Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/ebH1LH3rtcCFyoMlHWJucoddnKk.roa
File: ebH1LH3rtcCFyoMlHWJucoddnKk.roa (raw, json)
Hash identifier: w5pFXYTG5xXpiPZ27k95gUc+ufkXKutPUdAJkQwEA8E=
Subject key identifier: 79:B1:F5:2C:7D:EB:B5:C0:85:CA:83:25:1D:62:6E:72:87:5D:9C:A9
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 01A0340C2B025852C6304252D466631CC056
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/ebH1LH3rtcCFyoMlHWJucoddnKk.roa
Signing time: Mon 24 Aug 2026 13:53:27 +0000
ROA not before: Mon 24 Aug 2026 13:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 45.156.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:0c:2b:02:58:52:c6:30:42:52:d4:66:63:1c:c0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Aug 24 13:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79b1f52c7debb5c085ca83251d626e72875d9ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:c2:ae:d2:0e:17:52:c5:3d:31:f7:98:6f:
8c:67:ce:92:92:64:4f:8f:da:88:45:c9:1d:49:30:
a7:c3:31:5d:28:ae:8f:73:27:b5:43:77:44:c5:a9:
30:ba:01:3f:e7:11:5e:5c:2a:47:8f:7d:c4:b6:c3:
3e:b0:f7:8b:9f:33:bf:9d:e0:cb:e4:02:e0:4a:ec:
b2:dd:fc:5a:a8:b9:aa:30:5e:4c:69:a2:5e:61:5f:
e5:90:54:00:b1:e4:ff:28:41:55:0d:cd:4e:30:07:
c5:58:34:44:71:fe:df:d3:ae:09:a2:9d:89:bb:a0:
7e:56:77:ce:b9:4d:d4:b1:bc:c3:ef:0b:eb:0d:8f:
b0:0b:a9:9d:4a:0c:16:f4:7a:14:4a:46:09:ac:07:
f1:c3:f5:35:d5:aa:01:cf:29:5a:1c:86:8c:f8:e4:
72:f0:7e:bf:6a:64:5b:99:15:7a:ec:f3:be:c9:83:
05:47:76:e3:45:78:fc:d0:d2:b6:48:90:37:99:f7:
9a:10:21:ff:41:ac:35:f8:ea:51:91:ff:5f:9b:c0:
02:35:5b:c0:53:f4:fe:98:08:32:04:d6:1d:b9:12:
61:e6:99:69:5f:05:b1:2d:bd:af:7b:d9:17:d3:1b:
27:f5:5c:a6:e3:7c:10:37:26:4e:4a:c6:8b:15:fb:
da:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B1:F5:2C:7D:EB:B5:C0:85:CA:83:25:1D:62:6E:72:87:5D:9C:A9
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/ebH1LH3rtcCFyoMlHWJucoddnKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.146.0/24
Signature Algorithm: sha256WithRSAEncryption
97:3e:ab:90:01:25:f3:c3:86:0b:ef:57:8a:72:96:46:41:9b:
c3:e1:78:1f:ea:22:00:cf:6c:6b:50:77:93:1f:cf:6a:ac:8b:
87:c8:96:44:c5:47:2b:8b:78:18:39:57:38:98:0f:5b:a4:61:
7e:51:6d:29:0b:09:8b:43:b1:c9:be:4b:c9:7e:f6:82:fa:cc:
c8:0e:6e:b5:b1:94:a2:31:a1:02:c4:f1:a9:54:7c:3e:47:11:
34:29:2a:68:be:d4:ab:5b:9a:84:6e:d1:6f:7c:43:ba:45:b4:
9e:fc:cf:15:aa:df:4c:29:d1:8b:4b:ed:38:9d:a5:fc:6e:59:
57:40:bb:9c:53:3b:a4:92:ec:0c:8a:2a:25:d7:64:b5:a5:e3:
52:e0:9a:00:7e:e7:68:44:ae:fd:4c:ed:4b:fc:fd:1d:3a:c2:
99:1d:33:71:ef:7d:13:68:55:aa:cc:71:0d:b2:21:3c:33:cc:
c8:f7:3e:ba:71:18:9d:c5:88:72:a2:06:59:4e:4a:f1:5b:06:
34:9c:84:af:4d:13:8f:68:3f:03:26:ca:5a:f3:1c:de:35:e9:
d4:a9:60:43:8f:26:16:5a:c6:38:6e:72:3d:40:4b:ad:5a:53:
86:5b:b6:cc:45:d4:51:56:eb:ad:4a:8b:65:db:35:70:40:ae:
bc:49:3a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 30 06:28:35 2026 by rpki-client