Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eZs_bvkW4rZ7po98omRWk-iE2NU.roa
File: eZs_bvkW4rZ7po98omRWk-iE2NU.roa (raw, json)
Hash identifier: ua0JCXe2yQO+6mnwGytP0c1UNvv4em7mqdHNIn1o+Ec=
Subject key identifier: 79:9B:3F:6E:F9:16:E2:B6:7B:A6:8F:7C:A2:64:56:93:E8:84:D8:D5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CD6B154826933C8BBBFDCAF080059EDAC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eZs_bvkW4rZ7po98omRWk-iE2NU.roa
Signing time: Tue 10 Mar 2026 07:41:11 +0000
ROA not before: Tue 10 Mar 2026 07:41:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215439
IP address blocks: 89.144.16.0/24 maxlen: 24
94.103.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d6:b1:54:82:69:33:c8:bb:bf:dc:af:08:00:59:ed:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 10 07:41:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=799b3f6ef916e2b67ba68f7ca2645693e884d8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:5e:7e:ab:cc:85:28:be:a5:f4:49:5e:6b:
e5:3a:cb:ee:ed:0e:fa:ce:b5:4d:78:ee:dd:b5:c8:
b8:98:82:1d:6a:a6:02:b5:27:fd:07:25:79:c0:98:
b5:77:62:c6:be:6a:d7:1e:ec:3a:14:c7:35:75:25:
e4:63:d5:74:9d:c5:89:28:ef:a5:64:7a:58:76:f5:
ed:37:a5:9b:59:6d:a3:f2:8c:86:06:1f:d0:f6:e9:
56:13:1c:fe:10:59:ab:d5:f2:f0:64:d9:af:7b:39:
a1:e1:6b:f7:15:6f:a2:c3:cb:da:1f:46:63:d3:31:
48:c9:d1:2d:d0:0a:96:08:a1:8f:e6:a1:2d:38:5e:
9e:17:20:22:9c:5b:a3:26:1c:26:7e:e8:ab:3b:87:
6c:86:30:0b:50:28:78:8f:17:a2:50:17:53:c8:eb:
1e:15:72:3c:60:7b:c0:ae:26:3a:49:4d:42:76:0c:
ac:e8:87:96:95:4f:08:bd:42:ff:05:3b:f9:cd:e9:
b9:5c:75:38:92:35:48:ab:9b:7d:e7:86:a7:0b:13:
69:e2:a2:1b:d9:ff:4b:e0:75:e5:fa:79:b9:1b:d1:
82:52:fd:0c:3a:a9:72:d1:d6:a8:78:13:19:4d:4b:
a3:54:e5:c8:67:20:15:3c:55:ce:ec:ad:99:2f:2e:
8c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9B:3F:6E:F9:16:E2:B6:7B:A6:8F:7C:A2:64:56:93:E8:84:D8:D5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eZs_bvkW4rZ7po98omRWk-iE2NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.16.0/24
94.103.169.0/24
Signature Algorithm: sha256WithRSAEncryption
29:6d:5f:5c:4e:50:26:1b:89:48:9c:1d:32:43:77:91:9d:f3:
5e:51:57:0b:eb:2f:46:1a:11:f8:58:02:37:a1:b3:5b:06:e3:
04:59:66:3c:ad:47:b1:c6:c2:81:3a:90:d5:09:80:a7:cc:d4:
e7:d0:75:a8:71:17:4b:7a:47:19:1e:93:10:35:61:33:b5:40:
31:89:cd:6d:00:96:89:f3:da:75:fd:c1:51:f2:78:e6:2b:14:
29:a1:1e:50:69:94:1e:1c:31:36:cb:a4:13:43:a4:cd:c9:eb:
37:48:f1:49:d1:6a:b0:74:79:b9:4a:a3:48:5a:fd:a7:21:7f:
6c:35:88:41:c5:c1:fd:2e:bd:1c:a3:aa:c7:c2:cf:81:d4:50:
d2:02:80:e0:4d:73:cf:61:6a:cb:7b:0f:eb:67:82:d7:61:de:
7c:47:a1:e8:b5:2c:34:83:c1:ea:ee:a0:dd:d2:67:94:b2:ab:
32:0f:28:4b:ed:49:55:fc:41:4d:ef:e6:ae:71:87:8f:25:a2:
e3:98:04:93:15:e4:3c:d6:cf:3b:7c:8f:7d:cc:2d:61:58:29:
4c:c1:a7:98:3d:e3:9b:14:d9:b7:10:0e:b6:f5:6a:f9:3d:74:
3d:e3:d8:cd:d5:6d:7f:43:1d:51:cc:4d:35:36:c2:ea:49:c6:
79:6e:21:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:46:14 2026 by rpki-client