Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/734582-8bdf-4638-b56c-b4b654d31b04/1/eaCukJJZFii2h7nVrxz-QMFgcTo.roa
File: eaCukJJZFii2h7nVrxz-QMFgcTo.roa (raw, json)
Hash identifier: jXq8aOBPegyJEjjGurNaeAk4Ud88af4txxAxceTP2AI=
Subject key identifier: 79:A0:AE:90:92:59:16:28:B6:87:B9:D5:AF:1C:FE:40:C1:60:71:3A
Certificate issuer: /CN=3c8d44af375bfb74564c9baace5f91750199041b
Certificate serial: 01A06C895F50FFEB6CEF6EEC46400EB7DFB8
Authority key identifier: 3C:8D:44:AF:37:5B:FB:74:56:4C:9B:AA:CE:5F:91:75:01:99:04:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI1Erzdb-3RWTJuqzl-RdQGZBBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/734582-8bdf-4638-b56c-b4b654d31b04/1/eaCukJJZFii2h7nVrxz-QMFgcTo.roa
Signing time: Fri 04 Sep 2026 13:08:57 +0000
ROA not before: Fri 04 Sep 2026 13:08:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60994
IP address blocks: 194.124.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/734582-8bdf-4638-b56c-b4b654d31b04/1/PI1Erzdb-3RWTJuqzl-RdQGZBBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/734582-8bdf-4638-b56c-b4b654d31b04/1/PI1Erzdb-3RWTJuqzl-RdQGZBBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI1Erzdb-3RWTJuqzl-RdQGZBBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:89:5f:50:ff:eb:6c:ef:6e:ec:46:40:0e:b7:df:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8d44af375bfb74564c9baace5f91750199041b
Validity
Not Before: Sep 4 13:08:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79a0ae9092591628b687b9d5af1cfe40c160713a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:00:39:ec:a5:e5:36:53:99:d1:21:b0:47:
77:6a:ed:66:0b:61:76:94:10:5a:2d:d6:31:47:db:
c0:70:51:d5:48:82:d4:71:87:04:7c:85:97:b0:38:
6c:82:69:72:91:9a:e5:76:9f:38:3b:3e:7c:0c:a1:
f0:dc:7f:a0:cf:1e:e2:25:d8:c3:96:45:6d:60:e6:
ee:1c:60:1a:35:12:6f:de:90:3f:aa:a3:84:af:e0:
e1:3b:0e:cd:a6:76:3e:03:4b:62:01:70:d0:3a:08:
cd:77:8e:35:f0:97:f4:37:05:6b:62:38:17:5a:5e:
56:0c:c5:ae:de:1c:b3:bd:2a:0d:f7:5f:24:b3:96:
4b:d2:ba:af:85:a6:ad:11:99:b9:11:4e:e5:74:57:
88:a8:1b:18:85:27:20:41:10:f9:71:52:7a:cd:03:
1a:a8:73:fb:12:d1:2e:31:cf:78:59:d3:c7:3d:e5:
54:c8:8f:86:eb:ed:51:0f:69:ec:54:2a:4b:13:9c:
91:12:58:a5:d3:be:49:b2:9f:41:1e:8e:db:3d:c1:
da:71:1b:d2:b6:23:14:fd:31:25:f8:02:3a:85:d7:
78:cb:23:e7:d2:e0:64:61:e0:58:91:f9:d3:c1:4d:
fb:44:53:90:14:55:f3:cb:15:cf:0a:6a:b8:48:25:
38:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A0:AE:90:92:59:16:28:B6:87:B9:D5:AF:1C:FE:40:C1:60:71:3A
X509v3 Authority Key Identifier:
keyid:3C:8D:44:AF:37:5B:FB:74:56:4C:9B:AA:CE:5F:91:75:01:99:04:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI1Erzdb-3RWTJuqzl-RdQGZBBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/734582-8bdf-4638-b56c-b4b654d31b04/1/eaCukJJZFii2h7nVrxz-QMFgcTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/734582-8bdf-4638-b56c-b4b654d31b04/1/PI1Erzdb-3RWTJuqzl-RdQGZBBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.192.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:41:39:15:83:16:3a:af:e2:de:d9:56:65:a6:81:f7:fb:fa:
97:26:05:c4:6f:38:84:4e:3c:cd:1c:1c:22:65:33:88:5e:6c:
cd:a5:b4:91:09:39:5d:6f:a3:da:4c:8d:2f:08:be:4f:c5:bc:
84:24:6f:e5:60:3f:54:62:f6:76:00:4b:be:c1:7d:29:ae:f5:
1e:bd:e5:c6:97:55:d7:9e:15:b2:ea:8d:77:6c:62:fa:76:c7:
a8:bc:3b:dc:36:a6:43:7e:d4:3a:f5:6f:6d:eb:5a:aa:a7:87:
07:b9:2c:f7:be:ec:8e:4e:e7:66:a6:1c:5d:81:e5:35:3a:ac:
98:a1:cd:87:81:71:6f:a0:2c:dd:ac:92:15:7c:03:49:22:80:
e6:04:10:a8:ad:48:d3:ed:c3:58:5c:06:6b:ed:8a:9c:6b:ac:
ad:f5:85:7b:b6:8e:7e:4e:a2:48:db:dc:89:0e:ac:2b:25:e9:
cf:1d:39:74:27:1f:03:cb:1f:fd:79:01:53:a3:1b:a5:24:e2:
46:14:95:48:db:fc:28:5e:2a:74:73:f9:38:80:2a:91:98:31:
ad:75:e1:32:d7:77:16:5d:1e:18:01:7a:4d:43:67:10:87:90:
d0:75:95:b9:78:42:cb:e2:b5:c9:4a:6d:43:f8:90:ad:2b:b1:
f5:b1:fa:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:37:14 2026 by rpki-client