Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/ewGTe6Hr3gHf6RyjuICwtU-Nauk.roa
File: ewGTe6Hr3gHf6RyjuICwtU-Nauk.roa (raw, json)
Hash identifier: MJpbl0zNHfTW/zitpZZ1mZa6+bfsCE2CL+6tDuUFc3A=
Subject key identifier: 7B:01:93:7B:A1:EB:DE:01:DF:E9:1C:A3:B8:80:B0:B5:4F:8D:6A:E9
Certificate issuer: /CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Certificate serial: 01A1787265F610C89394832C1B3B7ABDEABA
Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/ewGTe6Hr3gHf6RyjuICwtU-Nauk.roa
Signing time: Mon 26 Oct 2026 13:42:05 +0000
ROA not before: Mon 26 Oct 2026 13:42:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44090
IP address blocks: 193.107.44.0/24 maxlen: 24
2a12:2700::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:72:65:f6:10:c8:93:94:83:2c:1b:3b:7a:bd:ea:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Validity
Not Before: Oct 26 13:42:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b01937ba1ebde01dfe91ca3b880b0b54f8d6ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3f:7f:2c:b0:a7:cb:c3:6b:61:a3:2f:7f:4d:
34:60:e0:79:9d:58:63:2a:b7:0c:f8:e4:b7:91:60:
1e:bc:91:cf:c5:f5:0a:c8:e1:ea:20:88:1c:e0:54:
d8:7c:95:04:5d:aa:bb:15:50:03:f2:b9:2d:df:2a:
e0:a0:e4:6c:df:99:d5:f1:dc:8d:8c:e0:39:16:c1:
e4:27:77:20:a2:e7:77:9f:a5:30:9b:e2:1b:3b:93:
22:a8:2e:11:6f:93:2a:36:83:f0:bc:e6:7e:e4:02:
ed:fe:ea:83:6c:95:9a:3d:ef:18:f5:c0:2d:85:3e:
34:b2:6a:b6:71:ab:65:69:ff:53:60:dc:92:41:41:
e6:2f:9f:4d:79:cd:fe:bb:d0:ac:41:47:11:e8:2a:
0d:2d:3b:11:bb:a0:ee:24:18:70:a4:e0:b6:5e:13:
a1:d8:ab:3b:cc:a5:ee:b9:33:b6:73:e9:02:e5:aa:
3d:cd:26:a8:36:fa:76:40:21:a6:80:d3:aa:28:57:
b3:23:aa:c8:ca:db:09:2d:80:76:c6:21:ab:43:dd:
d9:de:ac:34:80:51:ca:99:e5:2e:cc:e6:04:29:9f:
b8:de:a4:3b:bf:ed:ea:74:29:22:17:de:21:f7:51:
cd:b5:5d:9e:a8:1a:69:d3:36:2c:e9:af:e8:c7:5d:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:01:93:7B:A1:EB:DE:01:DF:E9:1C:A3:B8:80:B0:B5:4F:8D:6A:E9
X509v3 Authority Key Identifier:
keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/ewGTe6Hr3gHf6RyjuICwtU-Nauk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.44.0/24
IPv6:
2a12:2700::/29
Signature Algorithm: sha256WithRSAEncryption
3b:3e:64:e6:3a:bd:b2:00:fe:b5:a4:de:e6:07:b9:a3:c8:a3:
2b:75:b9:c7:7e:81:14:a6:74:7c:32:ea:63:77:c2:25:15:64:
ec:af:87:02:9f:8a:09:7c:5e:d0:3a:a4:18:c0:fd:2d:32:45:
cc:14:cc:33:e4:9c:dc:8d:24:f3:4b:08:3b:a1:18:31:6a:55:
96:06:d8:2e:d5:e4:95:68:6e:7c:60:19:f1:7d:47:d2:77:7f:
4e:c3:ad:a8:a0:ab:17:00:28:a7:b6:cc:ab:85:a5:42:4a:03:
06:8a:7b:89:a7:02:1c:ae:c0:78:ab:7a:42:6d:70:3e:b2:03:
f3:0a:18:cb:37:f2:b4:ca:cd:25:6f:6b:6e:5b:b1:0a:0d:cb:
2b:71:93:ae:b1:e3:7f:65:b8:6b:ab:ce:6c:c8:34:24:8b:54:
b7:54:25:26:aa:ac:34:9d:98:8f:61:bf:78:ef:58:74:06:db:
8c:a2:42:15:f5:67:fa:73:f4:34:97:88:bf:2b:ef:26:77:80:
7d:d1:2e:e7:fa:b6:c1:20:32:bf:f9:a0:64:52:82:94:bc:6c:
fa:4f:9e:23:3f:4f:bc:7a:24:07:f4:2c:2c:aa:59:a5:35:56:
ed:cc:0e:1e:83:9f:e9:7d:7f:b6:af:2a:20:85:8a:4b:29:33:
50:d4:4c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:03 2026 by rpki-client