Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/eksDvyz9Ju8lDdq1bVYFAVXNss0.roa
File: eksDvyz9Ju8lDdq1bVYFAVXNss0.roa (raw, json)
Hash identifier: KZxDT+begLPrL2zlvk7oczgi91D4YHFdhZKTJ8IOu0g=
Subject key identifier: 7A:4B:03:BF:2C:FD:26:EF:25:0D:DA:B5:6D:56:05:01:55:CD:B2:CD
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A1789C825C9414A91A440B46FB86370761
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/eksDvyz9Ju8lDdq1bVYFAVXNss0.roa
Signing time: Mon 26 Oct 2026 14:28:05 +0000
ROA not before: Mon 26 Oct 2026 14:28:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60647
IP address blocks: 217.18.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:9c:82:5c:94:14:a9:1a:44:0b:46:fb:86:37:07:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 26 14:28:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a4b03bf2cfd26ef250ddab56d56050155cdb2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:53:30:63:19:72:44:48:a5:32:94:37:45:5e:
4d:55:db:f1:70:3e:4c:14:c8:aa:1b:c0:45:69:1b:
fa:bf:cc:69:eb:f6:83:bb:a0:3a:5b:0e:cb:e0:31:
d1:fb:d6:54:75:12:bf:84:96:ef:b8:11:7d:35:c2:
94:c4:29:f6:5c:ee:d1:40:bd:31:57:20:68:1f:79:
0b:f5:3e:b8:35:21:76:65:20:33:7c:7b:76:8f:92:
6b:99:fe:a9:92:f7:84:b9:94:37:d3:1a:a4:1f:25:
55:e4:8c:0d:10:1d:87:00:11:d2:25:06:8c:45:58:
9d:8e:9f:9a:d9:0e:b2:9b:7b:ea:67:a4:22:8d:f0:
45:aa:0b:6d:c0:79:64:c4:1d:d5:bb:63:4a:1f:78:
f3:5a:c3:8a:85:55:1d:49:d3:51:7f:f5:a9:33:41:
ff:aa:3a:5b:d3:c4:49:99:d7:b1:09:a8:2f:27:02:
7c:18:a8:cc:fc:c0:af:d5:b0:a5:af:c7:c2:42:5e:
ba:f7:6b:37:b7:4f:4e:89:00:bf:ed:03:80:1a:7a:
22:9f:89:5f:d7:64:98:f5:2f:d6:a9:72:f0:46:7a:
b9:82:91:d1:28:27:19:72:78:3e:44:8b:7e:d2:9d:
d9:7c:8b:19:c0:b6:1a:bb:91:92:e7:0d:25:4c:2c:
0c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4B:03:BF:2C:FD:26:EF:25:0D:DA:B5:6D:56:05:01:55:CD:B2:CD
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/eksDvyz9Ju8lDdq1bVYFAVXNss0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.209.0/24
Signature Algorithm: sha256WithRSAEncryption
14:8b:8c:4c:23:48:f9:66:70:67:65:d9:0c:ad:19:78:4f:a8:
92:49:f5:00:fa:7c:55:31:2b:63:9d:d1:6b:e5:16:09:4a:08:
f6:71:ff:f3:aa:81:6b:ce:60:dc:67:5a:cf:5c:5b:72:79:ef:
65:6b:8c:09:6b:66:40:75:77:9b:a4:8a:83:b3:24:7d:ab:ee:
74:b2:7d:f2:09:77:27:12:a5:fe:9a:50:ef:9a:59:47:6d:e7:
99:d9:7c:21:23:fe:db:8e:dc:2e:7e:b2:90:c9:9a:0f:7e:33:
28:32:86:f6:90:0b:f3:c7:9c:fe:77:b0:ff:0f:6f:ee:b7:4f:
00:51:54:c1:6d:24:eb:81:0e:9b:45:44:48:d8:53:e8:b9:0f:
9e:6e:39:8c:b2:b6:dc:fd:08:2f:36:dd:91:7b:0f:c6:81:c1:
c5:1d:ea:be:0e:17:b0:d5:3d:29:f5:bf:3f:1c:96:b8:0d:9e:
8d:a1:db:cb:c5:6a:bf:dc:f2:fc:b2:12:81:62:b7:74:60:98:
67:b2:9b:d6:90:23:59:6d:ae:db:36:a2:7f:7c:e1:c8:cb:71:
7d:da:1e:b0:17:96:34:e9:b9:d2:e2:9d:fa:12:9d:5b:ab:04:
46:fd:1e:ca:b4:22:ee:72:5f:d7:55:d3:ec:9a:d6:f9:96:f7:
1f:85:17:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaF4nIJclBSpGkQLRvuGNwdhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjYxMDI2MTQyODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTRiMDNiZjJjZmQyNmVmMjUwZGRhYjU2ZDU2MDUwMTU1Y2RiMmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFMwYxlyREilMpQ3RV5NVdvxcD5M
FMiqG8BFaRv6v8xp6/aDu6A6Ww7L4DHR+9ZUdRK/hJbvuBF9NcKUxCn2XO7RQL0x
VyBoH3kL9T64NSF2ZSAzfHt2j5Jrmf6pkveEuZQ30xqkHyVV5IwNEB2HABHSJQaM
RVidjp+a2Q6ym3vqZ6QijfBFqgttwHlkxB3Vu2NKH3jzWsOKhVUdSdNRf/WpM0H/
qjpb08RJmdexCagvJwJ8GKjM/MCv1bClr8fCQl6692s3t09OiQC/7QOAGnoin4lf
12SY9S/WqXLwRnq5gpHRKCcZcng+RIt+0p3ZfIsZwLYau5GS5w0lTCwMOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHpLA78s/SbvJQ3atW1WBQFVzbLNMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvZWtzRHZ5ejlKdThsRGRxMWJWWUZBVlhOc3MwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RLRMA0G
CSqGSIb3DQEBCwUAA4IBAQAUi4xMI0j5ZnBnZdkMrRl4T6iSSfUA+nxVMStjndFr
5RYJSgj2cf/zqoFrzmDcZ1rPXFtyee9la4wJa2ZAdXebpIqDsyR9q+50sn3yCXcn
EqX+mlDvmllHbeeZ2XwhI/7bjtwufrKQyZoPfjMoMob2kAvzx5z+d7D/D2/ut08A
UVTBbSTrgQ6bRURI2FPouQ+ebjmMsrbc/QgvNt2Rew/GgcHFHeq+Dhew1T0p9b8/
HJa4DZ6NodvLxWq/3PL8shKBYrd0YJhnspvWkCNZba7bNqJ/fOHIy3F92h6wF5Y0
6bnS4p36Ep1bqwRG/R7KtCLucl/XVdPsmtb5lvcfhRcS
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:50 2026 by rpki-client