Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/7tzBAfndZw8WH-iDuOUApcbA_TE.roa
File: 7tzBAfndZw8WH-iDuOUApcbA_TE.roa (raw, json)
Hash identifier: ehM/A5yY843lUyN6eRsIWJTjjoF2xs1BCyg2BL3N1Lo=
Subject key identifier: EE:DC:C1:01:F9:DD:67:0F:16:1F:E8:83:B8:E5:00:A5:C6:C0:FD:31
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 019FDBC3597D590A1F1927BAA3582AF6E6A3
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/7tzBAfndZw8WH-iDuOUApcbA_TE.roa
Signing time: Fri 07 Aug 2026 10:27:20 +0000
ROA not before: Fri 07 Aug 2026 10:27:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 185.228.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:c3:59:7d:59:0a:1f:19:27:ba:a3:58:2a:f6:e6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Aug 7 10:27:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eedcc101f9dd670f161fe883b8e500a5c6c0fd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c6:4e:7e:f4:3e:ec:73:07:e7:26:b3:9f:11:
2d:59:53:6b:04:c5:9c:ec:76:b6:94:78:70:3c:1d:
fa:12:1f:4c:de:e8:ad:df:11:81:fb:eb:c1:7c:04:
30:74:4a:c3:7b:b8:5f:82:df:1c:c8:81:4e:16:d6:
12:36:d3:dd:5b:71:0a:fe:ae:ae:1b:12:67:b8:1a:
11:6e:fc:3b:50:d5:35:6f:88:c9:01:f9:df:1d:c4:
41:cb:37:4d:ee:3a:7a:ca:80:b9:47:74:2e:03:71:
36:5b:a2:45:11:e1:75:6d:70:c0:c4:5a:1c:17:89:
2a:38:18:6a:37:90:91:37:16:59:b3:f3:47:94:04:
33:3e:64:47:19:0b:6a:ec:35:9e:46:fb:53:17:4c:
41:bf:f9:c1:b5:24:87:13:52:e6:d2:31:3e:44:4c:
a1:b2:dc:03:15:d4:ca:c5:f7:71:29:d5:17:3d:30:
8a:4f:80:cf:6d:6c:84:d5:f1:55:d4:dc:a2:e8:a7:
25:34:65:d5:3f:06:f7:24:2b:08:3a:58:83:27:d0:
47:8c:0f:f4:61:a2:ee:06:f3:d3:14:4c:4a:a2:27:
ce:c4:d4:25:1c:70:8c:35:aa:66:13:a4:e2:00:67:
e6:39:24:0f:bb:aa:3a:58:d1:73:42:8b:d7:29:76:
3b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DC:C1:01:F9:DD:67:0F:16:1F:E8:83:B8:E5:00:A5:C6:C0:FD:31
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/7tzBAfndZw8WH-iDuOUApcbA_TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.1.0/24
Signature Algorithm: sha256WithRSAEncryption
44:e8:76:44:07:02:bd:16:d9:6a:b1:d3:9e:5b:2c:35:7d:bd:
1f:e4:c2:bc:a3:b0:34:ec:01:dd:ec:e0:3a:75:16:f5:09:a5:
90:19:14:a9:73:f3:19:a8:43:b9:75:13:96:29:31:c4:37:b9:
e2:3d:22:15:4f:35:da:5b:45:b7:dc:37:4c:f7:26:5c:ad:7d:
4c:e5:00:73:8c:3e:7c:70:76:bc:fe:0c:5c:e4:a0:e9:94:ec:
77:74:e0:2a:3f:ab:07:9e:88:4c:26:15:ba:b6:96:d9:6f:32:
c8:8d:cf:76:5c:f0:b8:ad:8e:1a:a6:fb:25:f4:ad:e7:7b:ed:
3e:d5:6d:f6:e5:55:d8:e5:bd:3b:f7:37:c4:d1:69:b1:23:6b:
05:93:2f:2e:0f:bc:35:68:f4:35:9c:67:4a:e5:30:55:6b:63:
ba:8c:ed:7b:05:66:07:db:10:c4:f1:12:24:1d:ac:41:41:fe:
be:cf:3e:7f:32:e8:9d:73:6d:7e:4a:37:6b:16:f0:cb:1b:17:
71:f4:91:e6:a7:56:ef:d6:c0:6a:b2:29:dc:07:23:b3:5e:42:
88:89:11:1a:fe:e3:5a:e1:6a:15:43:21:8a:85:85:80:a8:4b:
62:5f:97:45:22:b6:41:1b:b1:94:63:64:bc:1f:6a:4e:21:d3:
f2:88:67:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:15 2026 by rpki-client