Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/eSxvcfqhLX0QyWs8_CCqm1LfHP8.roa
File: eSxvcfqhLX0QyWs8_CCqm1LfHP8.roa (raw, json)
Hash identifier: TUmMKY/LqdBmgi+dt4eIZs1daoacVJWVFics7KjldoU=
Subject key identifier: 79:2C:6F:71:FA:A1:2D:7D:10:C9:6B:3C:FC:20:AA:9B:52:DF:1C:FF
Certificate issuer: /CN=452641da06225567531512ac0c0a95a919d43cad
Certificate serial: 019F2368AC057C70F2BF11C4FFB6FA4A1CED
Authority key identifier: 45:26:41:DA:06:22:55:67:53:15:12:AC:0C:0A:95:A9:19:D4:3C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSZB2gYiVWdTFRKsDAqVqRnUPK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/eSxvcfqhLX0QyWs8_CCqm1LfHP8.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15703
IP address blocks: 194.50.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSZB2gYiVWdTFRKsDAqVqRnUPK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ac:05:7c:70:f2:bf:11:c4:ff:b6:fa:4a:1c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452641da06225567531512ac0c0a95a919d43cad
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=792c6f71faa12d7d10c96b3cfc20aa9b52df1cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:b4:18:75:e3:84:bb:2c:da:84:fe:17:1d:
2c:26:82:b3:2b:f3:0f:80:e7:24:30:b4:e5:6b:de:
69:b5:c1:75:8f:9a:35:49:d6:8f:57:62:b8:db:cc:
ce:1e:c0:89:a4:3b:7c:69:21:ef:5a:e0:5a:d4:ee:
2e:1e:c7:2e:1a:44:4e:f2:dc:b1:df:e8:76:f7:95:
a3:cc:ce:52:50:35:99:48:c1:11:67:1e:91:06:7f:
25:b5:a2:7e:3d:fb:29:b5:21:97:85:b5:33:56:b6:
9c:db:8b:54:7f:6f:9b:b5:b2:18:52:34:c9:b2:e7:
4f:39:81:7f:63:89:70:d4:08:b6:30:d8:a8:5b:a0:
98:1c:fc:7a:b2:b5:f8:21:8f:58:2b:ce:1d:ae:dd:
60:01:a1:99:23:ff:c8:c5:d2:a9:08:30:18:18:0c:
57:f3:3c:9a:c5:65:87:f9:74:b2:56:89:ea:17:20:
63:89:8b:49:a2:80:21:5e:96:71:3d:3b:79:f3:29:
8e:61:c1:9f:47:97:96:20:49:d4:3e:b3:57:96:8d:
88:a3:89:f0:7a:7b:37:e9:d8:3d:93:36:fd:f2:2e:
0a:a9:51:e7:f7:0b:6c:35:9f:4b:24:b7:30:34:67:
08:01:da:f9:e0:27:03:af:94:2e:fe:8e:74:ac:54:
1c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2C:6F:71:FA:A1:2D:7D:10:C9:6B:3C:FC:20:AA:9B:52:DF:1C:FF
X509v3 Authority Key Identifier:
keyid:45:26:41:DA:06:22:55:67:53:15:12:AC:0C:0A:95:A9:19:D4:3C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSZB2gYiVWdTFRKsDAqVqRnUPK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/eSxvcfqhLX0QyWs8_CCqm1LfHP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/RSZB2gYiVWdTFRKsDAqVqRnUPK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.112.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e4:f9:b7:ee:99:2f:72:26:1b:92:e7:21:2b:6d:5a:a9:49:
ab:fe:40:9f:7f:9d:2e:87:5e:9c:3e:8f:47:80:d4:59:01:27:
2f:0a:11:88:3e:1b:bb:4b:e9:a8:19:00:8b:1e:8d:38:ab:df:
aa:9e:88:0a:24:b9:36:46:04:7b:72:d0:ce:7e:30:06:b5:c0:
92:f1:7b:3c:ce:c6:aa:ea:e0:85:ce:c2:92:d2:d4:0c:a4:5c:
c6:d2:11:4d:58:70:70:62:fb:6e:09:27:fb:9a:b7:4e:38:7f:
40:a6:2e:f7:da:46:7e:d7:96:9d:05:9e:9e:de:c5:6d:c4:c7:
04:c1:57:08:56:f4:98:6d:be:1d:d7:fa:c6:fd:f3:d7:9b:0e:
a1:be:dd:fc:3a:9b:bf:ef:77:1b:96:1e:8b:c1:42:5c:a8:db:
05:99:8e:99:38:09:28:a5:3e:3a:3b:03:b8:b9:1c:ac:ca:b0:
86:ec:42:03:ad:03:a5:b6:a2:85:d5:5f:5a:2e:19:8c:1c:f5:
92:3b:b9:34:d3:da:fe:c2:bb:85:1f:f0:ca:40:24:25:6c:da:
b4:29:31:62:38:7f:97:24:c2:a9:2a:5c:97:ea:d9:45:7e:07:
18:90:94:7a:45:29:47:20:bd:5c:6f:72:d3:98:0b:99:1a:bb:
a2:a6:f5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:16:57 2026 by rpki-client