Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/E3jz9qmqTjg_zIJIvHv94CK6zsY.roa
File: E3jz9qmqTjg_zIJIvHv94CK6zsY.roa (raw, json)
Hash identifier: 0Lk+ZfoyEeeu5e++mGbGnXSf6tV5iYmorQKGtAl1EXE=
Subject key identifier: 13:78:F3:F6:A9:AA:4E:38:3F:CC:82:48:BC:7B:FD:E0:22:BA:CE:C6
Certificate issuer: /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Certificate serial: 019E619F6601934D4648AED81CA3AA013BAC
Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/E3jz9qmqTjg_zIJIvHv94CK6zsY.roa
Signing time: Tue 26 May 2026 00:11:36 +0000
ROA not before: Tue 26 May 2026 00:11:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202002
IP address blocks: 149.170.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:61:9f:66:01:93:4d:46:48:ae:d8:1c:a3:aa:01:3b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Validity
Not Before: May 26 00:11:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1378f3f6a9aa4e383fcc8248bc7bfde022bacec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:25:46:04:7e:d8:82:d0:07:91:f2:37:fd:
7f:3f:31:62:b7:1a:24:08:3a:1a:25:0a:89:7b:7d:
bf:1c:00:e9:a0:69:71:fa:e0:c6:10:d9:e6:3c:0b:
6a:95:b8:c0:23:34:90:ee:fd:58:aa:89:55:f6:52:
95:17:da:9b:f5:ea:e7:2e:77:01:64:90:d8:cf:b8:
a4:16:d3:98:84:bf:27:31:b1:f9:85:e3:d2:30:28:
19:7a:df:91:71:fc:62:0c:97:cb:10:2d:4b:98:da:
19:23:d0:69:c7:93:a1:3e:2a:c0:95:84:48:19:c6:
2d:d6:b2:f0:84:9d:57:e2:40:08:e2:d1:22:9b:c4:
55:9b:85:4b:4f:bf:f2:d1:1e:ef:aa:83:02:fe:16:
27:94:63:55:1f:9e:17:41:27:68:6b:3b:5e:32:31:
95:55:67:a4:4b:50:f3:f2:a7:9e:ef:82:f6:53:1c:
d1:fe:49:d2:5a:e4:2c:90:00:a4:6c:32:5b:dd:ca:
f2:82:e9:ee:ca:55:a0:53:16:bc:55:0d:f0:e2:e7:
d6:c7:2b:a6:31:d5:3d:98:7f:c2:a8:fa:38:b8:5f:
5f:e2:8c:8a:cc:5a:c2:af:39:28:2b:6e:4a:5a:ad:
bf:2b:1a:45:c3:a0:99:b5:12:b2:87:d8:9f:be:db:
81:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:78:F3:F6:A9:AA:4E:38:3F:CC:82:48:BC:7B:FD:E0:22:BA:CE:C6
X509v3 Authority Key Identifier:
keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/E3jz9qmqTjg_zIJIvHv94CK6zsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.170.60.0/24
Signature Algorithm: sha256WithRSAEncryption
64:22:aa:b9:a4:45:46:1b:02:f6:13:88:76:e4:bf:c1:d3:e3:
0d:e6:a8:a8:32:b2:1f:36:32:77:86:68:fd:8a:d0:76:9b:df:
da:65:2f:e3:e0:23:33:fb:0d:a8:be:5c:c1:8d:b2:05:0f:6d:
f3:f3:17:05:6f:37:2b:5e:e8:16:03:09:2b:ed:ab:bd:17:2c:
16:a6:67:57:72:65:73:50:1d:62:e6:4d:a3:ae:e6:04:fa:06:
a9:d4:60:33:e8:1e:68:47:a3:8e:b3:d3:ce:ef:14:ae:b3:c7:
d8:a4:e5:a1:97:76:36:f1:b0:6a:b7:e3:fb:16:f5:7a:83:c0:
d4:ac:6d:fe:f6:cd:0f:9e:f2:f9:8b:1c:26:ca:25:72:4d:71:
79:bc:19:4d:bc:cb:0b:5e:9c:56:de:91:72:44:14:8c:be:f7:
1b:17:42:f4:68:ca:68:04:ec:13:4f:32:0d:c1:e7:f4:e0:ab:
43:37:9f:ef:2a:4b:0c:8b:30:40:ad:67:ba:9c:d5:d3:7a:1a:
a2:74:19:c6:ad:2d:54:99:1c:82:55:47:6a:18:e5:00:99:a7:
af:6d:c1:8f:89:61:54:03:5b:2d:c4:a6:be:ca:39:91:3e:78:
03:87:ad:73:51:83:f6:13:13:53:96:15:4f:c7:96:0c:f9:da:
ec:24:4e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 09:56:56 2026 by rpki-client