Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E3Ra6jvJP_Vc_RcgIFafDPdg7vQ.roa
File: E3Ra6jvJP_Vc_RcgIFafDPdg7vQ.roa (raw, json)
Hash identifier: 7cZPs8KX2X+koxuKGVDPvvgrc1f6ceZSrAlADXt8p2s=
Subject key identifier: 13:74:5A:EA:3B:C9:3F:F5:5C:FD:17:20:20:56:9F:0C:F7:60:EE:F4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019E3A39F4B17D2D81580F79E158B49CB1C1
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E3Ra6jvJP_Vc_RcgIFafDPdg7vQ.roa
Signing time: Mon 18 May 2026 08:35:37 +0000
ROA not before: Mon 18 May 2026 08:35:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 64.226.156.0/24 maxlen: 24
167.94.164.0/24 maxlen: 24
185.155.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:39:f4:b1:7d:2d:81:58:0f:79:e1:58:b4:9c:b1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 18 08:35:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13745aea3bc93ff55cfd172020569f0cf760eef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:c5:32:dc:54:01:1d:8f:14:14:84:88:95:
d6:ff:ae:a6:d2:70:af:c3:36:f4:ba:1c:e8:43:53:
91:df:b8:bf:0d:a2:ed:0d:32:3a:46:a2:0d:ad:b0:
4b:75:24:c6:53:eb:5a:42:aa:0f:0e:41:d5:ad:9c:
fb:50:48:91:57:1d:9c:e4:0f:03:8e:95:34:99:b7:
71:71:89:1e:0f:12:73:9a:74:d5:46:07:f6:e5:b4:
15:01:12:81:c9:97:b9:f9:71:c2:9e:98:9c:8d:ea:
43:45:03:b3:ee:e1:b3:00:42:4c:3e:27:70:9e:13:
98:8a:15:b5:05:b3:4a:14:92:e2:54:5b:d0:01:41:
82:1b:46:fe:ad:a4:ca:aa:a7:e4:a6:50:64:ce:71:
2e:5a:d3:99:33:5b:7a:98:8c:d3:55:6b:71:49:54:
38:c9:68:de:31:1c:d3:ef:57:6b:97:97:38:25:99:
62:62:50:88:6f:c3:f6:76:25:41:e4:7e:07:0b:f9:
85:04:5d:66:f6:d7:af:12:ea:00:27:d5:e6:df:34:
c8:77:53:a4:30:78:45:52:d7:1d:90:22:78:ad:59:
5a:83:b6:aa:1d:85:91:c8:f5:c0:1a:7e:5a:f9:1d:
ce:cf:e0:12:ac:e5:25:46:7e:4f:87:d9:4c:f1:72:
e2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:74:5A:EA:3B:C9:3F:F5:5C:FD:17:20:20:56:9F:0C:F7:60:EE:F4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E3Ra6jvJP_Vc_RcgIFafDPdg7vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.156.0/24
167.94.164.0/24
185.155.200.0/24
Signature Algorithm: sha256WithRSAEncryption
51:16:bd:7e:f5:04:11:fd:74:f7:fe:ac:8a:ee:11:34:77:55:
16:bc:7c:6e:c1:de:9c:b8:e4:d6:de:35:70:42:84:9c:36:a9:
01:6e:24:d4:a4:c2:e2:87:f4:48:bc:d4:79:e4:10:23:da:d4:
f7:df:79:9c:79:8c:f2:db:c5:f5:4e:5b:69:c9:97:20:80:ea:
eb:e1:9e:02:30:b9:3c:b1:53:49:c0:c3:32:99:e3:d4:97:45:
14:0e:6f:9f:85:88:61:23:70:46:83:85:9e:a7:07:58:0d:bd:
73:44:f9:36:ac:8c:98:91:8e:8c:a7:71:49:09:cb:ef:7f:ae:
f9:0a:f9:d0:f5:7a:e8:d9:7b:d8:f4:ae:92:77:70:7f:7c:45:
70:f7:8d:b5:5a:00:c6:d1:62:3e:34:2a:8f:1c:78:fa:ef:e5:
65:8c:14:ed:1f:a2:71:47:e3:8a:88:16:97:2d:d2:36:b2:89:
c2:0d:c0:69:3d:82:19:d3:d4:fc:38:56:e9:35:8a:5a:65:19:
87:e8:d6:91:38:68:81:15:ae:64:f3:e7:1f:62:e6:66:05:40:
77:ca:6b:74:ab:6b:6c:df:31:6b:37:db:41:39:b3:41:e9:39:
66:ab:5f:85:c2:0c:31:29:7c:81:1b:b9:bc:ba:9f:9c:1d:d7:
e4:60:72:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:11 2026 by rpki-client