Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/eIvH6RZh5CBBaCpwmTzlC7bIiGI.roa
File: eIvH6RZh5CBBaCpwmTzlC7bIiGI.roa (raw, json)
Hash identifier: Gjo99d741c5L53QhsfOcyUVX8zjxEGGwTqWyZMoY2Ps=
Subject key identifier: 78:8B:C7:E9:16:61:E4:20:41:68:2A:70:99:3C:E5:0B:B6:C8:88:62
Certificate issuer: /CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
Certificate serial: 019DFD4E86319AF300B777CB394A90E86B04
Authority key identifier: E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/eIvH6RZh5CBBaCpwmTzlC7bIiGI.roa
Signing time: Wed 06 May 2026 12:41:15 +0000
ROA not before: Wed 06 May 2026 12:41:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13238
IP address blocks: 46.245.128.32/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:4e:86:31:9a:f3:00:b7:77:cb:39:4a:90:e8:6b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
Validity
Not Before: May 6 12:41:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=788bc7e91661e42041682a70993ce50bb6c88862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:83:5e:db:ea:45:5c:71:46:c5:4b:3c:ef:0e:
6d:e7:93:33:89:96:9e:ae:46:8d:03:9b:a6:65:8b:
fd:b3:79:c7:08:ae:a9:8a:69:b6:fc:fa:03:6e:38:
ef:f9:94:7b:15:bf:dc:86:97:0d:22:c0:fa:aa:f9:
c8:df:7f:7f:7d:d8:a2:bb:7c:26:ac:d9:2b:0a:a6:
73:1f:f9:7f:3e:8e:97:90:49:d0:14:f8:12:ac:b9:
fa:93:74:48:a0:65:6d:13:ce:61:87:de:48:36:b6:
cb:7d:5f:9f:c7:fa:32:f5:d1:a5:d2:c0:e8:da:7f:
dd:07:bd:b4:84:9c:40:62:fd:13:11:b8:99:67:01:
1e:3f:54:d3:22:33:b8:38:94:64:d7:cd:e9:7e:4f:
41:5b:27:2e:56:de:b1:0e:33:65:be:52:b9:0b:ae:
d1:92:70:b9:0b:41:8b:5f:3a:0f:af:15:19:8e:9f:
86:cc:1b:ca:cd:8c:e1:1c:b1:69:aa:e1:14:81:84:
55:2a:b2:4b:e8:ee:9e:de:90:77:b3:35:c6:af:a5:
4b:f3:a2:29:ae:ea:9f:48:ed:08:25:d8:7f:1c:96:
e2:49:0a:be:6f:24:92:0a:61:67:01:8b:70:ab:02:
8e:07:11:f8:78:b3:46:c6:94:e8:44:e9:6f:01:ad:
71:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8B:C7:E9:16:61:E4:20:41:68:2A:70:99:3C:E5:0B:B6:C8:88:62
X509v3 Authority Key Identifier:
keyid:E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/eIvH6RZh5CBBaCpwmTzlC7bIiGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.128.32/28
Signature Algorithm: sha256WithRSAEncryption
68:c0:31:5b:3c:34:f3:9b:e6:52:be:99:5e:13:c9:46:e8:58:
b3:61:b9:31:a7:02:07:2a:4a:22:e3:89:b2:36:d8:15:7a:50:
9f:ae:8d:ea:1f:e9:5e:9f:cb:da:62:4a:ba:32:7a:28:0f:6f:
e7:87:04:5b:5f:58:6a:e0:56:9f:23:8a:95:c1:a1:a2:ac:54:
ce:15:da:08:d2:68:87:2b:0a:f9:d9:36:c3:ed:d8:81:1f:4b:
9d:f3:e1:45:0e:ee:eb:ce:6e:9b:c3:3e:47:14:f3:6e:63:cb:
0c:b2:29:af:1c:e7:28:8f:56:b9:3f:17:ad:23:f7:20:ec:72:
3d:ea:87:c1:6b:52:b4:ac:fe:85:ee:4e:56:4d:44:97:e3:a6:
7b:02:89:ac:ba:c4:12:3f:0e:42:61:d0:4e:e5:ae:e0:b7:52:
f6:23:84:aa:5a:14:a0:84:13:24:50:87:bc:c5:72:a9:ec:7f:
1a:f8:c4:b1:af:a1:05:89:30:13:90:6e:15:7a:32:d0:90:84:
ff:c9:11:67:7c:59:46:1b:11:73:e4:5e:f6:cc:a9:9c:99:24:
10:0a:16:4a:9e:52:ef:2e:1e:88:32:c5:77:e3:1b:d4:2d:c0:
40:0b:f2:4a:4a:cc:d8:ff:56:52:b5:dc:99:f9:a7:d3:72:85:
a4:2a:8b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:25:07 2026 by rpki-client