Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/_1Ett7ebIOKErELY-fz5xWJGbjo.roa
File: _1Ett7ebIOKErELY-fz5xWJGbjo.roa (raw, json)
Hash identifier: 7YrHUOXIzO48EeKA7HXesMdXaNdDOvUXk3FJe1vIHlA=
Subject key identifier: FF:51:2D:B7:B7:9B:20:E2:84:AC:42:D8:F9:FC:F9:C5:62:46:6E:3A
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019EF93E114C9DF8B90F53BC91B976AA9F04
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/_1Ett7ebIOKErELY-fz5xWJGbjo.roa
Signing time: Wed 24 Jun 2026 10:47:34 +0000
ROA not before: Wed 24 Jun 2026 10:47:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50113
IP address blocks: 132.243.27.0/24 maxlen: 24
2a0c:5d00:1001::/48 maxlen: 48
2a0c:5d00:ff02::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:3e:11:4c:9d:f8:b9:0f:53:bc:91:b9:76:aa:9f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jun 24 10:47:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff512db7b79b20e284ac42d8f9fcf9c562466e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:52:7a:6b:48:f8:81:e6:f8:38:d3:b6:81:
d2:19:70:2a:5c:bb:58:5a:23:3a:22:a5:b4:74:83:
87:6d:9f:c2:46:8d:a1:62:fe:e9:e1:88:29:9a:32:
14:e1:04:f4:27:12:2f:ec:36:4e:6e:5c:dc:66:a2:
e8:f4:5d:f9:a1:cc:52:23:ec:46:95:a3:19:d3:f7:
66:20:69:95:1d:38:02:95:10:ac:bd:b6:ba:53:71:
e5:e2:7a:80:ab:5a:00:0c:90:ad:98:8e:5e:27:86:
ca:80:9f:e8:f0:a7:0c:db:7e:58:92:ec:de:92:2f:
ba:66:82:25:02:16:a2:06:b0:72:f9:37:99:10:1a:
17:84:a8:41:2b:3e:ae:a4:5e:a8:f9:8b:0c:35:5a:
53:a5:e4:d2:35:a4:49:74:a3:f4:b9:37:c5:aa:58:
69:12:d3:71:42:e7:c5:13:e3:db:5e:a5:a8:b2:a2:
e9:6b:9e:6b:62:6a:3d:d9:40:49:22:dc:1e:13:40:
57:b7:88:ea:9e:a2:49:b3:6c:50:58:5e:db:cf:7c:
be:9b:2b:45:0f:04:e0:b5:ae:a7:01:96:7b:e6:a2:
90:f6:29:2b:0c:e8:55:93:a8:02:23:ba:db:93:a6:
e6:bc:c1:35:a8:0b:2a:d5:d9:3c:47:2d:e5:66:2a:
b0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:51:2D:B7:B7:9B:20:E2:84:AC:42:D8:F9:FC:F9:C5:62:46:6E:3A
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/_1Ett7ebIOKErELY-fz5xWJGbjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.27.0/24
IPv6:
2a0c:5d00:1001::/48
2a0c:5d00:ff02::/48
Signature Algorithm: sha256WithRSAEncryption
80:3c:26:7d:a0:08:dd:37:a3:cf:b8:99:57:3b:30:f3:b5:34:
30:30:de:52:fd:f9:e4:3d:0a:2a:5e:6c:1b:de:6b:eb:d7:2a:
fd:a5:09:93:c1:70:3e:ab:61:a4:0d:1a:e8:38:49:7e:c0:20:
d6:ac:b6:db:4e:5b:d0:d2:b3:41:8c:22:a0:5a:c9:81:6c:05:
51:f7:49:b6:69:18:e1:08:8f:d8:4c:19:22:dd:97:59:f7:0e:
7e:5c:1d:77:63:f6:c6:48:ab:7d:f9:49:b1:12:6e:ba:75:f4:
b6:e9:fd:8a:3d:08:38:0d:c7:35:01:e4:a2:5d:0a:ab:9d:9d:
52:c9:a4:4f:1f:92:77:7a:ce:c0:69:55:35:76:a3:c5:1a:a1:
ab:4d:6a:78:35:5e:3e:86:e3:1d:4d:19:e5:66:8f:f6:1e:e6:
99:67:c2:11:8e:35:b1:3f:78:1f:02:e9:99:87:5a:cf:55:cb:
e4:9f:a3:cc:00:2d:01:b5:c5:99:45:df:ec:b5:a9:ef:17:a8:
1d:64:fb:24:9e:b9:b0:12:7f:af:59:f7:19:06:96:37:45:24:
49:be:62:f9:7a:fb:a5:93:ad:d3:eb:f2:f7:d8:ba:d4:78:41:
39:97:16:89:52:6f:08:39:cc:d5:d5:bc:83:06:c9:29:55:c1:
1c:57:88:cf
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZ75PhFMnfi5D1O8kbl2qp8EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjYwNjI0MTA0NzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjUxMmRiN2I3OWIyMGUyODRhYzQyZDhmOWZjZjljNTYyNDY2ZTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTRSemtI+IHm+DjTtoHSGXAqXLtY
WiM6IqW0dIOHbZ/CRo2hYv7p4YgpmjIU4QT0JxIv7DZOblzcZqLo9F35ocxSI+xG
laMZ0/dmIGmVHTgClRCsvba6U3Hl4nqAq1oADJCtmI5eJ4bKgJ/o8KcM235Ykuze
ki+6ZoIlAhaiBrBy+TeZEBoXhKhBKz6upF6o+YsMNVpTpeTSNaRJdKP0uTfFqlhp
EtNxQufFE+PbXqWosqLpa55rYmo92UBJItweE0BXt4jqnqJJs2xQWF7bz3y+mytF
DwTgta6nAZZ75qKQ9ikrDOhVk6gCI7rbk6bmvME1qAsq1dk8Ry3lZiqwlQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFP9RLbe3myDihKxC2Pn8+cViRm46MB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvXzFFdHQ3ZWJJT0tFckVMWS1mejV4V0pHYmpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAhPMbMBgE
AgACMBIDBwAqDF0AEAEDBwAqDF0A/wIwDQYJKoZIhvcNAQELBQADggEBAIA8Jn2g
CN03o8+4mVc7MPO1NDAw3lL9+eQ9CipebBvea+vXKv2lCZPBcD6rYaQNGug4SX7A
INastttOW9DSs0GMIqBayYFsBVH3SbZpGOEIj9hMGSLdl1n3Dn5cHXdj9sZIq335
SbESbrp19Lbp/Yo9CDgNxzUB5KJdCqudnVLJpE8fknd6zsBpVTV2o8UaoatNang1
Xj6G4x1NGeVmj/Ye5plnwhGONbE/eB8C6ZmHWs9Vy+Sfo8wALQG1xZlF3+y1qe8X
qB1k+ySeubASf69Z9xkGljdFJEm+Yvl6+6WTrdPr8vfYutR4QTmXFolSbwg5zNXV
vIMGySlVwRxXiM8=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:38 2026 by rpki-client