Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/eDqQd5g6PIn281zAnwC54NLFxOk.roa
File: eDqQd5g6PIn281zAnwC54NLFxOk.roa (raw, json)
Hash identifier: S0wX3cx1D80tUgNwDXqwXRuP15wShvqj54v6va9iQvc=
Subject key identifier: 78:3A:90:77:98:3A:3C:89:F6:F3:5C:C0:9F:00:B9:E0:D2:C5:C4:E9
Certificate issuer: /CN=342b94e96d19fce115c62ffa89ccb6f2ce106c7a
Certificate serial: 019F23693DBA0E2FBA10208588745FA8A2DB
Authority key identifier: 34:2B:94:E9:6D:19:FC:E1:15:C6:2F:FA:89:CC:B6:F2:CE:10:6C:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/eDqQd5g6PIn281zAnwC54NLFxOk.roa
Signing time: Thu 02 Jul 2026 15:18:47 +0000
ROA not before: Thu 02 Jul 2026 15:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39686
IP address blocks: 193.202.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3d:ba:0e:2f:ba:10:20:85:88:74:5f:a8:a2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342b94e96d19fce115c62ffa89ccb6f2ce106c7a
Validity
Not Before: Jul 2 15:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=783a9077983a3c89f6f35cc09f00b9e0d2c5c4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:41:b5:47:98:ea:00:bd:ee:6d:00:ea:57:39:
0a:32:47:f1:9d:de:07:3d:53:64:04:8f:1f:41:49:
6e:96:96:19:bb:46:99:2e:33:fc:80:f3:03:0b:d7:
21:4c:40:6b:f0:b7:23:3d:d7:b1:b0:fc:bb:2c:bc:
d0:1b:02:2c:bf:68:17:ca:c8:da:a7:2d:9c:28:b1:
41:2c:5c:8d:a5:4e:88:fa:fa:6d:a4:3d:3f:56:67:
6e:7e:45:1b:b8:c9:23:43:6c:f6:3d:0e:65:78:34:
3c:97:11:e3:8b:a8:98:d5:8e:c2:3f:86:41:15:6d:
2e:5c:d5:95:d0:04:6a:aa:25:88:ea:33:d8:9c:4b:
e3:f5:7d:bc:e1:f5:c2:89:ff:5f:b0:4c:b8:b7:26:
76:6f:a9:64:63:4f:5a:3e:c1:ee:12:32:f0:78:c9:
d5:fe:8d:6f:23:fe:6c:a4:c3:ca:c8:44:0a:e7:fe:
33:07:1b:94:46:de:55:c5:e3:ba:83:99:be:49:18:
a4:c8:71:8a:a0:90:b1:ba:0f:77:b0:ed:de:95:f9:
70:7e:55:02:fd:a0:71:4e:fb:01:66:3c:f1:d0:b2:
be:7d:7a:2d:b5:d8:fe:80:ac:00:2f:40:85:4a:bb:
c6:ec:e0:f9:1e:15:58:b3:a7:e3:a5:64:29:e1:c7:
47:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3A:90:77:98:3A:3C:89:F6:F3:5C:C0:9F:00:B9:E0:D2:C5:C4:E9
X509v3 Authority Key Identifier:
keyid:34:2B:94:E9:6D:19:FC:E1:15:C6:2F:FA:89:CC:B6:F2:CE:10:6C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCuU6W0Z_OEVxi_6icy28s4QbHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/eDqQd5g6PIn281zAnwC54NLFxOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/NCuU6W0Z_OEVxi_6icy28s4QbHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.96.0/21
Signature Algorithm: sha256WithRSAEncryption
39:a4:84:f4:f3:12:76:cc:3e:fd:e3:32:32:51:b0:75:1c:46:
a3:65:45:05:92:52:04:aa:01:11:7b:c8:1b:9e:e6:8c:cd:4c:
f4:ca:2b:d0:34:f8:88:82:06:03:23:a9:aa:64:29:a3:98:a2:
61:cf:7c:68:a1:5b:4a:b0:b8:39:4f:9c:b3:75:80:9a:91:2a:
74:34:5c:cf:7e:70:c6:55:bd:bd:1c:50:79:a7:f9:0c:3c:18:
14:7f:72:fb:82:e9:d2:d4:08:c4:8d:17:b3:68:f3:f6:24:dd:
ff:c3:38:92:fc:60:a2:9c:1e:01:07:4c:5b:47:c7:33:31:64:
de:09:a0:d3:04:f0:b3:4c:bc:a4:d6:a8:11:bf:20:32:ac:50:
a8:8f:69:40:bc:9a:ba:95:b2:43:d7:e4:cb:c9:7f:43:14:44:
4f:28:d4:ff:1e:8f:a2:c8:3b:47:df:21:67:85:27:ba:ca:17:
d7:e6:0e:52:e7:2a:0e:aa:c1:9f:5b:35:e6:97:43:d6:23:67:
c9:11:10:1a:88:23:63:b5:8f:f4:0b:ac:3d:8c:50:ea:f7:e1:
29:29:8e:a2:49:e5:85:ef:2a:f9:c0:59:5e:03:8c:d2:5b:93:
4b:7f:c2:65:97:8f:7a:c5:a1:20:f9:0a:9f:a5:7a:5a:a2:26:
e6:13:ba:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:37 2026 by rpki-client