Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/7rRktmv12hr5qnAEcY0vbLidyQ4.roa
File: 7rRktmv12hr5qnAEcY0vbLidyQ4.roa (raw, json)
Hash identifier: aNKbwb/JLwxyFb64vZUPDN1/RFLfblM8Gub5dqhlaqw=
Subject key identifier: EE:B4:64:B6:6B:F5:DA:1A:F9:AA:70:04:71:8D:2F:6C:B8:9D:C9:0E
Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial: 019E6DABA98F88E0C741457AD82374E7A3FC
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/7rRktmv12hr5qnAEcY0vbLidyQ4.roa
Signing time: Thu 28 May 2026 08:20:26 +0000
ROA not before: Thu 28 May 2026 08:20:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 37.16.74.0/24 maxlen: 32
146.19.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6d:ab:a9:8f:88:e0:c7:41:45:7a:d8:23:74:e7:a3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Validity
Not Before: May 28 08:20:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eeb464b66bf5da1af9aa7004718d2f6cb89dc90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:54:4f:32:5f:63:29:58:d6:50:fe:49:c5:3f:
1a:d4:98:39:15:a4:34:92:98:c2:ac:27:d4:7b:a9:
db:2a:55:d2:08:62:34:e7:ea:9f:1e:21:50:7a:e6:
15:2d:0c:fb:65:67:eb:99:e4:e4:1d:bf:84:e0:57:
ad:69:e5:85:09:8e:e6:18:e4:17:86:60:87:3e:6a:
2a:44:9c:03:4b:31:d1:9f:43:c3:e3:dd:b7:57:cd:
63:b3:ab:10:5b:90:3f:36:65:5b:a7:43:75:e6:c4:
ed:1a:b5:3b:2d:46:3d:20:9f:01:24:4a:72:e2:e9:
d1:44:36:bd:58:c9:59:0c:c7:ca:37:32:5d:c7:bc:
86:7d:5b:f6:a6:51:be:8c:11:41:0a:d0:4d:cb:36:
40:6a:b7:b9:1b:80:51:6a:b6:74:28:04:ae:fa:ec:
89:d9:c6:11:32:69:02:63:fb:0c:c3:98:bd:05:5b:
28:42:7d:86:a6:06:04:4b:b7:f0:2d:ed:ab:c0:cd:
73:61:e5:67:7a:5b:77:47:f1:b3:15:fd:3c:74:82:
ee:ad:d8:8d:3d:9e:37:2e:24:30:5a:d1:9b:7a:2e:
11:49:f4:00:46:99:eb:62:33:09:39:ce:ea:d6:2a:
35:42:0c:a9:36:ad:8c:50:01:d7:4b:d5:e3:1a:01:
f7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B4:64:B6:6B:F5:DA:1A:F9:AA:70:04:71:8D:2F:6C:B8:9D:C9:0E
X509v3 Authority Key Identifier:
keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/7rRktmv12hr5qnAEcY0vbLidyQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.74.0/24
146.19.48.0/24
Signature Algorithm: sha256WithRSAEncryption
94:0a:af:0c:71:4a:ca:cc:ed:f0:ac:6b:a6:d6:60:c6:f7:ce:
f5:4e:02:4a:60:86:9d:03:be:af:37:08:96:fe:0d:79:ec:cd:
42:21:7a:3f:e7:8d:92:0f:3c:60:6b:b1:b4:a8:cf:24:ea:59:
53:32:38:12:42:8e:83:52:a5:5c:6f:8d:b4:72:fd:07:88:9a:
87:65:a3:95:c4:71:2a:e3:53:05:fa:91:26:31:34:21:07:19:
1c:2c:8f:d2:43:72:dd:75:ed:e6:d5:b6:73:79:3b:de:5d:a6:
dd:50:89:e4:98:48:24:42:86:be:7b:79:73:a1:89:a3:d0:96:
5c:2a:99:3f:d7:cb:e1:56:3c:60:bf:0b:cc:8a:23:c3:e3:d4:
5f:a0:84:88:e3:2c:d7:a2:0e:06:f7:34:73:dd:ae:83:c1:ed:
88:db:9c:06:8e:e3:87:bb:96:a3:7d:b6:3b:a5:6f:ea:30:1a:
e0:b3:2c:63:e4:6f:ba:3a:ea:33:78:91:e6:8d:8f:98:d5:1b:
79:7f:4e:a5:b2:db:f6:49:89:b1:b4:9b:ee:e2:15:fb:60:67:
27:57:42:7e:9e:fc:35:f8:71:49:10:d8:3c:d0:02:aa:a6:42:
03:b5:4d:05:f1:24:0b:cf:07:53:ac:67:59:4f:e2:c0:d3:62:
3c:78:a9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:14:04 2026 by rpki-client