Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/E1p-EiP-K3W7sBZ2XkVP8qQgcZA.roa
File: E1p-EiP-K3W7sBZ2XkVP8qQgcZA.roa (raw, json)
Hash identifier: xLwNX/y+vwTWgRCupLXSnIneiG+nmEB41RZKrsckRT8=
Subject key identifier: 13:5A:7E:12:23:FE:2B:75:BB:B0:16:76:5E:45:4F:F2:A4:20:71:90
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019CBD10E5D9E0F7509561D9AAAC143D1CA0
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/E1p-EiP-K3W7sBZ2XkVP8qQgcZA.roa
Signing time: Thu 05 Mar 2026 08:15:27 +0000
ROA not before: Thu 05 Mar 2026 08:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213734
IP address blocks: 87.76.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:10:e5:d9:e0:f7:50:95:61:d9:aa:ac:14:3d:1c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Mar 5 08:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=135a7e1223fe2b75bbb016765e454ff2a4207190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:51:ea:14:96:bf:f8:a0:10:25:f2:44:37:
2b:23:1e:28:23:b3:db:58:93:27:aa:d1:35:fe:9b:
65:f8:0b:90:4d:6b:31:83:9d:0d:14:2a:f2:7f:24:
49:56:5a:33:e4:46:9b:8e:19:71:f1:55:1f:2c:32:
90:93:d6:42:a4:18:38:9a:e7:54:8a:95:a6:e3:33:
12:96:82:e2:4b:ac:61:30:09:ac:20:26:13:75:b1:
8c:72:f7:b8:81:85:c1:58:d4:25:a7:04:e9:cd:85:
5d:c2:41:da:3e:bf:4d:cd:c3:d9:cb:14:61:ea:f4:
0e:02:e1:7c:cd:8d:8f:a7:d4:91:6f:56:99:b8:15:
9a:8c:26:23:e8:6a:9a:e7:5a:30:a3:13:97:98:f0:
34:ea:b5:24:dd:d2:6b:26:cf:09:7f:b0:c3:6c:61:
55:16:40:8f:bd:35:2e:3d:11:f1:d2:c1:d9:de:24:
85:af:07:83:8f:42:9b:a6:f5:2c:93:88:80:52:36:
99:fb:bf:ae:d4:eb:8b:e8:24:e7:3a:97:d2:2d:a8:
8f:a2:89:27:d3:64:a7:e5:38:80:07:1f:13:9b:38:
b2:0f:84:60:5d:51:88:51:f3:e1:95:6c:66:49:a2:
84:cb:36:c5:ea:33:44:e9:e5:2d:b7:95:f8:25:f1:
b1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5A:7E:12:23:FE:2B:75:BB:B0:16:76:5E:45:4F:F2:A4:20:71:90
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/E1p-EiP-K3W7sBZ2XkVP8qQgcZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.208.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b2:55:c8:64:31:2e:c8:e4:ff:cc:37:94:b9:f0:44:4b:8c:
06:37:d8:ac:1c:0a:ba:ce:55:76:42:2d:ac:d6:9e:cb:c7:a1:
58:1d:93:46:95:e7:93:16:89:e5:d0:b8:6f:b2:80:da:41:c8:
54:86:70:24:4f:b9:d4:8e:da:4d:75:b8:ca:7f:1a:60:cb:f2:
f9:67:45:f1:7b:cc:7c:7d:b3:87:be:b7:43:19:49:a9:db:bb:
04:38:1c:d8:74:42:8c:49:d9:22:98:10:15:58:1d:5a:e7:77:
da:a4:d2:fe:c4:3f:08:bb:35:97:ab:69:d3:1a:81:cd:4f:8c:
66:ca:36:d6:00:14:ab:99:ef:82:ce:c7:d1:83:fe:91:2b:b9:
cf:42:b3:fc:17:4a:1c:67:49:5d:16:b2:cd:10:7c:de:bf:a8:
05:6b:62:8f:68:5a:12:ae:e1:7a:d9:57:dd:f5:12:06:97:38:
28:1b:bc:b9:b1:b1:43:aa:1e:e7:79:74:4b:5b:a0:73:46:72:
2e:f6:8e:41:eb:f7:4f:68:aa:ac:1e:61:6f:37:b0:36:b8:b4:
8d:11:be:66:f3:b7:25:a6:7d:d8:4c:ea:c1:8c:3a:7d:93:69:
d9:c5:f0:6e:9e:d2:75:10:f5:9d:d2:0d:08:c7:7d:20:fa:39:
3d:84:2c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 17:32:32 2026 by rpki-client