Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/E-vQ4VBE5BmIEK3Pymf5Bl74aPQ.roa
File: E-vQ4VBE5BmIEK3Pymf5Bl74aPQ.roa (raw, json)
Hash identifier: e/APBHu0Z1p1I3GI0nbRZhfiEz21+ooOMmJwnBq1qrM=
Subject key identifier: 13:EB:D0:E1:50:44:E4:19:88:10:AD:CF:CA:67:F9:06:5E:F8:68:F4
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A0EE2C5BDA2171AFC66D4285AC3A27B088
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/E-vQ4VBE5BmIEK3Pymf5Bl74aPQ.roa
Signing time: Tue 29 Sep 2026 17:17:59 +0000
ROA not before: Tue 29 Sep 2026 17:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218914
IP address blocks: 192.144.78.0/24 maxlen: 24
222.167.245.0/24 maxlen: 24
222.167.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:2c:5b:da:21:71:af:c6:6d:42:85:ac:3a:27:b0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Sep 29 17:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13ebd0e15044e4198810adcfca67f9065ef868f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:17:72:fa:7b:63:a3:70:65:99:65:42:73:
06:88:bf:bd:a7:de:60:55:79:07:78:bb:f9:d8:60:
52:56:25:8d:a0:a9:13:3a:9c:59:2b:d2:be:3e:7c:
89:96:c3:40:44:86:18:54:89:f5:47:14:65:ef:e3:
49:38:22:cd:19:0f:8b:54:22:8c:8d:98:32:8f:74:
42:ae:a1:a5:ae:a3:ad:74:01:5b:97:f5:9a:b0:54:
ab:99:78:d5:82:e8:b7:f5:b4:77:a3:d4:40:be:d2:
fb:1c:2f:f1:39:f3:a1:56:84:23:48:6e:37:e3:f3:
8d:dc:ce:d2:ff:6a:55:56:8a:ab:3f:99:9e:53:f5:
32:ac:7f:a8:ef:d7:aa:8e:14:ce:af:14:0a:0b:2c:
5e:17:48:58:81:10:13:a8:3d:8a:6d:46:9f:9e:2c:
cf:74:55:a6:dc:a4:27:3e:55:e9:d9:07:cb:50:e2:
31:08:1e:fd:ca:1d:e1:22:e2:54:3e:68:51:7b:9b:
98:a9:ce:46:a7:a2:9f:62:70:fc:fb:b3:fb:b1:97:
b7:dc:30:ce:70:60:ca:73:9f:6c:8f:6c:28:00:b0:
df:9d:5c:67:9f:3a:5b:1d:24:1c:ae:40:08:c2:5d:
fe:07:f6:e8:b6:d3:f5:6a:28:23:94:50:96:a0:53:
e2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EB:D0:E1:50:44:E4:19:88:10:AD:CF:CA:67:F9:06:5E:F8:68:F4
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/E-vQ4VBE5BmIEK3Pymf5Bl74aPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.78.0/24
222.167.245.0/24
222.167.248.0/24
Signature Algorithm: sha256WithRSAEncryption
94:c7:4f:38:96:5d:70:29:93:49:ad:5e:03:e4:e9:6d:c3:1b:
46:3e:0a:1d:25:f5:c1:bf:66:82:51:18:c4:1d:26:e7:1e:b0:
22:5d:4f:c9:2c:c1:46:52:74:51:9c:f2:ce:ad:ee:0d:7f:4c:
29:b2:ef:75:7f:59:d2:34:32:c8:44:1d:a1:e6:f2:d0:41:85:
db:87:e9:c0:86:49:81:d2:4a:e3:b6:0b:43:55:ed:d9:46:fd:
a7:2b:a4:3b:9f:91:b4:62:3b:80:91:48:32:00:51:4a:5a:d2:
d8:8c:91:4f:4a:21:10:3b:fd:4a:de:06:f8:78:68:ee:5f:22:
5a:a0:2a:f6:fc:f8:28:67:61:3a:3d:f0:0f:65:78:3a:ae:1e:
60:c9:31:b9:68:53:a8:ce:f8:f4:e9:41:e1:72:e8:3d:8d:f5:
9e:8c:46:f4:58:19:60:29:9b:71:de:c8:81:0a:4a:0d:51:ff:
17:53:c0:f9:ae:a0:8d:3d:32:9c:55:f8:7d:4c:47:04:ec:d3:
22:44:b5:6f:28:a9:91:8a:93:c9:ea:0c:25:f1:91:66:d8:84:
43:65:03:e8:94:52:0b:e4:64:82:28:1b:c0:26:bb:a3:b4:a0:
d2:06:62:c7:5a:19:9b:31:f1:e8:6b:7b:26:5c:e9:75:a9:36:
5b:c8:6b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:20:42 2026 by rpki-client