Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/eWVQPVQSeSadCnbc8k8fzAA1kt0.roa
File: eWVQPVQSeSadCnbc8k8fzAA1kt0.roa (raw, json)
Hash identifier: ZjkIK+1o2TdBAwAKvQQCjtqmNuvCB7lB+5aK24mPjzo=
Subject key identifier: 79:65:50:3D:54:12:79:26:9D:0A:76:DC:F2:4F:1F:CC:00:35:92:DD
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019D2E43F20E994C12DC484A7B2FE5B3C881
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/eWVQPVQSeSadCnbc8k8fzAA1kt0.roa
Signing time: Fri 27 Mar 2026 07:48:17 +0000
ROA not before: Fri 27 Mar 2026 07:48:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22773
IP address blocks: 82.197.200.0/23 maxlen: 24
84.245.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2e:43:f2:0e:99:4c:12:dc:48:4a:7b:2f:e5:b3:c8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 27 07:48:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7965503d541279269d0a76dcf24f1fcc003592dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:e5:77:5c:ce:73:b8:c8:55:ce:0b:18:cf:
c6:3e:81:83:c1:51:92:0e:ee:18:a2:1f:54:ca:ec:
c9:5e:1e:a5:cb:9c:2a:71:e8:0a:59:03:12:ad:10:
cd:26:4f:10:80:34:61:b7:07:05:7e:4f:90:42:6f:
3d:f3:a0:2f:9f:cd:3b:c0:13:25:1d:c1:cd:42:37:
11:f2:9f:a6:b8:45:2d:62:c9:05:d2:93:87:c9:bf:
e0:cf:4a:c5:6d:01:9b:44:33:ec:3e:4c:d8:c2:db:
42:e4:c5:29:5f:e2:6b:56:cc:0e:e5:bc:62:36:42:
d6:33:ba:9e:07:79:ce:b8:aa:a4:10:c9:d3:4e:4c:
d3:02:dd:24:33:fc:ba:7b:de:87:9d:28:81:ca:80:
ef:11:c8:4f:34:33:a9:4d:64:ac:1d:d1:6b:5a:41:
b9:a0:0f:26:b6:91:f6:6c:b9:fb:aa:ac:4d:c4:c6:
35:df:e7:8e:b7:b6:07:b7:c4:f8:38:4c:14:5a:b6:
06:1e:24:ad:ed:f4:04:20:73:1e:21:1f:a2:b2:17:
e0:6c:68:17:58:30:ae:05:43:e8:0f:2e:48:e5:d5:
b2:e0:d3:09:89:ca:dd:96:8f:7b:1f:08:2f:31:a3:
6f:3c:00:df:c5:18:11:17:7d:ab:f1:9c:27:92:9c:
36:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:65:50:3D:54:12:79:26:9D:0A:76:DC:F2:4F:1F:CC:00:35:92:DD
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/eWVQPVQSeSadCnbc8k8fzAA1kt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.200.0/23
84.245.26.0/23
Signature Algorithm: sha256WithRSAEncryption
60:11:a0:9b:03:31:17:33:38:ee:d8:0e:80:90:e1:af:1c:f1:
4e:79:92:9c:c3:79:b5:58:58:c0:40:75:90:8a:37:b3:2b:b2:
c6:40:eb:b0:36:0a:b5:fb:e1:31:58:89:d9:96:93:10:80:6c:
03:5e:46:bf:be:c3:06:df:0d:15:5d:c7:8f:b8:7d:d6:73:95:
93:3e:cf:d4:f3:8b:a0:a7:8b:86:4b:1f:34:3b:27:d7:5c:fd:
9a:e7:37:74:48:8f:51:9e:58:d7:2b:1a:7c:ee:3c:34:fa:67:
e8:bf:c5:ba:d3:b0:ea:fe:da:1b:14:19:40:ef:7e:3b:df:b1:
7f:db:15:87:55:08:08:1a:3d:2e:4d:94:06:df:40:fd:ea:28:
3e:fd:1d:3b:27:d2:53:4d:3f:bc:93:3b:18:12:fd:73:5c:82:
01:e5:af:5e:5a:68:62:de:e8:d0:2e:89:cb:e9:f3:78:1d:24:
3e:58:b1:be:ec:ea:b0:10:e1:8e:fb:6b:ee:76:22:ce:c6:f7:
b6:61:2e:ba:95:c0:ec:69:88:62:63:b2:74:f2:be:4d:f9:41:
8e:8f:07:1c:11:e0:e4:7c:19:d1:9c:fd:5e:a6:1f:7b:52:b2:
28:41:d4:0d:95:85:48:fb:67:a6:9b:f1:8a:31:d2:cc:aa:11:
45:61:ad:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 15:21:46 2026 by rpki-client