Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/EaIyfGeRC79erqoN_TV1V3pBgCI.roa
File: EaIyfGeRC79erqoN_TV1V3pBgCI.roa (raw, json)
Hash identifier: fp/pHfcXfwK5Ba1oEm4wGvNYS46jMvtZK3LLVjXLYYE=
Subject key identifier: 11:A2:32:7C:67:91:0B:BF:5E:AE:AA:0D:FD:35:75:57:7A:41:80:22
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019F42A91033BA281CFB762A5F5B7985921E
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/EaIyfGeRC79erqoN_TV1V3pBgCI.roa
Signing time: Wed 08 Jul 2026 16:56:43 +0000
ROA not before: Wed 08 Jul 2026 16:56:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219518
IP address blocks: 153.56.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:a9:10:33:ba:28:1c:fb:76:2a:5f:5b:79:85:92:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jul 8 16:56:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11a2327c67910bbf5eaeaa0dfd3575577a418022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:16:1c:29:f1:02:e0:02:b5:21:56:1c:d1:6c:
b2:92:62:88:75:52:6b:95:5b:06:bd:ee:d4:29:26:
ed:af:99:c0:d1:d5:1a:66:83:94:c6:bc:74:b3:f2:
d5:2a:d6:7b:fa:f8:4f:2d:13:a6:5a:17:8c:91:e6:
4b:c7:34:3f:51:68:ee:b1:e7:99:10:81:ed:20:be:
dd:eb:ce:95:ec:90:25:d3:c6:6b:b3:28:0d:54:0d:
1c:9c:d5:3e:84:a6:54:cc:1b:cc:cd:26:5c:95:ee:
f1:67:2d:02:b5:d8:20:ab:65:2f:9d:39:80:0c:1b:
8a:27:46:4f:db:1e:92:65:3e:5b:20:68:50:5e:52:
47:92:6e:ac:eb:0b:d6:ea:36:9a:72:86:73:85:00:
f7:24:82:12:cd:d5:16:e4:97:a3:56:2f:40:b6:69:
a0:85:75:d5:b8:ba:1c:4d:c6:f7:9c:fe:03:18:c9:
5e:13:b8:62:d1:12:3f:bc:cc:ec:9a:e3:c9:75:ba:
7c:ab:61:75:42:47:46:c3:bf:d7:d9:6d:5f:72:5f:
0b:41:fe:eb:c1:59:30:7e:72:d0:cc:76:15:d6:5d:
3a:df:06:31:5f:15:a1:69:69:aa:a2:83:19:04:e6:
3c:ba:a9:01:4a:92:26:b8:19:ac:68:e5:a9:5e:1e:
a8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A2:32:7C:67:91:0B:BF:5E:AE:AA:0D:FD:35:75:57:7A:41:80:22
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/EaIyfGeRC79erqoN_TV1V3pBgCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.168.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:78:0a:17:10:66:c1:3f:c8:84:96:5f:71:6b:30:7e:d0:97:
ca:6f:c8:e9:5e:ed:d4:8b:03:b5:ae:c1:3c:bf:9a:ac:03:05:
cb:54:51:07:e5:43:6e:ea:9e:05:cf:37:1c:e2:26:2b:04:e9:
29:a0:75:ab:ff:62:74:69:11:70:37:48:63:6a:e3:db:3a:e2:
81:ff:f4:68:5f:e6:96:f1:f1:e7:4e:4a:ca:4c:8a:13:db:94:
1e:c3:15:cb:81:97:c3:2e:39:5c:dc:38:a2:30:01:2e:e3:ef:
21:2e:18:ee:ed:ad:c8:7b:a6:03:a9:04:0e:54:59:b5:19:d8:
1f:e3:f9:99:96:06:4a:a2:3e:1c:2a:58:f6:d5:f5:5d:5e:05:
29:db:06:57:59:52:5e:ce:bc:60:c0:ac:3f:d3:b5:0c:24:a6:
9c:58:d7:26:8f:c9:7a:4a:7e:38:8c:d7:80:c6:a4:10:c5:f3:
33:52:1a:9a:8e:8b:1d:38:88:16:41:ef:16:c6:a2:b8:5b:41:
91:86:0d:9f:0c:93:c0:9e:78:33:86:48:15:0d:39:5e:d2:b2:
db:d0:fa:57:5f:25:d6:ca:50:4b:0d:3f:5f:d5:c2:2a:6e:88:
a2:50:82:8f:63:c9:90:2f:6e:b9:c0:6a:ae:9b:25:f0:96:83:
16:46:c0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:07:33 2026 by rpki-client