Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/e1JjC5WFbTioA0QO0B4nYiY-3-0.roa
File: e1JjC5WFbTioA0QO0B4nYiY-3-0.roa (raw, json)
Hash identifier: kjrs8TwJGxPvEvD0Gp9V75aup5Hzu1MHVeUZcnwwG/0=
Subject key identifier: 7B:52:63:0B:95:85:6D:38:A8:03:44:0E:D0:1E:27:62:26:3E:DF:ED
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 019F23687AFB095E2E1758FFC102AC8D8A02
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/e1JjC5WFbTioA0QO0B4nYiY-3-0.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211440
IP address blocks: 195.114.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 Jul 2026 15:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7a:fb:09:5e:2e:17:58:ff:c1:02:ac:8d:8a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b52630b95856d38a803440ed01e2762263edfed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:1d:ce:f8:3f:3d:55:e0:86:85:d3:c9:be:
b0:79:7e:3d:92:08:77:a2:fc:42:9d:ce:84:bb:38:
05:5e:6d:6b:de:a6:9d:49:72:56:07:11:19:ff:dc:
0a:77:bf:4a:ea:f6:42:3e:71:5a:1f:c7:1b:7c:d1:
d4:69:a8:3c:56:d4:8d:65:04:1d:66:24:3f:23:37:
6e:14:45:be:2d:cc:39:10:b7:7c:24:cd:2c:64:af:
75:14:3e:50:2d:f2:29:da:3f:13:47:d4:d8:b0:c8:
25:09:aa:49:a5:c2:3a:51:aa:64:eb:f9:e9:99:ab:
5e:ea:77:38:be:e4:92:64:4e:cf:ce:e8:08:6c:b9:
0f:51:47:6a:db:1c:10:0e:52:9d:e1:13:1c:79:34:
46:3c:cc:8b:4d:69:79:8b:46:db:ac:bb:fe:71:43:
9e:b7:4c:9f:70:5b:69:c5:cf:e1:0b:ab:7a:a8:0d:
f3:6b:d1:1a:86:57:ce:2d:3b:a1:e9:c1:b1:4b:17:
77:94:63:8a:5f:0a:3a:f9:13:3a:a4:9f:d4:10:1d:
e3:22:fa:38:68:db:e9:e2:25:84:a2:66:d5:92:3f:
19:03:04:d4:a3:38:ef:6d:84:ed:a8:53:0c:66:3c:
13:bb:b3:0e:31:93:86:04:82:26:67:24:e4:a6:12:
a1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:52:63:0B:95:85:6D:38:A8:03:44:0E:D0:1E:27:62:26:3E:DF:ED
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/e1JjC5WFbTioA0QO0B4nYiY-3-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.194.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:49:06:ce:85:96:27:5e:f7:72:b1:c2:76:ff:8c:7f:b5:bd:
b5:e5:af:18:98:43:1a:1b:02:98:c9:62:94:79:6b:61:83:1b:
35:75:20:d1:45:87:33:6a:3e:c1:9d:29:9e:f7:93:be:31:c7:
fe:6f:af:84:92:66:f3:4e:3f:04:a0:cd:db:e6:2b:bf:30:59:
38:36:db:86:f6:09:30:75:b7:e5:e0:23:9e:e0:07:11:33:17:
2a:5c:27:0f:a0:2b:8a:2a:38:06:a3:4f:54:50:20:e5:95:48:
70:c9:13:23:e4:60:e2:86:4c:69:d3:54:73:01:d7:e5:9d:3b:
6b:5a:a6:e5:7f:d3:bb:01:35:67:a7:76:a3:21:c6:a2:6d:a5:
af:4c:2b:b9:73:62:41:cc:f8:b1:bf:7e:50:97:bd:57:a2:15:
6b:6f:c7:ad:8c:93:d9:9e:b1:d2:83:ad:b8:88:d5:a2:33:ba:
05:7a:f5:4a:6d:d4:91:c4:c8:4a:fa:69:d5:2e:61:fc:ab:ef:
01:a4:00:d2:0d:92:e5:ab:7a:be:00:c9:80:78:77:b5:94:0c:
d6:da:17:8d:74:4e:0c:7b:42:07:08:63:c4:58:08:8d:d2:bd:
1c:01:3d:df:b6:13:8f:82:63:19:f4:c2:d5:3c:fb:b9:8c:17:
b6:af:49:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 23:47:32 2026 by rpki-client