Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/EMk1x-Yq2E7ICBWcn7fe0Nq2L0Y.roa
File: EMk1x-Yq2E7ICBWcn7fe0Nq2L0Y.roa (raw, json)
Hash identifier: D2NqPAH29xRvH/d4YHn/OWVA2W3ni6yvZbORqpqzPi0=
Subject key identifier: 10:C9:35:C7:E6:2A:D8:4E:C8:08:15:9C:9F:B7:DE:D0:DA:B6:2F:46
Certificate issuer: /CN=5aab4a28fc29853dd23c76bd1e2f78ce9999a15a
Certificate serial: 01A084D32EC3CED9E03ECBA3062E19FF38BA
Authority key identifier: 5A:AB:4A:28:FC:29:85:3D:D2:3C:76:BD:1E:2F:78:CE:99:99:A1:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/EMk1x-Yq2E7ICBWcn7fe0Nq2L0Y.roa
Signing time: Wed 09 Sep 2026 06:20:27 +0000
ROA not before: Wed 09 Sep 2026 06:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214667
IP address blocks: 195.214.200.0/21 maxlen: 21
2001:67c:99c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 18:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:d3:2e:c3:ce:d9:e0:3e:cb:a3:06:2e:19:ff:38:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aab4a28fc29853dd23c76bd1e2f78ce9999a15a
Validity
Not Before: Sep 9 06:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10c935c7e62ad84ec808159c9fb7ded0dab62f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:54:70:f9:47:6b:2a:d5:d8:fd:67:18:36:28:
6a:08:3c:e1:e8:51:62:78:b8:89:47:3b:06:26:92:
15:95:4d:b4:1e:25:6d:39:ca:ed:cb:5c:a9:15:88:
f1:20:19:42:66:18:9d:38:a8:50:91:35:7a:9e:54:
77:ac:30:55:46:08:99:91:2b:51:18:ac:e3:62:4d:
1a:ec:7c:4f:71:1e:29:de:2a:c6:c4:75:2c:d5:10:
be:d2:6b:ef:13:c8:98:3b:9e:d3:91:a9:21:91:bc:
90:15:78:72:00:d4:d5:89:9f:2c:61:a7:59:c4:03:
b9:13:d0:bd:a9:67:d4:de:64:f3:ed:d9:3b:b5:3c:
ab:f5:35:28:d8:69:24:36:b3:f1:78:bb:80:5e:51:
84:e4:a8:3c:9b:b8:eb:26:6a:55:71:21:42:21:ea:
be:e6:9d:e6:07:24:26:14:76:20:41:2b:68:fd:c0:
36:7a:61:43:01:ed:de:a3:ae:7f:95:25:ad:19:76:
bd:c9:8e:3c:27:78:1c:7a:18:b3:fe:d6:11:89:84:
ab:50:05:12:1a:c2:84:34:2f:13:51:05:96:f1:4e:
ff:3c:bd:ba:03:02:c1:ee:59:e2:e5:b5:0d:6b:72:
0a:b9:6b:6f:ef:a3:63:27:d4:77:59:e5:b7:3d:56:
dc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C9:35:C7:E6:2A:D8:4E:C8:08:15:9C:9F:B7:DE:D0:DA:B6:2F:46
X509v3 Authority Key Identifier:
keyid:5A:AB:4A:28:FC:29:85:3D:D2:3C:76:BD:1E:2F:78:CE:99:99:A1:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/EMk1x-Yq2E7ICBWcn7fe0Nq2L0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.214.200.0/21
IPv6:
2001:67c:99c::/48
Signature Algorithm: sha256WithRSAEncryption
23:ae:80:8f:c7:4e:9a:3e:6e:bb:02:51:76:d6:99:ce:97:9f:
ca:3f:42:37:7c:ed:00:c1:8b:20:cf:ac:4c:e3:b9:c9:52:c5:
c5:0e:1e:0a:b3:b1:d1:d0:e0:5d:73:ee:f7:72:c2:d3:3d:fa:
87:15:47:7d:5a:67:24:8b:38:42:f0:97:cc:0c:f8:fd:c0:84:
6c:7b:88:14:68:73:b6:5a:c4:28:13:25:6b:bf:9f:3d:db:99:
eb:63:97:bf:86:44:48:11:05:98:41:55:87:c5:ea:2b:1e:8d:
dd:07:ba:ac:20:ac:e3:56:de:04:e8:70:f9:62:84:27:d6:3a:
08:15:ec:4d:16:65:43:6c:62:07:f1:75:59:12:2f:43:0c:6c:
53:a2:cc:3d:bf:49:fd:1f:65:ff:ce:b5:75:58:1c:c9:1c:e8:
d0:ce:27:e2:14:eb:08:1c:6c:93:e2:91:6a:b3:9a:37:d9:f6:
94:6e:63:3e:f6:c8:ba:21:f7:3d:6c:5f:77:34:17:aa:42:48:
8c:b2:9e:61:6e:77:c7:b9:94:29:3c:19:a3:77:7e:dd:49:e6:
9e:c8:53:a2:fb:36:24:85:9c:4a:d5:62:56:51:4a:f4:2f:68:
5e:9c:fc:c2:c6:bb:19:86:57:aa:30:f3:5e:91:2a:5a:89:84:
71:6a:ad:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 07:14:26 2026 by rpki-client