Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/e0gBckKM8RCRyEWahinENn_HbtU.roa
File: e0gBckKM8RCRyEWahinENn_HbtU.roa (raw, json)
Hash identifier: DWkQzCqPzt4lmehS+9KyYFJuTYn4w267Y8hX/gXWw5Q=
Subject key identifier: 7B:48:01:72:42:8C:F1:10:91:C8:45:9A:86:29:C4:36:7F:C7:6E:D5
Certificate issuer: /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial: 019DD334328E0AD75D73FA39FBD5F50F17E0
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/e0gBckKM8RCRyEWahinENn_HbtU.roa
Signing time: Tue 28 Apr 2026 08:28:26 +0000
ROA not before: Tue 28 Apr 2026 08:28:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213607
IP address blocks: 185.14.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:34:32:8e:0a:d7:5d:73:fa:39:fb:d5:f5:0f:17:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Validity
Not Before: Apr 28 08:28:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b480172428cf11091c8459a8629c4367fc76ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:00:fe:c5:20:5b:3c:02:be:0f:15:ca:07:21:
d2:22:bb:e9:5d:13:e1:ce:43:7f:ed:7a:67:85:10:
c2:87:90:10:ef:89:df:fb:49:6b:8c:66:65:d1:be:
63:24:c5:40:b6:ab:92:59:0f:f1:b4:bc:6c:df:6c:
6b:a6:a5:e6:4a:64:cb:21:32:c9:e4:51:44:ea:55:
a9:c6:ef:e5:6f:71:01:0c:3a:34:df:7b:54:33:3b:
88:56:18:fa:a3:45:94:3e:a8:e0:87:4e:fb:58:e1:
6d:6f:82:f5:06:c1:f5:43:e1:87:73:b8:0b:87:22:
78:7a:d2:c1:34:04:32:5b:cc:e9:0f:af:e6:b2:2f:
4d:1f:fe:87:3d:08:b9:11:69:3d:5c:d3:8b:9c:c7:
80:36:85:c5:e1:45:0e:00:bd:f1:06:ee:14:5b:c5:
8d:9a:4a:73:d5:66:3c:11:f5:ff:81:3e:09:cd:fc:
64:58:cb:48:29:4e:89:22:28:55:00:30:9d:75:aa:
a8:d9:51:ed:d5:3f:e4:31:a7:a0:cc:ba:4b:e5:50:
00:4c:06:1e:7a:2a:34:b5:1b:aa:e6:bd:5a:f1:dc:
4b:3a:d6:76:74:86:da:e6:41:41:e1:3d:d9:c5:ac:
07:96:be:62:7a:da:eb:90:ac:3a:8a:a0:42:80:e8:
cb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:48:01:72:42:8C:F1:10:91:C8:45:9A:86:29:C4:36:7F:C7:6E:D5
X509v3 Authority Key Identifier:
keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/e0gBckKM8RCRyEWahinENn_HbtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.237.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:84:13:ef:32:70:3c:9f:bd:4d:54:e0:de:36:0b:15:44:25:
71:c0:d6:de:91:80:a2:bf:7d:5b:00:30:78:84:2a:20:65:37:
1f:cd:f1:ea:c5:a9:57:b7:6c:58:86:3b:98:e6:78:6e:ed:1b:
cf:c6:cf:18:31:c8:02:10:18:8a:97:04:90:ab:8d:0b:b2:a0:
6c:cb:0a:ac:8e:0b:c7:41:66:81:ff:db:9a:05:77:cc:7b:53:
8e:87:ca:ff:75:da:95:75:fa:dc:6c:01:9a:2a:64:b9:8e:43:
dc:2a:cb:d1:53:02:8f:f3:0f:a0:9c:76:52:c8:2e:4a:9a:be:
54:76:85:56:f2:41:40:bd:99:99:03:96:70:5a:6b:8e:1d:3b:
7f:cf:91:0e:e1:2a:cd:3a:05:d2:ca:e2:d0:04:01:38:1a:fc:
a0:ef:19:56:ca:82:19:5d:7d:c8:57:33:9f:0f:4c:66:7c:35:
f7:6a:e4:33:3c:c1:87:34:26:f4:77:17:39:71:67:16:16:20:
07:1a:7f:08:7c:94:aa:b7:65:b5:dd:ab:39:38:55:1a:0f:59:
d6:87:d5:dd:f4:c7:72:d6:54:58:ff:e8:40:0d:b8:7b:ff:53:
f1:6c:98:fc:a1:93:92:a6:45:68:9c:b0:9a:0c:e4:3d:d6:fa:
86:a6:48:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:53:56 2026 by rpki-client