Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/EeslUpD1I8TFbBQdJf-NnfXh9AQ.roa
File: EeslUpD1I8TFbBQdJf-NnfXh9AQ.roa (raw, json)
Hash identifier: PmtHfipPYXh7u9N739BZxtThTCPSrvPzcaVJVOOzV6A=
Subject key identifier: 11:EB:25:52:90:F5:23:C4:C5:6C:14:1D:25:FF:8D:9D:F5:E1:F4:04
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 01A19E9C4729CF0D61FFC16D40570F4B4BF5
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/EeslUpD1I8TFbBQdJf-NnfXh9AQ.roa
Signing time: Mon 02 Nov 2026 23:33:24 +0000
ROA not before: Mon 02 Nov 2026 23:33:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 2.57.68.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 06:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9e:9c:47:29:cf:0d:61:ff:c1:6d:40:57:0f:4b:4b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Nov 2 23:33:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11eb255290f523c4c56c141d25ff8d9df5e1f404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:1f:cb:8b:51:07:6d:cf:98:23:f5:95:79:23:
e1:cb:e0:04:dd:62:c1:0a:a7:43:ed:42:9d:e9:c4:
f7:74:78:52:73:08:aa:39:72:b2:2b:de:22:31:14:
c1:bb:f5:2f:7a:20:8c:49:bd:6a:aa:8c:58:a7:d2:
ef:10:2e:ed:5b:a1:dd:0f:0c:8a:6f:fb:e6:a5:57:
44:05:0a:41:88:fa:a7:63:48:16:80:6c:f3:be:93:
a3:4e:92:9f:34:a4:5a:36:18:d8:3c:42:90:d7:15:
90:72:ff:d0:5f:10:dd:df:98:8f:94:61:3d:0b:b0:
f6:2d:32:42:9d:33:3e:56:2c:c5:d4:52:e1:91:a3:
15:8f:e3:be:a6:35:fc:f9:eb:af:5c:75:95:77:1a:
f5:9d:c9:75:b2:01:64:65:dd:5b:5a:65:10:a2:4b:
34:1b:a7:c2:21:7a:35:fd:dc:da:75:d6:78:a8:4f:
fd:c1:49:69:53:76:b6:91:3a:ca:03:73:f2:34:0e:
eb:44:9c:fa:98:ce:bb:5b:45:f3:4c:3b:20:96:51:
d5:d4:f8:a9:e7:dd:ec:71:ae:63:76:e6:9a:14:d5:
41:3a:e5:e8:38:01:64:d8:e8:3d:37:f1:f6:fa:85:
98:31:fe:c9:3c:5a:17:9c:4f:a1:dc:9d:6b:7d:81:
f8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EB:25:52:90:F5:23:C4:C5:6C:14:1D:25:FF:8D:9D:F5:E1:F4:04
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/EeslUpD1I8TFbBQdJf-NnfXh9AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.68.0/23
Signature Algorithm: sha256WithRSAEncryption
80:64:12:0b:44:36:6f:c5:2f:62:8b:cc:1e:95:9f:25:02:f2:
d6:4b:d7:dc:d9:2c:25:d5:81:c1:d1:2d:01:75:ba:13:32:d0:
92:a8:e4:c1:3e:bf:ad:4d:50:25:f6:c7:05:94:e2:3f:ae:af:
f7:f5:9f:8a:d0:05:7b:45:1a:c3:1e:71:8d:41:f8:af:a8:81:
2a:55:80:41:b6:a2:7b:50:60:8f:0a:5e:0b:b3:c7:5f:29:d8:
82:24:ec:a4:fa:fb:89:bc:c5:34:2e:44:af:fb:7e:5b:9b:59:
41:14:e2:e2:d8:5b:3b:07:5d:92:9d:20:e7:3c:ce:8a:fc:ec:
ca:a6:31:38:63:fc:76:20:2b:69:dc:29:1b:2b:33:ab:0b:a9:
9f:17:b9:cd:8b:0d:57:0c:63:8b:1d:11:7a:ab:46:fd:ee:e5:
46:e5:5a:74:d8:42:ac:99:14:79:80:20:3b:2a:85:68:46:fe:
a7:4a:53:5e:77:5e:06:41:99:1d:26:b5:e2:c6:65:a8:4f:2c:
f7:63:a7:38:5a:e8:a4:e2:22:0e:3f:75:9d:d3:e3:1f:7a:3c:
8f:be:22:40:c2:b6:64:5a:87:c6:7d:7e:8f:a1:ce:e8:b5:db:
dc:9f:09:06:63:fd:d3:b8:53:9d:16:67:b5:15:2a:5d:f8:4d:
b0:05:a1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:47:36 2026 by rpki-client