Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1ESWGwNWQSn1yfNid_NgnQYmkgo.roa
File: 1ESWGwNWQSn1yfNid_NgnQYmkgo.roa (raw, json)
Hash identifier: CmYTU2GOL9fJJyk25d75QRGxEIeSsdZPsx0vkAXASwA=
Subject key identifier: D4:44:96:1B:03:56:41:29:F5:C9:F3:62:77:F3:60:9D:06:26:92:0A
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A1632540F9FF8D89989C621392CED904FC
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1ESWGwNWQSn1yfNid_NgnQYmkgo.roa
Signing time: Thu 22 Oct 2026 10:25:48 +0000
ROA not before: Thu 22 Oct 2026 10:25:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215073
IP address blocks: 185.254.29.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:25:40:f9:ff:8d:89:98:9c:62:13:92:ce:d9:04:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 22 10:25:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d444961b03564129f5c9f36277f3609d0626920a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:69:c6:2d:23:67:56:dc:56:41:ca:48:ec:
6f:df:6b:77:2b:d7:a1:68:0b:01:16:f8:a1:a6:34:
31:b4:2c:ac:d6:d9:96:93:b7:05:70:83:cc:58:bf:
d0:d3:06:70:97:bc:d9:2c:d4:20:1a:a0:00:21:ad:
f0:93:cd:53:96:f5:8c:bc:e6:8c:64:1e:6f:55:25:
c2:75:c3:e9:4e:cf:9f:e6:d7:84:7d:c9:23:e6:42:
b8:94:ae:5b:31:e6:8f:b6:d7:c9:c3:9e:d6:68:f7:
49:68:e7:2f:13:6b:80:e5:49:9d:8c:ee:6b:68:80:
a8:1c:df:0b:ec:6e:9a:7a:ee:65:c1:c4:58:ca:2f:
ec:b7:52:3f:63:ea:6e:c4:98:d7:50:6c:fe:6f:15:
f9:64:e5:5c:e5:da:e1:a7:0c:b0:5c:4b:86:f1:a7:
e3:25:d2:0f:53:67:45:53:e4:5f:ab:d1:8d:35:a4:
92:dc:fc:6f:41:2c:9a:90:06:bc:59:59:01:84:e6:
e2:df:25:72:16:31:fd:27:a2:69:d0:ff:57:db:2f:
76:53:24:a7:e3:46:21:8d:ad:2c:dc:f7:b4:f3:bb:
10:df:93:af:72:67:07:b0:ed:dc:37:f5:22:ab:6b:
95:96:81:37:c1:67:7b:d3:77:6e:61:0f:57:b3:fa:
06:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:44:96:1B:03:56:41:29:F5:C9:F3:62:77:F3:60:9D:06:26:92:0A
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1ESWGwNWQSn1yfNid_NgnQYmkgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.29.0/24
193.35.152.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d5:20:95:54:2e:c3:10:93:14:eb:b1:5c:a8:95:b6:06:73:
be:57:01:c3:f5:0d:83:05:84:04:2e:1d:5b:7f:70:9c:92:be:
78:d6:36:e3:b8:65:6d:fd:71:28:5e:61:2a:f9:e1:d0:2c:f1:
45:78:15:0c:3d:ef:fc:fe:1e:77:45:9e:f4:c2:e1:70:76:96:
4a:d0:d7:af:72:3e:81:5c:76:7a:8d:8d:0e:83:0c:2f:d0:aa:
85:8e:9b:09:ec:32:05:c2:66:99:aa:59:95:e3:15:af:34:8c:
8d:25:8d:68:73:ca:28:b0:09:f5:1c:70:52:8a:29:52:a9:65:
77:66:dd:a9:d4:25:5e:5c:17:82:fd:fa:c6:de:76:55:c1:2f:
85:92:1f:95:9a:18:f2:06:54:a5:0b:d2:3a:9b:0f:5d:5d:ca:
0d:1d:a0:68:e9:ac:4e:28:31:e7:de:52:d1:89:d1:2a:ef:96:
b8:f5:a7:78:7d:e6:46:b1:90:ec:1a:43:e8:d6:3d:76:ed:1e:
7d:42:26:46:1c:7f:74:72:37:6e:83:28:8e:3a:4d:d4:86:74:
d2:65:41:b1:0d:9b:ae:f0:4d:64:a7:4a:7d:3c:dd:e0:1f:25:
34:d6:ac:c8:4f:0e:df:2b:7a:22:ce:cf:ca:ef:ab:ec:e8:71:
a6:41:47:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:54:09 2026 by rpki-client