Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/evCm5rnnAOY-4dGWkj8b6X_UN7k.roa
File: evCm5rnnAOY-4dGWkj8b6X_UN7k.roa (raw, json)
Hash identifier: 5OzvGj9KHpgSdi0IFk8ZcR4dW5jq9NgN8CVEH+7xmDk=
Subject key identifier: 7A:F0:A6:E6:B9:E7:00:E6:3E:E1:D1:96:92:3F:1B:E9:7F:D4:37:B9
Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial: 019D2F6C91D367AD0AC7EBD78E92EC0EE5CF
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/evCm5rnnAOY-4dGWkj8b6X_UN7k.roa
Signing time: Fri 27 Mar 2026 13:12:17 +0000
ROA not before: Fri 27 Mar 2026 13:12:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35263
IP address blocks: 86.109.64.0/21 maxlen: 21
86.109.72.0/23 maxlen: 23
2a00:1b90::/32 maxlen: 32
2a13:7240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:6c:91:d3:67:ad:0a:c7:eb:d7:8e:92:ec:0e:e5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Validity
Not Before: Mar 27 13:12:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7af0a6e6b9e700e63ee1d196923f1be97fd437b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:ab:b3:54:76:84:b0:d7:65:61:00:c1:63:
e3:42:bd:a2:10:83:35:5e:bc:a5:4a:71:54:a5:8f:
d7:30:6c:6a:f4:5c:6d:a2:57:6c:0a:87:b7:07:91:
39:c9:bc:0f:39:44:fe:b0:cd:17:68:c1:e2:a4:6b:
08:5c:cd:0a:4d:fc:9c:73:c8:a7:11:e0:1d:70:76:
94:b8:c0:33:f4:3c:f9:c0:6a:4b:26:80:48:f0:8f:
89:a5:f6:a9:1c:c2:7c:a6:72:21:ab:20:4c:90:70:
d1:17:52:58:be:9e:f1:69:ac:57:12:e9:aa:44:ad:
d3:07:7f:7c:e9:f5:3c:b6:01:38:96:45:7a:e8:1c:
78:31:14:e4:db:b9:48:70:a2:71:0a:ca:3c:c4:36:
01:80:92:a6:0d:03:23:de:38:1f:a9:c7:96:15:5d:
f2:ff:6e:8d:cd:9f:23:98:87:fc:fb:0d:dc:c1:8a:
98:81:a9:8c:22:3e:e9:75:99:4f:57:b5:8d:77:7b:
62:2a:0f:32:19:e4:e3:ba:e3:ee:15:cf:eb:59:49:
fd:c4:23:ba:6d:1d:be:c0:64:67:d0:ec:2f:56:d8:
f3:f5:63:f3:73:1c:f8:3d:de:e3:4e:3f:aa:25:fb:
45:f2:28:fa:c7:6c:34:65:5a:43:6b:5d:85:c5:f9:
ba:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F0:A6:E6:B9:E7:00:E6:3E:E1:D1:96:92:3F:1B:E9:7F:D4:37:B9
X509v3 Authority Key Identifier:
keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/evCm5rnnAOY-4dGWkj8b6X_UN7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.64.0-86.109.73.255
IPv6:
2a00:1b90::/32
2a13:7240::/29
Signature Algorithm: sha256WithRSAEncryption
21:39:07:ca:68:3c:4c:f7:d7:f3:7a:5c:a3:b6:ca:15:12:32:
c6:7c:15:4a:0f:7e:a7:28:63:11:c3:60:2d:ef:c5:ad:be:88:
95:9e:94:b2:8a:6d:c3:5a:6f:9b:16:8c:5b:8f:b3:ec:99:92:
62:2f:0a:d0:81:76:9b:7b:94:25:a9:e2:78:31:50:48:01:f5:
0e:04:dc:92:3f:bb:7a:d0:0a:a1:61:68:5b:52:ef:49:c7:25:
78:f1:6d:9a:2d:e0:a3:ce:d1:cc:9e:cf:16:20:6f:87:cb:66:
df:36:11:ba:63:7c:cb:62:ef:f4:98:38:4b:2e:e0:50:93:e3:
25:a8:25:b9:0c:4e:ac:3b:52:eb:b5:ab:02:54:46:e1:22:71:
57:d5:d5:3e:94:be:3e:12:23:c9:2b:6f:c7:67:2d:7b:76:25:
29:d9:d6:a6:f7:49:8c:5d:c2:1d:60:c1:59:01:72:18:22:e4:
98:67:91:75:05:17:b0:cc:02:29:9d:c7:71:a6:73:da:5a:b5:
a4:bd:fb:32:2b:63:d9:ef:91:6b:ce:c0:3a:90:1d:5f:f2:13:
6c:19:d7:b2:7b:e5:8a:e7:55:8b:7c:27:70:cf:32:92:7d:af:
87:ba:ce:d9:8b:a9:a6:a5:3f:9c:e4:6d:fc:5f:b2:4e:45:c5:
90:1f:e7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 17:43:46 2026 by rpki-client