Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/eNtOOMu3efkHFImIDr3W4jQSl0Y.roa
File: eNtOOMu3efkHFImIDr3W4jQSl0Y.roa (raw, json)
Hash identifier: kN/IQTDYEjX1zm6a/DvMPRJ6gmkSX9i9jI00Ii6v7/o=
Subject key identifier: 78:DB:4E:38:CB:B7:79:F9:07:14:89:88:0E:BD:D6:E2:34:12:97:46
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 01A0909AED675AFC80AD6BA8479C03B9FEDE
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/eNtOOMu3efkHFImIDr3W4jQSl0Y.roa
Signing time: Fri 11 Sep 2026 13:14:27 +0000
ROA not before: Fri 11 Sep 2026 13:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 5.35.192.0/21 maxlen: 24
62.112.30.0/24 maxlen: 24
85.204.160.0/22 maxlen: 24
88.135.96.0/20 maxlen: 24
94.26.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:9a:ed:67:5a:fc:80:ad:6b:a8:47:9c:03:b9:fe:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Sep 11 13:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78db4e38cbb779f9071489880ebdd6e234129746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9b:56:cb:ef:1c:2e:6b:46:49:f4:c9:cb:43:
7f:cf:2f:82:ed:13:5c:77:8f:8d:b5:ff:ca:06:70:
7c:c0:07:ab:e1:0e:38:54:71:3b:b9:f6:fc:5a:d9:
8b:0c:1e:58:ec:fd:48:34:a0:fd:32:59:39:89:ab:
56:d6:6b:1a:51:51:19:cc:56:db:7b:5d:df:2c:66:
4c:a5:ad:65:33:a7:6f:70:44:1c:b7:01:9b:ff:1a:
2f:60:f4:ca:1d:3d:de:8f:b9:42:60:eb:68:fc:6b:
9d:6f:09:a4:4e:f9:1a:d9:8b:b4:6e:42:74:81:14:
fc:35:6d:a6:76:96:ed:b0:c0:0c:14:ce:64:73:9c:
c1:9f:61:85:ac:9a:fd:09:ab:e9:22:5e:37:95:24:
2e:c0:b4:17:6c:21:df:f0:db:34:d1:de:cb:0f:13:
c8:8c:40:a8:99:96:37:e6:2e:bb:c9:67:74:65:f4:
48:e1:8f:b6:1c:51:19:20:ef:15:e5:11:a4:f6:9c:
c4:a4:65:b8:6e:4f:61:b1:b0:cb:b4:06:41:6c:8a:
80:aa:83:30:b3:61:1c:19:88:35:dd:71:f3:64:6c:
cb:90:52:03:89:72:26:e2:94:0e:5f:8c:08:26:dc:
28:93:5f:fa:fb:41:a9:97:23:d9:3c:59:00:d3:26:
1d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DB:4E:38:CB:B7:79:F9:07:14:89:88:0E:BD:D6:E2:34:12:97:46
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/eNtOOMu3efkHFImIDr3W4jQSl0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
62.112.30.0/24
85.204.160.0/22
88.135.96.0/20
94.26.64.0/23
Signature Algorithm: sha256WithRSAEncryption
10:d5:91:b6:48:e0:a7:e9:ab:5f:5c:36:3c:f4:9b:f7:2f:52:
74:e2:64:8b:44:7a:ab:5a:e1:b5:97:b6:d1:72:f7:af:82:bc:
72:e7:01:e0:24:e0:86:2b:1d:fe:96:79:99:5b:dc:fc:9d:6a:
f9:f9:10:df:e0:57:2f:a9:13:c8:aa:b8:8f:b6:dc:02:4b:a9:
03:cf:7f:5c:a1:c3:90:5d:d2:22:08:fd:8b:5e:07:6c:b5:28:
cc:97:71:d9:de:37:29:01:7a:0a:34:2f:52:7a:26:a3:5b:9d:
4b:ec:a9:c1:ce:e6:12:89:2e:74:5c:00:c8:99:72:ab:6a:0f:
78:d7:10:f7:c6:80:c3:1f:f2:b3:04:b4:7e:50:d7:20:5a:17:
4d:d6:52:27:79:28:0c:55:dc:2c:8c:b7:ee:3d:79:49:6e:70:
70:5c:ac:35:67:a9:ca:e9:59:b6:a5:68:5d:a6:08:b3:a7:f1:
51:92:1a:86:c2:26:3f:5d:7a:5c:df:4c:74:59:b8:e2:af:2a:
77:d8:51:f0:ba:55:49:73:2a:5f:2f:c9:49:11:91:5a:3d:87:
f1:58:d2:a1:29:1f:a6:95:02:45:02:f6:3c:fa:01:99:16:46:
df:6f:1e:20:17:84:f1:58:b0:e2:4a:09:4d:6e:4e:e6:43:05:
44:0f:fc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 02:25:25 2026 by rpki-client