Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/ex3V8jEPHC15OeyVNhlPf888Muk.roa
File: ex3V8jEPHC15OeyVNhlPf888Muk.roa (raw, json)
Hash identifier: lL8rDUO+fDpEtiUvL1L8BlBnX7C9eguwrFBzGsL8ZPQ=
Subject key identifier: 7B:1D:D5:F2:31:0F:1C:2D:79:39:EC:95:36:19:4F:7F:CF:3C:32:E9
Certificate issuer: /CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Certificate serial: 019E7F7F905A450120D7EB057B869B88E3F3
Authority key identifier: F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/ex3V8jEPHC15OeyVNhlPf888Muk.roa
Signing time: Sun 31 May 2026 19:25:26 +0000
ROA not before: Sun 31 May 2026 19:25:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209809
IP address blocks: 194.26.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7f:7f:90:5a:45:01:20:d7:eb:05:7b:86:9b:88:e3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Validity
Not Before: May 31 19:25:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b1dd5f2310f1c2d7939ec9536194f7fcf3c32e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:1b:65:60:9e:23:a2:f5:38:4e:d6:e0:49:
29:d2:7f:75:03:ae:26:11:4b:a8:3b:16:7b:e1:77:
8a:43:74:20:4b:bd:4b:c1:18:c1:86:fb:7e:eb:86:
a5:93:2e:e1:75:1d:8f:4e:18:f9:af:1c:7a:14:2a:
eb:02:54:a3:f1:16:b2:f2:a1:cc:4a:fc:1c:dc:f2:
6f:85:64:23:13:ab:be:6a:c3:f7:a6:4d:6a:79:76:
19:fd:22:1d:72:ed:3d:6d:d9:40:76:47:76:0d:f1:
84:dc:14:d3:2b:39:38:d3:26:e1:d6:f8:e6:75:cb:
49:e5:b4:22:e5:69:de:c5:f8:7d:09:be:b8:17:8c:
38:ea:08:63:94:d1:d3:45:7e:79:b0:d7:8b:b5:a8:
12:00:57:b8:63:44:4f:64:3b:06:da:1e:c7:16:59:
1c:2e:34:02:0e:bc:bf:0b:62:bc:d3:ac:1f:32:43:
45:6f:65:43:55:ad:79:f6:01:c9:8f:5e:15:b4:65:
d7:b4:95:52:8b:08:78:cd:77:54:b8:a9:77:5a:09:
5e:3a:f2:a1:c3:9c:32:6e:18:83:6b:d0:ca:ab:1a:
b9:12:a9:f8:1c:9a:bc:b3:cd:08:c6:60:94:51:f5:
2c:df:78:5b:5f:57:80:38:c8:a4:fe:15:97:bd:61:
ec:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1D:D5:F2:31:0F:1C:2D:79:39:EC:95:36:19:4F:7F:CF:3C:32:E9
X509v3 Authority Key Identifier:
keyid:F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/ex3V8jEPHC15OeyVNhlPf888Muk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.66.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:06:ad:74:2c:5e:63:c4:28:86:29:f1:71:10:04:b8:19:23:
d2:92:a1:64:29:d4:3b:2d:0f:f5:49:a8:cb:01:0b:52:1b:4f:
8a:24:aa:c9:c1:10:d2:62:3f:dc:ff:3a:3c:db:63:f8:65:85:
24:e4:bb:6b:67:53:92:12:30:8b:d4:4c:1c:b0:e9:f5:d3:a9:
54:f1:73:db:0c:c2:73:8f:05:e6:55:5d:01:14:9d:79:4e:c2:
ab:56:87:ee:5d:ed:38:d2:d8:0d:a0:25:b5:19:2b:55:14:6f:
c9:d2:1c:ca:5b:00:24:ba:1b:7a:40:bd:02:bb:63:d1:70:7f:
55:3a:35:44:ab:0a:42:6d:ae:5e:52:fc:6a:ad:50:b2:28:59:
25:5b:b3:f8:a1:83:5c:fb:24:b9:1f:f5:fd:b0:a8:51:6e:f1:
f9:b1:55:0a:f4:10:5a:4c:8d:f8:35:5f:31:ec:b4:95:02:75:
86:b6:31:18:44:ec:13:75:a1:33:6a:4f:b8:d7:03:ca:6d:d1:
5f:72:ba:04:1a:25:ae:a1:10:93:d9:ee:49:b4:84:38:76:bc:
ce:f8:ce:b2:86:d9:c3:b4:54:e7:e5:f4:e8:b7:2d:b6:c9:37:
ca:bc:12:ed:0d:da:80:b8:e4:ea:a2:0e:9a:90:f2:e8:43:ce:
94:8e:d6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:23:33 2026 by rpki-client