Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/ezlSrsx8te0ntPYBVQJ1MwKt7c4.roa
File: ezlSrsx8te0ntPYBVQJ1MwKt7c4.roa (raw, json)
Hash identifier: lr9SiZAxytRoSZDzBrTYj7nLRcvRM5Ct8mwl/09v1jc=
Subject key identifier: 7B:39:52:AE:CC:7C:B5:ED:27:B4:F6:01:55:02:75:33:02:AD:ED:CE
Certificate issuer: /CN=1a825773e924332e9ee5a44fcabcba6af135caf0
Certificate serial: 019F3C98545DB3FDD2F7AAF1004D32FC2B0C
Authority key identifier: 1A:82:57:73:E9:24:33:2E:9E:E5:A4:4F:CA:BC:BA:6A:F1:35:CA:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/ezlSrsx8te0ntPYBVQJ1MwKt7c4.roa
Signing time: Tue 07 Jul 2026 12:40:43 +0000
ROA not before: Tue 07 Jul 2026 12:40:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.164.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:98:54:5d:b3:fd:d2:f7:aa:f1:00:4d:32:fc:2b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a825773e924332e9ee5a44fcabcba6af135caf0
Validity
Not Before: Jul 7 12:40:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b3952aecc7cb5ed27b4f6015502753302adedce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:60:75:3b:96:70:ce:c1:21:ff:32:94:c6:c0:
0e:44:d4:e7:25:a7:e5:d1:a2:e9:1c:53:2a:05:a6:
39:be:02:c9:8c:7a:62:5d:98:7c:38:87:63:1f:7a:
6f:5b:55:d5:0d:3f:44:a4:f0:d9:bd:a7:5b:af:a8:
d4:20:3e:f8:39:90:38:9f:e5:89:bc:9a:6a:bc:3a:
3d:6c:8a:c6:db:e3:1c:aa:2f:c2:9a:25:c9:06:dc:
a9:99:30:b5:9e:04:dc:1c:57:60:d0:32:3b:36:a5:
07:cf:26:6a:26:b6:0b:b5:cb:45:a3:c7:9f:16:2f:
34:91:c2:df:1a:53:59:47:e4:7b:6a:7e:cc:0c:47:
6f:67:5c:17:3e:93:21:65:1c:0f:00:ae:0f:18:75:
8f:b4:09:64:00:f6:e3:de:f3:91:0c:06:0e:74:b5:
01:f3:8d:7b:9e:8d:9d:aa:20:b6:74:f6:0a:07:8a:
7b:d6:a9:39:09:62:8d:d0:ae:af:7e:ee:5e:a8:dc:
9d:d5:24:43:67:53:09:c9:cf:0f:f5:c0:f9:b2:4a:
45:34:26:e9:45:3b:c5:c3:09:0d:86:1e:c3:aa:c5:
21:37:53:68:39:92:be:6f:09:e9:d3:47:5b:c4:7c:
37:b6:ce:a9:8e:13:a1:dd:b8:07:d1:80:9b:4a:66:
38:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:39:52:AE:CC:7C:B5:ED:27:B4:F6:01:55:02:75:33:02:AD:ED:CE
X509v3 Authority Key Identifier:
keyid:1A:82:57:73:E9:24:33:2E:9E:E5:A4:4F:CA:BC:BA:6A:F1:35:CA:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoJXc-kkMy6e5aRPyry6avE1yvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/ezlSrsx8te0ntPYBVQJ1MwKt7c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/815c28-505c-432b-9f6a-2a2e45062584/1/GoJXc-kkMy6e5aRPyry6avE1yvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.151.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:98:71:cc:a6:bf:e8:c5:c9:b0:ff:24:1c:8d:a2:3a:d0:36:
5e:3e:f1:61:d0:75:a5:52:22:d1:8b:f1:24:3a:93:98:a0:93:
36:75:11:5b:8f:c0:d7:aa:dc:0e:08:54:06:13:2a:e7:80:4a:
d8:ef:f6:d1:4e:bd:a2:a9:cf:64:4d:39:1d:47:b9:c2:ad:31:
f5:f0:38:b0:97:41:39:97:51:23:d2:1b:88:97:1e:0f:f9:7f:
00:66:99:a2:64:66:52:49:3f:52:62:55:bf:bf:9c:ca:db:2e:
20:e1:db:de:03:a3:cb:63:9c:66:e0:52:32:64:a6:7a:04:ce:
57:dc:ac:65:97:09:5c:b5:ce:ba:4c:11:75:e4:25:94:fd:f7:
c9:d5:61:39:1e:82:9e:9a:26:f3:af:e1:e2:d9:0c:63:96:e9:
c7:0a:02:55:23:50:d2:6c:6d:0c:5a:b1:14:f4:22:22:df:42:
82:a0:ce:ed:dd:72:5e:5e:9b:d0:4f:95:16:b5:43:52:a1:2b:
07:5f:62:5d:9f:8c:d2:90:1d:72:1f:41:99:68:8b:49:72:ad:
99:3a:6e:76:db:0d:cf:f1:95:15:c2:f5:ed:41:14:03:fb:cd:
de:c8:ea:14:4f:e3:49:3a:56:40:45:0c:36:54:a2:16:4d:3b:
cc:9b:71:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:48:31 2026 by rpki-client