Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/eFgaCfFQ4wnN2TLjUx11IbfSUic.roa
File: eFgaCfFQ4wnN2TLjUx11IbfSUic.roa (raw, json)
Hash identifier: PRgXnTA2HUCK93Q2oPHby6jgjDBYph2NqjlwyNitfzs=
Subject key identifier: 78:58:1A:09:F1:50:E3:09:CD:D9:32:E3:53:1D:75:21:B7:D2:52:27
Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial: 01A041FEBA972A77578086214A0CD658C564
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/eFgaCfFQ4wnN2TLjUx11IbfSUic.roa
Signing time: Thu 27 Aug 2026 06:53:27 +0000
ROA not before: Thu 27 Aug 2026 06:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43309
IP address blocks: 2.56.168.0/24 maxlen: 24
185.234.252.0/24 maxlen: 24
2a0f:ca00::/33 maxlen: 33
2a0f:ca00::/46 maxlen: 46
2a0f:ca00:f6a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:fe:ba:97:2a:77:57:80:86:21:4a:0c:d6:58:c5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Validity
Not Before: Aug 27 06:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78581a09f150e309cdd932e3531d7521b7d25227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:96:d0:97:c3:f0:ee:d4:60:cd:ca:18:33:35:
87:50:70:69:fd:99:af:82:5d:30:83:23:1d:7f:6d:
a4:69:d8:19:3a:91:62:1d:c9:d2:cc:ce:2b:9c:7e:
86:91:7e:33:c1:b9:21:8c:1b:23:31:c0:af:15:44:
f1:5d:52:08:d2:76:9f:0f:2d:e5:59:08:6f:5c:d8:
84:b2:e3:65:58:2b:78:a4:88:15:6c:10:f3:a8:a8:
47:b0:a5:2d:1a:d5:3c:aa:e6:d1:d6:d0:ac:8a:72:
2d:07:70:45:ed:a3:62:76:c8:02:7b:5e:57:dd:e1:
09:65:b9:53:a5:e1:9c:67:53:50:2f:4a:86:c3:6d:
df:0f:6f:1f:75:51:44:74:b7:68:59:8d:e0:42:f8:
8f:17:b2:53:36:6b:5d:b1:78:27:d7:97:af:96:37:
15:c4:5e:ca:6e:e1:0e:ed:8d:5a:91:84:9d:e6:b9:
9c:c8:6f:a3:aa:e5:ca:78:c8:f9:0c:94:6f:be:1d:
14:ae:ab:21:af:d4:02:b9:d7:97:3c:64:9e:b9:2c:
d8:ce:6a:66:68:dd:3a:8f:f1:82:19:6b:1f:76:f9:
0c:45:ec:7a:89:25:2f:fd:1e:29:0d:1a:b9:e1:b8:
c3:19:96:f7:01:cc:87:88:63:ab:5e:92:42:ad:3f:
f7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:58:1A:09:F1:50:E3:09:CD:D9:32:E3:53:1D:75:21:B7:D2:52:27
X509v3 Authority Key Identifier:
keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/eFgaCfFQ4wnN2TLjUx11IbfSUic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.168.0/24
185.234.252.0/24
IPv6:
2a0f:ca00::/33
Signature Algorithm: sha256WithRSAEncryption
1d:05:c4:13:a3:48:16:a6:68:70:79:02:ea:0e:50:de:0c:39:
2d:ff:88:0b:37:82:c4:0b:91:4b:39:4d:eb:61:b5:5e:e5:15:
f3:0e:e0:09:09:f5:12:bc:9f:c2:c7:bb:70:69:d6:1d:73:27:
fd:9c:80:d2:90:0f:9a:45:18:2f:9e:96:d0:1a:27:3b:6b:62:
83:31:16:ec:03:93:0a:4f:35:82:e1:bb:04:22:05:c3:63:73:
0a:c6:15:c2:a9:82:70:20:50:f5:eb:75:8c:a8:a4:f2:69:1d:
d9:f4:39:7a:22:0c:bf:b2:74:1b:5e:61:1e:eb:2d:89:89:e3:
1a:be:b3:14:c6:f1:d0:e5:22:df:43:2e:ac:dc:14:6b:85:cd:
aa:c4:da:26:2c:5c:e0:43:5c:d3:d6:5d:14:64:f0:e7:6a:de:
32:16:44:de:1b:c2:48:28:20:35:49:23:dc:84:e2:b9:23:a6:
e2:e3:27:1d:d9:ed:84:b4:0d:04:c9:23:0f:5b:b7:d4:61:4b:
52:cb:de:8e:85:2d:6a:d5:77:de:f5:96:2a:94:ff:0a:77:95:
0a:4d:f4:42:4a:6f:9a:ae:af:a7:8e:31:d3:00:2c:46:c1:1a:
f5:da:25:44:45:99:80:55:45:5a:5d:97:cd:be:0f:b0:3d:48:
f4:f3:2f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:54:10 2026 by rpki-client