Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/uWvjzjFD9KKhIcm1WclkMJ_jNI0.roa
File: uWvjzjFD9KKhIcm1WclkMJ_jNI0.roa (raw, json)
Hash identifier: 0j+hqXUpMUQC1d+uI4zzXLx8h7JFNkM5I8CLS1iyxUs=
Subject key identifier: B9:6B:E3:CE:31:43:F4:A2:A1:21:C9:B5:59:C9:64:30:9F:E3:34:8D
Certificate issuer: /CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd
Certificate serial: 019F2777641A11F5140DCFE3F7221A1C7890
Authority key identifier: EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/uWvjzjFD9KKhIcm1WclkMJ_jNI0.roa
Signing time: Fri 03 Jul 2026 10:12:43 +0000
ROA not before: Fri 03 Jul 2026 10:12:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34177
IP address blocks: 145.242.1.0/24 maxlen: 24
145.242.2.0/24 maxlen: 24
145.242.6.0/24 maxlen: 24
145.242.11.0/24 maxlen: 24
145.242.17.0/24 maxlen: 24
145.242.20.0/24 maxlen: 24
145.242.31.0/24 maxlen: 24
145.242.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:77:64:1a:11:f5:14:0d:cf:e3:f7:22:1a:1c:78:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd
Validity
Not Before: Jul 3 10:12:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b96be3ce3143f4a2a121c9b559c964309fe3348d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:4e:96:a1:42:e1:fa:8d:3c:5f:8d:0d:9b:
4a:51:b0:19:38:f6:39:d1:ee:f0:e0:8a:74:0b:f5:
92:a2:14:ed:08:4e:d7:56:7d:be:41:92:14:71:d8:
74:eb:9e:d1:79:52:d9:42:4f:9a:c0:dd:cb:c7:3a:
e4:87:0d:80:ac:1a:4c:f4:35:fd:7b:af:0d:79:2d:
ed:3c:c4:7a:af:1e:72:74:9f:9a:b5:8a:ee:a1:2c:
ed:26:f7:63:ee:01:a5:3b:31:af:07:23:df:2d:ec:
4f:68:c7:dd:75:67:86:a4:68:d1:5d:6d:96:2b:7a:
11:dc:3b:11:e9:0b:98:6c:66:de:5c:3b:6f:a9:df:
67:21:b0:2f:27:2b:00:21:c7:9a:11:35:ba:be:77:
02:f0:b1:08:2e:ac:43:70:67:af:62:0c:47:0f:ee:
fa:27:23:14:9e:03:bd:97:c9:2b:a4:08:0c:14:7d:
e1:d4:53:e0:a3:57:a6:58:e9:d1:6e:f1:d0:29:30:
41:f5:02:a5:36:5c:fc:d6:75:d5:58:7c:9a:ba:da:
89:7a:b0:9d:0d:d2:99:8b:78:30:8a:0b:dd:4e:86:
90:99:8c:56:ee:f5:88:db:25:7a:21:2f:8b:43:b7:
a2:aa:c6:62:f8:44:62:97:68:78:30:76:ef:d6:7f:
0e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6B:E3:CE:31:43:F4:A2:A1:21:C9:B5:59:C9:64:30:9F:E3:34:8D
X509v3 Authority Key Identifier:
keyid:EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/uWvjzjFD9KKhIcm1WclkMJ_jNI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.242.1.0-145.242.2.255
145.242.6.0/24
145.242.11.0/24
145.242.17.0/24
145.242.20.0/24
145.242.31.0/24
145.242.37.0/24
Signature Algorithm: sha256WithRSAEncryption
57:da:6b:25:c2:68:77:0b:4c:fd:0b:00:97:5a:7b:6a:4e:8b:
55:eb:1c:fd:0b:6c:be:56:3b:95:17:58:1a:83:9a:ed:fd:a7:
16:34:a5:8d:d0:d3:ae:e9:bd:40:a6:d4:8b:38:0b:34:83:7b:
0b:ce:72:68:a4:e1:4b:6b:9e:27:7b:ee:a2:2a:6c:16:fb:80:
40:4e:d5:8f:ee:eb:1a:53:31:2d:df:e4:c5:88:df:1f:1f:b2:
03:49:ab:0b:2e:b7:4d:e1:3f:46:9b:ea:eb:45:ab:1e:fe:22:
00:cd:77:9b:65:34:8a:71:3e:0f:72:dd:93:50:a6:11:2c:ce:
e8:ce:83:76:d3:55:06:a6:6a:9b:4a:05:a5:7e:c5:9b:bb:e3:
c8:38:61:78:c9:49:dd:aa:57:52:37:94:fd:16:ac:05:69:ce:
82:88:dc:be:a2:9f:aa:2b:93:05:e4:a3:5e:9e:38:e0:4c:08:
f8:ed:aa:99:53:88:f9:1e:ac:c0:ce:be:3a:23:f3:e7:55:54:
00:59:5b:a3:c0:71:6a:c3:10:24:74:00:5d:f2:67:82:7b:5e:
cb:ad:10:6e:cf:26:3b:1f:d7:1f:31:1e:7e:35:5d:14:0d:0b:
ac:ed:98:49:91:d6:54:71:ef:f0:07:aa:99:47:b9:40:24:8e:
bd:33:0c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:15 2026 by rpki-client