Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/eFeaVaRSBkGil76pjqqdgdUkbzI.roa
File: eFeaVaRSBkGil76pjqqdgdUkbzI.roa (raw, json)
Hash identifier: mK68NwlgziX7HL5QUueavEEpH7AmEQ0bjY5gVUd0cuc=
Subject key identifier: 78:57:9A:55:A4:52:06:41:A2:97:BE:A9:8E:AA:9D:81:D5:24:6F:32
Certificate issuer: /CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Certificate serial: 019CB3680FF2018C655B6DF0665DDE99EE65
Authority key identifier: 2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/eFeaVaRSBkGil76pjqqdgdUkbzI.roa
Signing time: Tue 03 Mar 2026 11:14:27 +0000
ROA not before: Tue 03 Mar 2026 11:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207328
IP address blocks: 84.45.50.0/24 maxlen: 24
84.45.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:68:0f:f2:01:8c:65:5b:6d:f0:66:5d:de:99:ee:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc5715c1676112eed6314594a59333c3d7e1e0
Validity
Not Before: Mar 3 11:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78579a55a4520641a297bea98eaa9d81d5246f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:71:1c:ca:d7:cf:9d:1e:c2:44:72:0b:aa:
f8:10:89:43:ee:80:1f:c6:13:4d:98:ff:59:55:1d:
b4:1e:cf:39:e7:32:0d:05:ea:2d:ce:37:51:47:f3:
7b:46:61:5a:0d:47:a2:32:1c:d6:6f:60:a5:3f:d5:
75:6a:f7:76:4e:c4:b9:bb:a2:cc:e9:4f:11:c2:ad:
98:5c:48:7b:bc:5a:69:99:c6:e1:21:ad:c6:4a:c0:
f0:e1:01:f7:35:8c:09:fa:70:f7:f6:ce:dd:57:49:
22:72:44:f2:09:ca:35:ca:1c:d3:91:85:a0:e2:a1:
2b:44:6b:10:00:6e:c3:2f:b2:28:79:4d:e9:cb:19:
b5:26:63:0d:28:26:58:bb:c4:79:33:1a:b0:6c:5c:
8c:78:d0:c8:5c:20:9c:3b:6e:d3:aa:1d:ca:89:45:
22:9b:fd:46:59:17:3e:6b:de:9f:7c:e4:a3:5d:c1:
ae:d6:b9:f8:a3:25:8f:be:15:f0:ba:ba:95:35:4f:
ed:89:7b:88:1c:b8:22:23:23:2d:74:78:1d:37:26:
97:57:8d:3e:aa:67:11:ea:41:d3:5b:c3:ed:6d:7d:
65:e9:d3:7a:46:cb:04:0a:1c:6c:8c:16:86:9d:8d:
f1:31:8a:92:7d:82:f7:bf:1f:dc:8b:44:68:99:cf:
70:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:57:9A:55:A4:52:06:41:A2:97:BE:A9:8E:AA:9D:81:D5:24:6F:32
X509v3 Authority Key Identifier:
keyid:2E:CC:57:15:C1:67:61:12:EE:D6:31:45:94:A5:93:33:C3:D7:E1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsxXFcFnYRLu1jFFlKWTM8PX4eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/eFeaVaRSBkGil76pjqqdgdUkbzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7ae10b-c5e1-4304-928b-36fd606d8d09/1/LsxXFcFnYRLu1jFFlKWTM8PX4eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.45.50.0/24
84.45.70.0/24
Signature Algorithm: sha256WithRSAEncryption
