Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/seaj6eEZVTZUJpNx7RRi3gC4pCk.roa
File: seaj6eEZVTZUJpNx7RRi3gC4pCk.roa (raw, json)
Hash identifier: 2M4Gz43Az1A6CqJ3rJAlxFW9GvyWihCVuCOKrs2C4Xo=
Subject key identifier: B1:E6:A3:E9:E1:19:55:36:54:26:93:71:ED:14:62:DE:00:B8:A4:29
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F84A32DB0E151DC1E50143D55FC40F1B9
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/seaj6eEZVTZUJpNx7RRi3gC4pCk.roa
Signing time: Tue 21 Jul 2026 12:25:14 +0000
ROA not before: Tue 21 Jul 2026 12:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 213.189.21.0/24 maxlen: 24
213.189.24.0/24 maxlen: 24
213.214.105.0/24 maxlen: 24
213.247.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:a3:2d:b0:e1:51:dc:1e:50:14:3d:55:fc:40:f1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 21 12:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1e6a3e9e119553654269371ed1462de00b8a429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:56:d7:32:fd:80:fa:45:0d:27:30:bc:b7:
3f:50:97:78:b6:7c:0b:38:19:b7:60:99:d5:61:e0:
c1:6d:6f:da:bc:54:14:55:45:3a:72:7f:d8:d2:79:
29:38:81:16:8a:25:d3:6a:f3:73:59:b6:ec:ca:2e:
7c:d9:52:fc:06:87:47:07:1d:63:7f:50:1c:6e:6c:
45:c7:e9:ce:99:c0:bb:bd:f4:d7:70:bb:34:d5:1d:
1d:ad:14:02:a6:b7:87:a8:f1:f0:d2:0a:d4:df:f8:
2f:77:66:56:fb:c4:80:b9:23:00:0d:f9:2e:f0:c3:
28:e1:4a:ba:07:1e:22:2d:6f:68:44:31:5b:16:0e:
ab:a2:92:4e:55:c1:f1:68:ec:21:57:fd:a5:a7:b1:
9d:7c:a9:4f:bb:d9:25:22:cc:b7:33:fe:6d:92:ac:
6e:02:6b:bc:2b:f6:54:e8:3f:c9:7e:12:f2:13:28:
67:04:ac:ca:ce:c6:17:a5:72:9a:38:7b:8c:1c:e5:
36:d8:d5:c0:c0:de:38:b2:12:42:d4:45:fe:0c:ab:
2a:93:55:23:4f:c8:46:20:6c:7d:ce:f5:fc:f0:ce:
68:bc:af:49:6d:23:91:fe:bc:b6:e7:ce:f5:1e:a0:
5e:84:07:1a:66:96:8d:c3:4f:81:79:dc:f8:2a:ab:
c0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E6:A3:E9:E1:19:55:36:54:26:93:71:ED:14:62:DE:00:B8:A4:29
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/seaj6eEZVTZUJpNx7RRi3gC4pCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.189.21.0/24
213.189.24.0/24
213.214.105.0/24
213.247.44.0/24
Signature Algorithm: sha256WithRSAEncryption
33:42:33:50:cd:e7:47:43:4c:1e:c3:02:90:7f:b0:b2:82:7d:
69:45:98:66:5e:85:9e:64:08:79:36:2f:ea:cb:d8:41:68:97:
74:29:58:fb:05:54:9d:cf:04:28:1b:2a:d2:96:f1:c0:5a:92:
d4:46:43:99:af:df:b6:a4:1c:e4:e1:d3:01:4f:1d:3f:bd:47:
ef:aa:c2:88:2c:5b:39:37:3b:43:01:d4:d0:5b:2b:01:4c:14:
ec:3d:78:46:8e:a5:bf:e1:a3:63:f3:92:a1:fd:d1:6f:fd:57:
33:61:ee:2c:7b:c4:95:a5:6f:1d:94:8f:ed:8e:bc:c0:17:02:
94:84:f3:d3:b7:1f:00:eb:ef:fd:c3:9b:d7:15:ce:3c:1e:12:
0a:5d:a6:85:83:38:d6:eb:ec:7e:29:77:f6:4a:81:4f:96:2e:
b1:e2:e4:12:8c:74:9a:8f:fa:e9:24:2e:d8:4a:e0:f2:6c:1d:
90:de:98:49:1e:4c:ff:9c:59:fc:79:f4:ea:4e:f0:8e:3c:82:
f6:ca:66:e7:77:56:21:13:01:30:41:39:ba:6f:f4:2d:48:fc:
da:92:94:ec:d7:d7:8e:ac:da:4d:59:18:79:d2:88:19:c6:0d:
95:5b:71:39:c2:e8:80:6e:d9:6c:b1:ad:b7:ad:cc:ed:21:bc:
35:67:1e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:34 2026 by rpki-client