Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/ES-glJ6puZyNN1K9KpsFgz5kbPA.roa
File: ES-glJ6puZyNN1K9KpsFgz5kbPA.roa (raw, json)
Hash identifier: I6nTrLD3olbbdtgUu7ymtqxkGuHsVPiyrUht1lASf50=
Subject key identifier: 11:2F:A0:94:9E:A9:B9:9C:8D:37:52:BD:2A:9B:05:83:3E:64:6C:F0
Certificate issuer: /CN=dd5a49e2227570a77cc36dd5f0ffaf6616f7164a
Certificate serial: 019F23684A50F43F33E15D426145D7C065AA
Authority key identifier: DD:5A:49:E2:22:75:70:A7:7C:C3:6D:D5:F0:FF:AF:66:16:F7:16:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/ES-glJ6puZyNN1K9KpsFgz5kbPA.roa
Signing time: Thu 02 Jul 2026 15:17:45 +0000
ROA not before: Thu 02 Jul 2026 15:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48740
IP address blocks: 91.212.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4a:50:f4:3f:33:e1:5d:42:61:45:d7:c0:65:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5a49e2227570a77cc36dd5f0ffaf6616f7164a
Validity
Not Before: Jul 2 15:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=112fa0949ea9b99c8d3752bd2a9b05833e646cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:65:b4:08:0a:45:e9:a7:68:3a:cf:aa:29:b9:
d3:b9:8c:3c:1d:01:8e:c9:21:a5:9e:b6:f4:4b:cd:
95:bd:fa:a3:bf:01:90:17:71:02:de:53:9a:69:a4:
e7:d2:ca:f2:5b:9c:a0:97:45:1d:29:a2:68:ef:c8:
71:27:06:26:62:5d:2a:f6:3b:9e:84:9e:f5:b8:aa:
e2:f2:b1:f2:56:19:fb:24:95:ad:29:9c:4d:37:31:
64:e3:d0:78:54:d5:bd:59:53:89:02:b6:fc:f2:1c:
08:26:26:87:02:8f:9c:e6:79:ba:86:ef:7f:c5:fe:
fb:38:42:42:b9:1f:94:df:1a:2d:4a:ea:0c:9f:07:
ec:9d:0f:57:c0:f4:5c:a5:79:d1:a8:43:4c:68:30:
b2:26:db:9c:32:89:0c:c6:ca:36:cd:a9:97:ae:9f:
3d:42:c0:35:e3:87:50:3b:46:ce:c0:93:5e:b0:05:
f9:6b:e8:62:0f:23:84:e2:99:2c:6a:d8:10:c3:73:
bb:1c:6a:07:90:33:93:0c:62:92:62:71:81:b6:e7:
31:ad:db:6a:df:dd:7a:5f:24:a7:f5:ec:47:db:20:
a1:16:67:ba:00:f6:ee:55:86:ce:4b:e1:7d:4c:64:
4f:fc:4f:1a:72:49:ae:0e:32:b0:74:35:cb:07:6e:
ce:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2F:A0:94:9E:A9:B9:9C:8D:37:52:BD:2A:9B:05:83:3E:64:6C:F0
X509v3 Authority Key Identifier:
keyid:DD:5A:49:E2:22:75:70:A7:7C:C3:6D:D5:F0:FF:AF:66:16:F7:16:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/ES-glJ6puZyNN1K9KpsFgz5kbPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.1.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:f9:22:c0:24:d5:8f:cf:5a:44:e1:1d:51:5f:1d:80:c2:e9:
06:1d:1d:5c:99:a6:e2:69:a0:77:8c:eb:92:9d:d0:a0:66:f1:
28:d6:f7:d9:9d:60:12:da:a3:d1:ce:f7:97:d1:34:6c:92:8d:
36:7a:96:b7:fc:da:42:1f:e8:1a:14:2e:ca:85:fd:7b:50:c7:
98:d3:39:8c:1a:6a:bd:37:54:28:bb:39:4e:1a:bd:a4:20:bf:
7d:10:4f:af:1e:48:04:46:c0:16:aa:80:1c:35:eb:de:ca:63:
a6:61:dc:74:08:f8:8d:58:c0:d9:77:b7:14:79:11:ad:3e:03:
f1:7f:4f:8b:84:45:27:41:f6:44:aa:cf:34:c9:55:44:9c:85:
83:3e:31:ab:58:6f:9c:5a:40:1d:d3:f1:75:36:f5:2b:f4:c7:
7a:69:7c:68:b5:5a:75:51:b5:c9:fa:c2:97:f3:6d:4b:98:7a:
b0:88:54:23:8b:ba:1b:cc:5d:cb:88:54:3b:11:d3:8d:0e:fd:
55:c9:00:b9:02:e2:34:ee:36:3a:b0:16:07:00:3e:f0:aa:03:
88:6c:c3:91:56:e3:49:b1:d3:77:2a:cf:a9:cb:28:09:7b:91:
aa:62:8e:4c:3a:69:3f:51:1e:42:cf:a9:1e:36:4a:93:f2:1e:
3d:2e:66:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:35 2026 by rpki-client