Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ePgEuxZRuTfBxyRcsjAbMuhwCOI.roa
File: ePgEuxZRuTfBxyRcsjAbMuhwCOI.roa (raw, json)
Hash identifier: j04b7pQI7x5x3P0/85yl3VARmkF5hxqVyVZY8Sop75M=
Subject key identifier: 78:F8:04:BB:16:51:B9:37:C1:C7:24:5C:B2:30:1B:32:E8:70:08:E2
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 019DD4D431907F6E20B6245D459297B72573
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ePgEuxZRuTfBxyRcsjAbMuhwCOI.roa
Signing time: Tue 28 Apr 2026 16:02:49 +0000
ROA not before: Tue 28 Apr 2026 16:02:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212116
IP address blocks: 217.61.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:d4:31:90:7f:6e:20:b6:24:5d:45:92:97:b7:25:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Apr 28 16:02:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78f804bb1651b937c1c7245cb2301b32e87008e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:ac:14:34:4e:0e:1f:9e:7a:93:d5:62:d9:
96:c4:6c:04:4c:ac:12:46:8b:9d:c8:49:66:dd:91:
b1:2c:19:46:30:ef:b6:bf:26:69:0a:e1:65:35:47:
75:6e:8a:e2:eb:12:48:e9:9f:5c:cd:a9:ca:3d:7e:
61:09:03:25:7d:ea:70:b1:d1:a3:10:00:14:4c:a9:
50:86:26:34:e6:83:a9:8f:e9:df:69:78:b9:c8:1f:
22:06:3d:ad:2e:44:76:d6:33:53:3e:c7:fd:e2:d1:
f5:4e:d0:67:d9:bb:4a:11:80:e4:46:b7:8b:b4:17:
98:65:4e:4b:ce:f8:58:b2:06:b4:c0:67:bf:e7:1f:
29:c8:d6:63:f5:f8:72:5a:4f:12:92:2b:d9:4a:57:
54:88:1d:f1:92:fd:7e:56:87:c8:85:8d:6a:2c:01:
44:97:c0:8b:dc:18:91:66:b8:1d:4d:80:4c:be:bf:
b6:6b:d6:f7:8b:38:83:c7:f5:e0:8a:fd:cc:6f:ef:
bf:f3:3b:bc:11:1d:d2:d0:b4:8d:ef:ab:37:8a:48:
67:37:ae:95:e3:0e:e8:2f:df:9e:23:2c:d1:e9:d8:
d1:20:bd:2f:31:5c:28:88:23:43:1a:bd:be:8e:eb:
a7:2a:80:b8:b4:fd:03:d4:bd:a7:3d:41:00:e1:bd:
1c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F8:04:BB:16:51:B9:37:C1:C7:24:5C:B2:30:1B:32:E8:70:08:E2
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ePgEuxZRuTfBxyRcsjAbMuhwCOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.61.83.0/24
Signature Algorithm: sha256WithRSAEncryption
82:84:49:74:ce:6a:7e:44:ef:1d:5c:9f:92:d5:63:00:bb:f9:
14:db:ce:76:0e:e7:18:9f:99:1a:1a:ce:86:99:f6:42:b7:27:
2b:ea:aa:d1:85:85:2c:0f:2c:d4:aa:f3:10:54:a5:0d:8b:8e:
3f:33:cf:92:a0:90:6f:2d:60:9b:70:c6:64:b5:3c:3a:a2:4b:
bb:ef:7b:ad:f8:c0:3e:7d:92:93:11:57:2d:76:7d:c0:c4:fc:
85:40:94:eb:1b:3b:e3:4c:7f:c7:9a:11:26:04:89:ad:12:11:
f3:89:55:c4:02:94:c3:35:5d:07:13:b9:23:30:45:3a:cf:77:
a9:2f:a7:ea:fc:c9:7b:10:dd:20:bd:4f:ae:c5:ce:80:b5:ed:
ca:87:67:c2:ed:05:96:2c:f1:3a:32:e9:3a:19:52:f9:89:81:
1e:fc:76:97:08:a2:66:42:a5:18:a0:13:5e:27:9c:d5:aa:27:
ac:d4:35:7a:61:01:dc:c1:34:43:e8:79:c3:40:36:9e:3b:76:
1a:58:0d:0e:43:12:b1:cb:fc:76:aa:01:52:eb:2b:31:fd:c2:
43:d8:56:e1:94:35:32:4f:32:2c:29:fe:e7:78:80:97:b0:57:
46:b1:29:fb:2c:02:5f:20:27:66:55:94:f3:d6:25:c2:9e:65:
ba:62:5b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:47:31 2026 by rpki-client