a3:dc:c0:22:32:6b:9f:
3b:22:e6:93:46:35:bb:74:2f:90:18:ba:56:b9:8e:
2f:e7:eb:da:38:05:00:a2:59:0c:66:ba:31:69:e6:
0d:63:d9:76:e4:91:f5:4e:73:8c:3d:6b:b8:87:1b:
b5:86:db:5f:ac:e2:e6:ac:c9:c0:e0:1d:47:6e:83:
9f:17:ba:c1:b2:21:68:ce:8a:a3:82:d1:d7:e3:94:
3c:03:c4:42:3f:10:45:24:54:5b:39:99:01:8e:2b:
33:3d:d5:7a:7a:ce:64:e5:38:a2:e0:74:a5:b0:a7:
18:54:40:fa:bb:73:84:9d:f2:f4:96:28:c4:14:6a:
41:e4:39:6b:ac:13:bd:5c:99:20:97:54:4c:67:47:
6b:b8:8e:97:6a:bb:86:33:bf:1a:43:34:dd:2e:ee:
cc:6a:37:4f:80:4e:7f:c1:83:a7:a2:25:d0:99:98:
bc:41:a2:f9:5a:c5:5c:bf:e1:35:cc:90:1c:6b:9a:
41:65:6d:da:cc:a2:83:a8:7f:36:b0:21:c9:87:66:
8c:e4:4e:02:05:c4:0a:43:8c:72:0d:f2:34:ed:ef:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C1:30:AB:C9:33:8E:65:33:E3:00:25:E7:2F:4D:63:6D:E7:1C:FE
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ecEwq8kzjmUz4wAl5y9NY23nHP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.178.0/24
Signature Algorithm: sha256WithRSAEncryption
87:2a:7a:4a:ac:10:a3:ee:59:6c:2d:7f:27:7f:47:31:7d:7a:
9e:df:ae:2f:9a:f8:10:4f:38:ed:ec:d9:3b:12:f8:fa:9c:2b:
92:91:ea:8a:54:b9:8d:c5:2a:9c:bc:db:69:7a:61:6e:74:ee:
73:79:b0:a9:41:c0:bc:b1:b7:fd:e6:ac:7f:ad:9a:86:09:c7:
3c:6d:06:1a:03:18:3d:e9:26:b5:7d:d8:e9:9b:07:df:0c:e4:
02:26:e9:89:fd:d8:2c:90:17:fd:4d:5f:7e:10:f3:a1:38:d5:
71:ca:a3:c8:9d:61:1e:77:ec:99:4f:03:d0:8c:1a:99:53:7a:
be:d6:91:1e:67:b6:f3:36:95:4c:61:7e:c6:3f:88:b5:71:68:
2d:c4:8f:cb:77:cd:09:90:43:6f:12:83:b1:42:3b:72:e7:04:
c7:24:f4:6c:e5:d3:d1:9d:f1:3e:71:f8:32:4e:57:74:39:3d:
d9:14:b7:c7:d6:e3:ab:b4:f0:da:f0:51:f1:2a:34:e4:f4:37:
21:7a:f3:9b:73:f9:e9:7e:ca:c1:32:ee:a8:dd:a6:c6:1e:9d:
3c:1f:91:90:3c:a1:e9:9c:25:4e:35:1e:b3:b2:a2:7c:9e:e9:
a6:03:f7:4b:70:42:80:9a:6a:51:5f:a9:f6:3c:bd:c2:aa:92:
8c:54:46:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:56:18 2026 by rpki-client