Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/E3ArwYEYz0p1tRS8NTnF_SeY2mM.roa
File: E3ArwYEYz0p1tRS8NTnF_SeY2mM.roa (raw, json)
Hash identifier: bB/yiMf3cVw3gozrgLlQJJ6kEroSsFqqldiMXLpOlrc=
Subject key identifier: 13:70:2B:C1:81:18:CF:4A:75:B5:14:BC:35:39:C5:FD:27:98:DA:63
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 019F2368743651785EC11EA66ACABFD2E33E
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/E3ArwYEYz0p1tRS8NTnF_SeY2mM.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 195.114.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 Jul 2026 15:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:74:36:51:78:5e:c1:1e:a6:6a:ca:bf:d2:e3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13702bc18118cf4a75b514bc3539c5fd2798da63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:73:c0:2f:e1:92:a0:39:4b:46:c5:82:73:
13:54:12:ef:61:fb:12:0c:fc:06:6e:63:d6:b2:ef:
ba:20:3c:ea:05:ee:73:83:58:67:a4:99:45:91:af:
04:fe:4a:cd:56:66:6a:e2:be:59:69:6f:f8:9c:6d:
0b:0e:da:4e:b2:e3:78:df:58:8f:16:4c:2f:4c:12:
72:f1:aa:28:d4:49:ae:e9:dc:9c:b4:ec:e1:83:f8:
9a:ff:00:87:be:ac:e3:37:69:07:43:e5:00:bc:f4:
8e:76:45:a3:5d:11:8e:fe:76:8a:0b:55:4e:de:68:
f3:e4:8d:ae:e0:80:90:58:b0:5a:26:61:87:20:e0:
7c:f5:26:5c:90:b5:98:67:7a:00:6f:a6:50:b0:eb:
38:85:88:af:f9:6f:9c:25:d5:38:f4:df:8e:7a:6b:
1a:95:c2:fc:22:f0:b2:19:3f:43:24:45:13:2e:c2:
09:70:50:cd:e7:e4:5e:8c:a8:bc:3d:69:3d:a7:37:
d3:ee:14:b1:da:21:f9:38:d0:78:b4:e6:ce:b7:4d:
88:d8:7d:30:15:94:40:4b:b0:91:24:03:8d:91:c6:
58:ea:fc:28:28:19:ea:04:f8:9f:95:94:57:88:67:
79:86:b1:39:0d:41:04:4a:fb:b1:2e:06:ae:f9:46:
7d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:70:2B:C1:81:18:CF:4A:75:B5:14:BC:35:39:C5:FD:27:98:DA:63
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/E3ArwYEYz0p1tRS8NTnF_SeY2mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.204.0/24
Signature Algorithm: sha256WithRSAEncryption
58:9a:47:4b:e7:90:b4:45:21:75:d7:8c:06:e2:a1:f3:30:6b:
16:15:30:b3:fd:45:2b:9f:8b:0c:d1:65:4b:6a:ac:55:17:0a:
30:b2:13:b7:0d:5f:4a:76:6c:18:87:0c:35:76:48:3d:17:20:
5c:ab:d1:5f:97:21:b6:f5:e9:4c:ca:39:72:da:38:9f:35:36:
70:ec:f4:cb:67:1d:0d:f2:f6:d6:ab:74:61:f3:21:4e:9b:5b:
b8:08:ed:c6:6f:69:31:28:6b:e5:5c:23:30:b6:58:82:4b:ed:
e8:6a:35:6d:87:8f:6e:14:04:e5:ed:d2:0b:1f:d4:7a:55:db:
1b:94:92:3a:83:5b:4a:ff:b5:37:40:dc:1d:dc:3a:b4:57:3f:
92:16:5e:27:af:f9:7e:64:40:31:9d:9d:e5:a1:fc:47:3c:cf:
62:0e:d1:f4:11:70:d0:01:8a:04:e4:cf:57:ce:97:af:a2:47:
ac:c3:59:17:f5:63:82:7a:94:fa:03:46:39:45:b2:96:9f:8d:
49:ed:22:90:76:65:76:31:2e:4c:02:10:35:f6:2b:7f:e1:58:
79:74:4d:cb:3f:ed:a9:21:12:87:a8:47:78:ec:63:ef:64:d4:
7a:22:1c:3a:4e:a7:bc:3d:c9:9d:2f:fa:ec:d2:76:cc:16:ec:
09:8f:6c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 23:47:25 2026 by rpki-client