Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/eU3WvqTQZ2fre7Ec2nVr3mIM1X0.roa
File: eU3WvqTQZ2fre7Ec2nVr3mIM1X0.roa (raw, json)
Hash identifier: XN1QJeT9QeabS5s3vpkRCuosS5N47BOATxEJo4iAxOk=
Subject key identifier: 79:4D:D6:BE:A4:D0:67:67:EB:7B:B1:1C:DA:75:6B:DE:62:0C:D5:7D
Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229
Certificate serial: 01A0EB8F06F519554E4EEFEEFAF5B73EC209
Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/eU3WvqTQZ2fre7Ec2nVr3mIM1X0.roa
Signing time: Tue 29 Sep 2026 05:06:54 +0000
ROA not before: Tue 29 Sep 2026 05:06:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57630
IP address blocks: 2.152.76.0/24 maxlen: 24
5.152.152.0/23 maxlen: 23
31.12.80.0/22 maxlen: 22
46.33.16.0/23 maxlen: 23
117.55.200.0/23 maxlen: 23
134.65.164.0/22 maxlen: 22
194.179.134.0/23 maxlen: 23
217.11.175.0/24 maxlen: 24
217.177.8.0/23 maxlen: 23
2a02:7e00::/29 maxlen: 29
2a02:7e00:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:8f:06:f5:19:55:4e:4e:ef:ee:fa:f5:b7:3e:c2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229
Validity
Not Before: Sep 29 05:06:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=794dd6bea4d06767eb7bb11cda756bde620cd57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:ae:cd:3a:cf:36:62:30:9a:b0:0f:64:46:
bc:d8:29:df:b5:36:61:70:25:56:ad:71:c3:50:18:
56:d6:39:eb:4f:cd:83:3e:a0:a4:f0:6e:03:1b:c3:
45:48:fc:4b:a5:1f:47:34:81:72:e0:f4:46:3e:60:
81:53:35:88:16:a3:a7:d9:c2:56:b9:4e:2e:a0:09:
46:76:72:e3:b9:8b:e1:e0:cb:7e:04:da:e0:33:26:
70:11:fb:d9:f3:f7:4b:4e:50:cf:a2:12:4d:e4:99:
4b:9a:16:26:0b:e8:70:25:20:a3:5d:ab:e3:e9:11:
11:84:f5:27:e9:fb:da:28:f5:db:b9:da:bc:26:ea:
76:ef:c3:34:3f:2e:b6:0a:18:8f:57:38:58:92:62:
a5:04:16:e5:59:15:a0:17:8f:99:1a:3e:e7:7c:a0:
8b:f0:8a:f6:fc:0b:95:fb:3b:d9:37:2b:f6:46:5b:
49:68:d8:cd:22:8f:3a:f2:47:b9:75:59:f1:d0:c5:
eb:10:c4:93:97:df:19:05:30:f6:5e:09:03:b0:9b:
de:d0:4b:f0:15:6d:db:19:8c:98:ac:dc:09:4c:d0:
5b:a0:52:53:ee:95:e9:89:0d:cb:f5:ab:66:75:74:
f9:c0:a4:78:86:54:71:5d:85:9c:95:b8:e4:72:b5:
7f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4D:D6:BE:A4:D0:67:67:EB:7B:B1:1C:DA:75:6B:DE:62:0C:D5:7D
X509v3 Authority Key Identifier:
keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/eU3WvqTQZ2fre7Ec2nVr3mIM1X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.152.76.0/24
5.152.152.0/23
31.12.80.0/22
46.33.16.0/23
117.55.200.0/23
134.65.164.0/22
194.179.134.0/23
217.11.175.0/24
217.177.8.0/23
IPv6:
2a02:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
bf:c7:77:50:49:3a:b1:60:9b:4e:b5:e1:4f:e1:06:69:ff:5e:
3c:de:46:6d:79:e3:6e:b8:d1:5c:d7:80:3e:10:91:e8:aa:1c:
9b:66:35:7d:6b:49:ff:48:15:52:93:5d:52:9d:e3:f8:80:df:
ea:56:a1:f7:b0:4e:e2:26:47:ab:d6:ca:3d:fa:0d:b5:a1:5d:
02:88:1d:c7:19:ff:f2:1e:3c:45:1f:32:9c:bc:79:ae:79:e1:
99:90:1e:84:74:7a:87:b1:85:3a:75:03:b8:3d:67:84:2d:77:
23:4d:c0:71:95:68:a8:50:58:45:28:db:f4:f6:cc:d4:ac:d6:
3c:4d:ee:22:92:c4:55:25:00:01:c6:c2:39:46:80:8e:01:95:
05:67:b1:6d:fa:11:2c:99:f1:5b:46:24:3d:35:17:52:53:77:
eb:64:52:51:68:73:ee:c0:c4:f2:65:f3:9a:16:c2:e6:ba:fb:
d9:53:45:8d:2b:38:db:c3:88:44:bf:96:37:e8:50:77:cc:44:
3f:ea:9e:26:49:78:33:26:c2:b2:60:cc:c5:69:6d:6d:04:b3:
73:c0:83:02:04:15:66:99:6d:a2:ba:26:05:2f:28:95:63:42:
90:b6:a9:49:60:44:fe:dd:1d:39:6a:e4:b8:4a:b3:81:c3:01:
ca:8e:cd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:48:19 2026 by rpki-client