Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EhzKR_fgw8dTE0nO188vZpX22O4.roa
File: EhzKR_fgw8dTE0nO188vZpX22O4.roa (raw, json)
Hash identifier: mWSQ0t69gLOQ+LzDQcxMx3v1GdBALU4r/0Kw+dW40zs=
Subject key identifier: 12:1C:CA:47:F7:E0:C3:C7:53:13:49:CE:D7:CF:2F:66:95:F6:D8:EE
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019DD9704FE26BF91EB5438C3AD6D7E1F3F7
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EhzKR_fgw8dTE0nO188vZpX22O4.roa
Signing time: Wed 29 Apr 2026 13:31:49 +0000
ROA not before: Wed 29 Apr 2026 13:31:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 186.246.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:70:4f:e2:6b:f9:1e:b5:43:8c:3a:d6:d7:e1:f3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 29 13:31:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=121cca47f7e0c3c7531349ced7cf2f6695f6d8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:94:d6:9b:9c:db:15:e4:55:1c:ce:15:a3:
52:fc:ec:14:1c:69:48:98:09:93:a9:61:2e:60:cf:
39:c8:6f:eb:16:df:22:98:70:d7:54:bb:1a:76:14:
9a:10:2b:81:42:b5:d0:b8:7f:d8:ce:96:bb:34:0b:
fc:df:6a:83:61:29:01:69:24:37:6b:67:c3:0b:0c:
64:fb:11:6e:24:cd:99:c0:a1:83:b6:3b:ba:ae:4e:
c3:b2:94:bc:8e:e2:93:78:96:5e:96:5f:37:78:43:
d5:17:80:e7:da:be:5f:70:56:7e:72:4b:e4:0d:ee:
9a:2f:50:f6:3e:58:e4:3f:a3:bd:40:47:22:7f:6b:
84:28:5f:23:2e:f0:68:24:ba:0c:d5:09:79:2d:48:
6b:03:11:c1:71:01:7c:f8:b9:4a:6c:b1:1d:c0:c5:
21:11:74:98:51:a0:b8:65:35:76:fe:31:60:61:20:
59:74:df:1e:a1:3f:7e:9f:a6:0a:df:dc:54:60:5e:
b0:0a:46:6e:86:7d:d4:58:25:39:e5:83:48:68:2e:
57:58:f6:a6:6b:62:9a:83:b9:d2:62:0c:3a:cc:ed:
7c:96:63:e4:02:8e:f0:a4:e5:e6:5c:57:7c:02:2c:
49:a7:b0:7b:7d:0a:a9:4a:2f:e1:48:99:d8:c3:72:
34:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1C:CA:47:F7:E0:C3:C7:53:13:49:CE:D7:CF:2F:66:95:F6:D8:EE
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EhzKR_fgw8dTE0nO188vZpX22O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.246.53.0/24
Signature Algorithm: sha256WithRSAEncryption
19:86:c0:bd:09:10:90:ed:c6:d1:e6:55:89:ca:6c:9c:12:96:
28:08:19:4e:02:bc:89:cf:6e:4e:e7:7e:e4:03:70:78:df:6e:
ea:fe:55:e9:68:77:7f:fc:22:85:f8:fa:5d:20:0f:0b:ba:bd:
26:d2:f6:88:59:68:e0:d6:06:04:38:f7:86:2a:e6:50:51:15:
62:7d:54:e6:12:e5:d6:a5:3a:fd:9c:9d:2b:5a:2f:5b:d9:3e:
ee:77:3e:d8:ed:71:0a:b0:f9:47:ac:50:76:e0:e4:cc:0f:91:
b0:8d:72:a3:4c:cc:47:54:80:58:03:fd:d2:02:69:34:89:fb:
52:fb:57:94:31:35:a9:50:ec:29:54:17:35:ab:7e:3b:a9:ea:
87:6e:ce:43:2c:ab:3e:6b:13:e6:cb:09:ff:c0:2c:d5:f5:7c:
fb:2f:6d:32:54:21:a2:8a:5f:b4:d1:e8:df:99:8b:bd:33:1a:
d4:fe:b2:81:c9:1b:53:9f:a1:60:e9:4b:93:b1:7f:87:86:74:
c0:62:ef:ba:99:10:d2:fc:d3:b3:94:f2:80:d5:1f:9a:8b:56:
25:b2:33:3e:36:e2:96:7b:b4:2a:5e:e4:eb:79:60:bb:0e:72:
be:55:99:94:6d:88:7a:f0:66:78:5c:d0:8f:60:16:3b:05:08:
b1:ad:65:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:34:26 2026 by rpki-client