Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/ESDAcJLHfjqrwnrts6KYyW0KS1o.roa
File: ESDAcJLHfjqrwnrts6KYyW0KS1o.roa (raw, json)
Hash identifier: 5uEPAvT3xbVzgsFIOnaQIxZp/g0qb8lHPuYCQbHaDA8=
Subject key identifier: 11:20:C0:70:92:C7:7E:3A:AB:C2:7A:ED:B3:A2:98:C9:6D:0A:4B:5A
Certificate issuer: /CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Certificate serial: 019D2A186F1498FA95D43F19ECBC35329BB0
Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/ESDAcJLHfjqrwnrts6KYyW0KS1o.roa
Signing time: Thu 26 Mar 2026 12:22:17 +0000
ROA not before: Thu 26 Mar 2026 12:22:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207019
IP address blocks: 185.133.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:18:6f:14:98:fa:95:d4:3f:19:ec:bc:35:32:9b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Validity
Not Before: Mar 26 12:22:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1120c07092c77e3aabc27aedb3a298c96d0a4b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:ce:1d:c7:8c:4d:43:2e:8d:b5:dd:86:12:
43:4f:3b:c3:c8:7a:f8:a3:41:a0:5d:a2:30:36:8d:
af:dd:51:f4:16:ff:8a:4d:a8:39:0f:07:3a:20:00:
3d:52:fd:53:1d:05:6e:37:88:7f:ac:74:fe:fe:73:
33:9b:c0:d8:c9:6e:d1:d3:a1:f0:04:26:2f:d3:d2:
48:61:d3:0e:5d:d9:cf:f0:12:e3:f9:99:6a:5b:c9:
21:8d:03:c8:7e:fa:3a:8c:46:69:c3:5d:f2:b0:64:
41:fe:45:c9:7c:a0:fc:f0:40:0b:08:23:0c:bd:79:
cc:8d:fa:90:aa:9d:32:4b:2b:69:80:e9:d8:95:bf:
a4:28:e3:6d:76:88:41:41:be:00:2d:e0:81:b6:92:
43:50:74:5f:02:7d:12:c2:9f:85:92:3b:a0:da:ec:
2d:5e:07:15:0c:bb:15:34:d7:b8:c6:cc:22:36:1d:
83:a3:ca:ee:ee:ff:17:bf:ab:1c:ed:4b:ee:18:13:
e1:51:ec:af:2e:ed:4b:69:63:67:df:99:d9:ca:c3:
a8:95:14:54:d7:27:3b:ad:37:32:ab:7a:4b:e0:d0:
42:04:03:d3:d4:e7:64:cc:9b:e3:43:1d:21:61:7b:
17:99:9f:4d:5b:99:b2:f2:54:7c:90:d7:69:e6:05:
92:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:20:C0:70:92:C7:7E:3A:AB:C2:7A:ED:B3:A2:98:C9:6D:0A:4B:5A
X509v3 Authority Key Identifier:
keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/ESDAcJLHfjqrwnrts6KYyW0KS1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.241.0/24
Signature Algorithm: sha256WithRSAEncryption
83:97:a1:60:8f:61:87:d0:ab:a7:5b:d1:0e:5a:2f:8a:7f:7b:
34:49:10:b9:73:aa:51:81:6b:97:27:c4:96:88:7e:85:c8:bf:
c1:d1:ad:64:6d:c8:c0:ff:4f:6d:29:11:2a:fc:1c:b8:28:cf:
b2:fe:16:d9:6c:a1:cb:93:5c:01:1d:b7:7a:de:6d:b3:b2:cc:
12:69:10:6e:ff:b9:7f:de:e0:f4:b4:50:10:b5:dd:59:f6:d7:
e4:78:3e:9e:21:5a:bb:0f:31:f6:49:89:06:6d:b5:1a:f0:fe:
90:1e:e3:18:95:d3:34:fe:21:cd:95:9c:e7:a4:e9:f9:5d:65:
5f:a2:b6:6f:85:79:47:8a:a9:66:68:e2:d0:e8:99:8a:ff:8a:
ca:d4:29:b0:77:1c:8e:25:3e:ef:d2:5b:c5:cb:62:9f:aa:88:
4d:bb:e3:fd:a2:b0:97:96:f7:33:68:5a:c9:23:33:79:53:d8:
8b:b2:1b:43:de:4c:fc:d9:99:68:53:de:65:17:30:1a:1a:3a:
d3:68:0d:6d:c2:5d:69:5d:38:ed:41:9f:0a:bb:0a:22:f6:5e:
53:78:d2:ec:59:5c:24:4e:58:27:e7:66:c4:01:4e:0d:5a:c3:
fe:a2:e7:80:17:67:5b:6b:8e:cb:40:f4:57:f0:ea:9d:7b:a8:
3f:80:a1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:16:20 2026 by rpki-client