Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/EhIrDMvv2bbYxoaydZ64Z1wecEk.roa
File: EhIrDMvv2bbYxoaydZ64Z1wecEk.roa (raw, json)
Hash identifier: B+rD4MOPYze5FraoeomqCuEzRLr/Lo37+NB8LM8GEpI=
Subject key identifier: 12:12:2B:0C:CB:EF:D9:B6:D8:C6:86:B2:75:9E:B8:67:5C:1E:70:49
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F18AD25386D22C5CD8A9F78423E9283C6
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/EhIrDMvv2bbYxoaydZ64Z1wecEk.roa
Signing time: Tue 30 Jun 2026 13:17:07 +0000
ROA not before: Tue 30 Jun 2026 13:17:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 110.34.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ad:25:38:6d:22:c5:cd:8a:9f:78:42:3e:92:83:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jun 30 13:17:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12122b0ccbefd9b6d8c686b2759eb8675c1e7049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:68:16:98:1a:d0:dc:86:cd:40:22:b4:b7:b6:
65:43:e0:bb:28:f9:f9:67:f8:63:bf:1c:b2:6d:ac:
85:29:9a:a5:b5:58:a4:6d:ac:98:e9:44:24:f4:1c:
39:b0:d7:d0:8d:2d:4a:6d:2e:a9:d0:fe:c2:9d:da:
dc:ff:39:48:c6:36:0c:c0:ab:05:88:d8:79:84:c3:
8f:86:e8:ca:d8:6a:24:fe:d3:62:d8:97:b4:3b:f3:
a6:e4:fd:f5:7a:95:63:9b:82:c8:d0:ca:3a:a1:77:
9d:ae:e4:e2:99:4f:80:8a:c3:15:e2:ad:cf:6b:c8:
10:47:f2:1f:85:bf:d8:08:d8:20:5c:a9:fd:ef:af:
82:4a:41:2c:49:17:14:db:5d:74:ec:be:70:46:d8:
f9:ce:1c:df:24:6d:ab:a1:f9:5e:2f:83:9e:63:6e:
79:fe:18:36:9a:3a:98:b8:e3:e1:77:ea:2e:92:7c:
d6:b5:09:3a:13:02:b9:d0:b9:de:e6:54:bf:cb:87:
ae:04:bb:b5:b9:f9:e5:4f:b1:94:31:4b:39:d9:58:
ae:e9:8b:77:c3:69:51:c5:fd:4f:fb:4b:72:ab:7a:
29:2c:cc:bb:bc:25:1a:98:ad:1b:7f:1e:d4:bc:ac:
63:f9:4f:ec:5c:57:b4:48:8f:2d:6f:64:cd:3d:02:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:12:2B:0C:CB:EF:D9:B6:D8:C6:86:B2:75:9E:B8:67:5C:1E:70:49
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/EhIrDMvv2bbYxoaydZ64Z1wecEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.34.38.0/24
Signature Algorithm: sha256WithRSAEncryption
43:b7:91:32:4d:f1:68:a4:29:d9:5b:f1:8a:22:a4:43:50:63:
48:5c:9d:ea:e0:08:82:94:b0:a1:7f:a9:2b:a2:04:cb:ec:68:
4e:3d:5d:20:cf:dd:6f:99:d6:e7:b8:76:66:d7:a3:68:20:ea:
54:b7:05:eb:32:c8:20:16:f6:f3:5b:7d:20:1e:f0:68:0c:1e:
84:c8:86:bd:1c:3b:e4:19:fb:1e:89:a0:15:89:d2:f6:20:22:
72:f5:68:28:f0:44:5c:2a:e4:49:d2:73:78:f6:6c:50:43:f7:
6e:fb:bb:8c:6c:48:b8:69:f0:38:6e:f2:66:15:a4:7d:a3:ba:
45:fd:b8:a8:8f:b9:b0:6b:e6:48:64:10:55:b5:7b:6b:4c:08:
8d:f4:64:32:26:67:24:fd:fd:df:39:b7:58:d5:bf:33:d7:ad:
a4:84:87:cb:94:71:8e:f7:bd:bd:83:8c:b2:3f:d5:bc:79:09:
af:f5:2b:2b:6a:02:9b:05:75:3b:74:f4:87:78:1d:3c:a8:33:
98:b0:73:1e:9d:ec:76:76:1a:33:79:df:df:9b:a8:30:ef:d6:
71:3e:d9:04:56:0f:5c:c1:3c:ce:44:e5:26:84:5c:9d:04:da:
ff:92:a1:f3:a7:75:fa:86:27:3e:f5:3f:31:2e:32:80:73:d4:
d1:26:6b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:27 2026 by rpki-client