17:b0:e1:4d:e4:f3:9a:a8:bb:d6:86:26:9f:2e:39:7d:4d:54:
f4:6a:6f:61:30:df:45:41:ad:c0:62:52:ec:98:95:bc:bd:b6:
d3:a2:f4:04:50:d5:c8:72:d0:f9:cf:e9:cc:c0:c9:ae:cd:17:
e2:33:a7:44:f1:ef:69:77:69:12:01:33:f6:39:8d:bc:bd:47:
eb:50:0c:f5:35:33:12:ca:23:a5:96:f7:0a:c9:e6:78:e6:b0:
0a:df:1d:b9:2b:00:d2:18:7a:d0:fc:b4:34:50:7c:31:54:66:
2e:95:d1:ea:1b:7b:4c:ae:6a:0f:40:9a:f9:7c:73:7e:c7:ee:
57:8a:7e:3a:4a:fa:ad:56:95:20:2d:d6:4b:e1:09:a7:c6:ec:
c0:be:67:6a:e5:58:5b:d2:75:93:c8:dd:94:0d:c6:13:8f:e6:
f6:78:a4:3a:06:b4:9e:c3:a4:16:35:47:21:80:26:1d:25:ee:
09:c9:9a:43:90:9d:18:3e:d2:9c:a2:d1:c0:33:50:81:7a:cd:
3a:f3:ff:e0:51:9f:3b:29:c4:c9:70:bd:bb:fa:2c:c5:b5:3c:
04:70:30:13:7b:74:c3:2c:25:95:5c:96:f0:a6:93:69:31:37:
d3:da:2d:8a:1f:c2:54:60:31:12:8e:b7:76:16:af:6b:c2:96:
e9:a5:8b:c5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZyzaA/yAYxlW23wZl3eme5lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlY2M1NzE1YzE2NzYxMTJlZWQ2MzE0NTk0YTU5MzMzYzNk
N2UxZTAwHhcNMjYwMzAzMTExNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODU3OWE1NWE0NTIwNjQxYTI5N2JlYTk4ZWFhOWQ4MWQ1MjQ2ZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6pxHMrXz50ewkRyC6r4EIlD7oAf
xhNNmP9ZVR20Hs855zINBeotzjdRR/N7RmFaDUeiMhzWb2ClP9V1avd2TsS5u6LM
6U8Rwq2YXEh7vFppmcbhIa3GSsDw4QH3NYwJ+nD39s7dV0kickTyCco1yhzTkYWg
4qErRGsQAG7DL7IoeU3pyxm1JmMNKCZYu8R5MxqwbFyMeNDIXCCcO27Tqh3KiUUi
m/1GWRc+a96ffOSjXcGu1rn4oyWPvhXwurqVNU/tiXuIHLgiIyMtdHgdNyaXV40+
qmcR6kHTW8PtbX1l6dN6RssEChxsjBaGnY3xMYqSfYL3vx/ci0Romc9wDQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHhXmlWkUgZBope+qY6qnYHVJG8yMB8GA1UdIwQY
MBaAFC7MVxXBZ2ES7tYxRZSlkzPD1+HgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHN4WEZjRm5ZUkx1MWpGRmxLV1RNOFBYNGVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YWUxMGItYzVlMS00MzA0LTkyOGIt
MzZmZDYwNmQ4ZDA5LzEvZUZlYVZhUlNCa0dpbDc2cGpxcWRnZFVrYnpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YWUxMGItYzVlMS00MzA0LTkyOGItMzZmZDYwNmQ4ZDA5
LzEvTHN4WEZjRm5ZUkx1MWpGRmxLV1RNOFBYNGVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVC0yAwQA
VC1GMA0GCSqGSIb3DQEBCwUAA4IBAQAXsOFN5POaqLvWhiafLjl9TVT0am9hMN9F
Qa3AYlLsmJW8vbbTovQEUNXIctD5z+nMwMmuzRfiM6dE8e9pd2kSATP2OY28vUfr
UAz1NTMSyiOllvcKyeZ45rAK3x25KwDSGHrQ/LQ0UHwxVGYuldHqG3tMrmoPQJr5
fHN+x+5Xin46SvqtVpUgLdZL4QmnxuzAvmdq5Vhb0nWTyN2UDcYTj+b2eKQ6BrSe
w6QWNUchgCYdJe4JyZpDkJ0YPtKcotHAM1CBes068//gUZ87KcTJcL27+izFtTwE
cDATe3TDLCWVXJbwppNpMTfT2i2KH8JUYDESjrd2Fq9rwpbppYvF
-----END CERTIFICATE-----
Generated at Sat Mar 7 18:33:27 2026 by rpki-client