Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/E2z6-aE0lSQ3PEiEzxW-JiraDEE.roa
File: E2z6-aE0lSQ3PEiEzxW-JiraDEE.roa (raw, json)
Hash identifier: KsnALsa02zQjMMj5q5msrnek1tk5/ZfIcaQoMmke+mE=
Subject key identifier: 13:6C:FA:F9:A1:34:95:24:37:3C:48:84:CF:15:BE:26:2A:DA:0C:41
Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial: 019F236922B48D59986AF1A265030C9B375F
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/E2z6-aE0lSQ3PEiEzxW-JiraDEE.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209371
IP address blocks: 188.241.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 18:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:22:b4:8d:59:98:6a:f1:a2:65:03:0c:9b:37:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=136cfaf9a1349524373c4884cf15be262ada0c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:66:22:b8:1f:02:27:b1:88:63:79:2a:f1:
62:0a:a9:73:45:f1:f7:3b:86:ae:93:4a:a2:de:c1:
b9:1e:df:94:13:72:41:38:f3:36:6e:ec:07:43:f1:
87:20:c1:74:30:9a:ad:ed:7d:d6:2c:16:15:98:16:
ac:0b:0e:c7:8d:8a:e9:a6:35:b9:e0:51:b8:33:87:
ac:26:b4:80:a6:72:14:0a:d0:63:f3:5e:b0:ef:a3:
d5:e3:6a:06:ea:e1:e6:3f:42:b6:25:6a:2a:03:f9:
25:e6:d7:41:1b:d4:b0:fd:9d:6b:6b:bb:80:8d:69:
07:6e:f4:fb:a3:45:10:7c:55:dd:d3:69:38:bb:95:
10:34:7e:af:44:50:a2:ca:bd:79:ad:d6:4e:53:fc:
d8:ef:bd:a7:c3:28:b4:68:32:3e:16:b9:0d:dc:54:
64:5e:01:d6:d3:a0:f8:e5:2d:cd:f3:35:f0:8e:01:
c6:ab:32:a7:a3:06:8d:3b:00:b3:69:73:ba:99:df:
fb:48:2b:1b:f0:9f:9c:b7:97:5e:f6:56:cb:a7:31:
0f:d9:86:16:06:b9:61:66:c6:dd:a5:14:c4:8b:d6:
7b:a4:8d:b2:7c:77:3b:2c:26:ea:96:94:e7:cb:56:
9d:d9:ee:3d:f9:53:73:67:5f:f4:a2:e4:a2:e2:85:
db:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6C:FA:F9:A1:34:95:24:37:3C:48:84:CF:15:BE:26:2A:DA:0C:41
X509v3 Authority Key Identifier:
keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/E2z6-aE0lSQ3PEiEzxW-JiraDEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.74.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:8d:dc:47:23:c4:14:65:4a:ff:25:b9:1b:7a:5e:85:3f:2f:
02:10:25:ae:c1:3d:3c:78:c3:2c:41:d0:05:b7:10:aa:bc:1a:
d4:27:ec:44:3b:4d:d6:6c:ac:40:d4:58:b1:ca:a5:69:19:3f:
ca:c0:f4:b4:42:f5:af:db:7a:b6:d6:68:3c:7f:83:52:93:6c:
23:c2:59:d3:85:87:d2:da:eb:dd:a7:84:48:b7:89:29:64:76:
39:92:21:bb:b1:d3:6c:95:66:05:1b:de:eb:90:e2:94:f4:ca:
57:93:c1:70:d5:00:d9:5b:c3:e3:cb:56:b7:41:82:45:b8:23:
bb:51:af:33:1f:78:a9:3b:64:31:2b:ea:27:67:86:d3:d5:1c:
62:ef:78:cf:e2:d3:ab:df:9e:4d:29:46:20:b3:c1:db:da:af:
c4:b9:c8:03:43:29:1b:d4:1f:58:c2:15:be:c9:30:26:60:92:
98:8c:9c:49:3e:32:39:7b:cb:67:f7:14:0d:95:81:62:18:b2:
a8:db:95:a0:62:51:46:a5:87:72:87:1c:92:ca:77:78:2f:87:
3c:ba:80:3c:69:0f:95:8e:74:11:f8:ea:99:79:34:4e:f0:96:
cf:47:2e:f0:10:d8:cf:a8:76:e1:07:b3:cb:3d:9d:f5:fe:5d:
3c:f6:65:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:18:19 2026 by rpki-client