Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/eB4uOT6yIJ90-7WQMq3rRaWige0.roa
File: eB4uOT6yIJ90-7WQMq3rRaWige0.roa (raw, json)
Hash identifier: 0bN90UYrI/jqLeHoVlUJEcwKG5W/ZPrQB/kL7FwjFBY=
Subject key identifier: 78:1E:2E:39:3E:B2:20:9F:74:FB:B5:90:32:AD:EB:45:A5:A2:81:ED
Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Certificate serial: 019D0B0DD714BA368445FC1E62CA1E7D9A02
Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/eB4uOT6yIJ90-7WQMq3rRaWige0.roa
Signing time: Fri 20 Mar 2026 11:42:29 +0000
ROA not before: Fri 20 Mar 2026 11:42:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 195.66.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:0d:d7:14:ba:36:84:45:fc:1e:62:ca:1e:7d:9a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Validity
Not Before: Mar 20 11:42:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=781e2e393eb2209f74fbb59032adeb45a5a281ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:09:66:e8:56:d1:dc:00:c5:08:e1:9b:97:
5f:16:2b:dc:6d:f6:cb:0a:0b:9a:01:bf:79:ac:15:
e9:bb:2a:f0:b7:88:d6:b1:c2:d6:33:c3:e7:62:d2:
34:4b:dc:ad:b4:c1:02:7b:e2:94:1b:43:e2:fb:c3:
8d:a9:35:32:a3:9c:54:9a:ed:cc:87:e0:72:15:f2:
13:8f:a5:61:cb:c6:4a:cd:b3:3f:e7:7f:c4:56:69:
ae:d6:c6:b6:e6:59:33:64:94:b0:30:65:fe:5c:d4:
fe:7b:0a:ac:5a:b8:b7:f0:c7:97:9e:20:a6:45:87:
a4:ae:2f:d1:eb:d4:2c:88:5f:8a:dd:54:3d:9b:4c:
23:1e:00:e5:29:9b:d5:69:0b:a5:6c:03:14:49:84:
ad:5e:a6:a3:51:82:a1:2b:ca:08:ec:ba:3b:b1:e4:
8c:08:ab:8b:27:e1:70:1a:2c:f3:c1:ca:0c:b1:4f:
da:37:24:15:e6:5e:5a:66:99:0f:ab:d0:87:d1:c5:
70:8e:7a:30:cf:7d:0b:73:89:63:76:86:b0:e1:e6:
28:18:a8:d8:61:82:c1:07:7f:46:ba:b5:10:be:ee:
69:94:00:40:11:c5:8a:db:80:2c:60:7a:50:98:fd:
7a:54:f2:8a:04:24:dd:96:94:65:71:2d:15:16:a0:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1E:2E:39:3E:B2:20:9F:74:FB:B5:90:32:AD:EB:45:A5:A2:81:ED
X509v3 Authority Key Identifier:
keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/eB4uOT6yIJ90-7WQMq3rRaWige0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.107.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:b7:50:1e:55:ea:fc:80:e8:30:3c:da:b5:36:13:f1:b7:45:
df:98:59:1f:61:4a:74:55:0a:94:f6:25:74:f2:b6:e7:2f:ee:
16:2f:7d:af:25:60:44:8b:e4:d2:8a:3c:c3:4b:ae:da:d1:5f:
b6:cf:d3:43:4b:6d:d7:cd:ee:60:08:ae:cd:ee:e4:cb:29:c2:
df:1f:5d:37:13:d2:ba:73:3c:72:5e:d2:f5:43:47:32:1a:b7:
c6:68:98:2c:23:4c:03:72:da:f0:33:9f:7f:bf:c2:38:ba:8a:
2a:2a:c9:0c:77:09:6a:46:b4:2f:f8:7a:9b:e3:33:c1:14:31:
14:bf:dd:06:42:ec:83:7b:1d:c8:7e:74:93:70:7f:53:40:be:
cc:b5:da:be:e1:4d:5f:85:3f:e5:a8:ce:60:e2:83:f3:08:c9:
c6:98:75:3c:48:a8:37:cc:b5:1c:f9:2f:1b:ad:20:ed:d5:43:
bc:1f:c9:87:25:6d:54:1f:98:d0:df:46:a0:41:d0:47:17:fe:
77:82:dd:01:9d:d6:bc:11:c0:d6:1e:97:bd:c2:cb:05:74:33:
38:4a:c4:41:6e:66:20:6d:8d:26:61:4c:7d:a4:86:ad:ef:8a:
16:8a:9b:6e:71:4f:25:da:53:b6:2e:9f:90:de:b8:a2:de:ff:
e2:2d:82:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0LDdcUujaERfweYsoefZoCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOTkxOGVkMjE5ZTdkM2Q5MjI3MzdlY2RjNzMxZjBjYTYw
YTY4YjgwHhcNMjYwMzIwMTE0MjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODFlMmUzOTNlYjIyMDlmNzRmYmI1OTAzMmFkZWI0NWE1YTI4MWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5AJZuhW0dwAxQjhm5dfFivcbfbL
CguaAb95rBXpuyrwt4jWscLWM8PnYtI0S9yttMECe+KUG0Pi+8ONqTUyo5xUmu3M
h+ByFfITj6Vhy8ZKzbM/53/EVmmu1sa25lkzZJSwMGX+XNT+ewqsWri38MeXniCm
RYekri/R69QsiF+K3VQ9m0wjHgDlKZvVaQulbAMUSYStXqajUYKhK8oI7Lo7seSM
CKuLJ+FwGizzwcoMsU/aNyQV5l5aZpkPq9CH0cVwjnowz30Lc4ljdoaw4eYoGKjY
YYLBB39GurUQvu5plABAEcWK24AsYHpQmP16VPKKBCTdlpRlcS0VFqCLsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHgeLjk+siCfdPu1kDKt60WlooHtMB8GA1UdIwQY
MBaAFPGZGO0hnn09kic37NxzHwymCmi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzIt
MzEzZWZlYjBiMTlkLzEvZUI0dU9UNnlJSjkwLTdXUU1xM3JSYVdpZ2UwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzItMzEzZWZlYjBiMTlk
LzEvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0JrMA0G
CSqGSIb3DQEBCwUAA4IBAQCit1AeVer8gOgwPNq1NhPxt0XfmFkfYUp0VQqU9iV0
8rbnL+4WL32vJWBEi+TSijzDS67a0V+2z9NDS23Xze5gCK7N7uTLKcLfH103E9K6
czxyXtL1Q0cyGrfGaJgsI0wDctrwM59/v8I4uooqKskMdwlqRrQv+Hqb4zPBFDEU
v90GQuyDex3IfnSTcH9TQL7Mtdq+4U1fhT/lqM5g4oPzCMnGmHU8SKg3zLUc+S8b
rSDt1UO8H8mHJW1UH5jQ30agQdBHF/53gt0Bnda8EcDWHpe9wssFdDM4SsRBbmYg
bY0mYUx9pIat74oWiptucU8l2lO2Lp+Q3rii3v/iLYL3
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:05 2026 by rpki-client