Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Ef3KoOE8fR3lwQrxiuPwLc-iq2A.roa
File: Ef3KoOE8fR3lwQrxiuPwLc-iq2A.roa (raw, json)
Hash identifier: OdcRK/goVMIA15OAEFTVRxq9FJ0mb0HCbom4lfXuy2g=
Subject key identifier: 11:FD:CA:A0:E1:3C:7D:1D:E5:C1:0A:F1:8A:E3:F0:2D:CF:A2:AB:60
Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4
Certificate serial: 019F8F808D31922BC3A0A2C4883872254A48
Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Ef3KoOE8fR3lwQrxiuPwLc-iq2A.roa
Signing time: Thu 23 Jul 2026 15:03:14 +0000
ROA not before: Thu 23 Jul 2026 15:03:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 194.101.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:80:8d:31:92:2b:c3:a0:a2:c4:88:38:72:25:4a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec194107843848cd36330232b5f6a43791db4
Validity
Not Before: Jul 23 15:03:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11fdcaa0e13c7d1de5c10af18ae3f02dcfa2ab60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c9:37:fb:3a:7a:fa:6f:78:9a:9f:ae:19:f9:
f8:17:2a:fd:a1:62:3b:04:b5:78:24:22:39:d6:50:
38:c4:34:fa:c7:ee:af:9c:0b:39:93:88:dd:c6:32:
c0:b6:34:cc:ee:29:5e:5f:d0:29:0b:95:5b:97:6a:
ec:cf:93:69:6b:66:a2:87:45:9c:18:40:54:1f:39:
a6:0a:c1:31:fa:83:2c:85:22:db:a1:f5:bd:67:58:
2d:ce:27:9b:e4:f0:ee:d0:9a:fd:a5:23:b0:6a:cc:
e6:3d:fe:cb:a4:cd:6d:cb:31:fb:d4:cf:80:ba:a4:
a3:2d:6b:4a:ac:7b:67:33:27:fd:a7:d1:fd:2c:78:
b4:c7:40:b9:92:22:d6:f7:78:e9:32:3a:00:21:54:
8e:23:38:78:59:ef:61:84:d4:97:b1:12:b0:52:a1:
32:ab:fe:c2:a5:f5:93:63:b9:e8:33:71:90:55:c5:
d9:85:13:a6:e8:fb:b6:a6:45:51:1c:f6:2a:0e:5f:
3f:dd:42:da:47:5a:5c:b2:cd:cc:0b:0d:18:1e:af:
51:5d:e1:f9:c0:2d:b4:aa:53:94:80:f4:88:dd:aa:
e6:1d:3e:45:39:de:38:ac:9e:1a:87:50:a6:93:d0:
fc:33:d1:7d:36:99:5c:54:f9:bd:db:56:da:b9:42:
34:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FD:CA:A0:E1:3C:7D:1D:E5:C1:0A:F1:8A:E3:F0:2D:CF:A2:AB:60
X509v3 Authority Key Identifier:
keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Ef3KoOE8fR3lwQrxiuPwLc-iq2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.101.69.0/24
Signature Algorithm: sha256WithRSAEncryption
04:51:15:61:71:8c:8a:8c:85:b8:0f:f3:05:53:dd:70:f5:03:
08:78:f7:8e:af:5a:05:2d:e5:41:33:04:50:99:46:b3:9e:7a:
25:c3:01:04:88:05:8d:25:88:e7:76:5b:a8:e7:7c:de:83:04:
23:22:cb:b1:22:48:38:d4:6b:82:58:05:7c:a7:f0:8b:f7:ab:
cd:f8:39:96:77:be:5a:ee:6c:23:b9:c8:ff:72:13:cb:f9:60:
f8:8f:78:fc:c1:e7:b0:de:8a:ac:50:0d:29:71:e6:b4:b3:60:
4d:e3:86:de:38:7f:23:d3:f2:ef:0c:2e:11:7a:6e:3c:c1:36:
45:00:0f:33:c3:58:ef:f9:f5:a1:f8:79:4e:31:c8:32:63:42:
fc:7e:42:90:e3:d8:6f:0f:dd:f2:b1:cb:85:f9:15:07:85:de:
9d:52:b5:65:43:4e:bf:df:7c:38:b7:8a:8d:fb:0c:b2:61:32:
ce:af:8c:0f:7d:7b:60:3d:c8:7d:80:d2:7f:fd:f3:a4:27:34:
7b:a3:2a:71:49:f8:db:f8:00:f0:3c:87:33:09:7d:40:cf:e5:
c7:05:33:4a:0c:28:4f:e8:38:59:24:1f:fa:53:a8:43:33:22:
a5:86:24:66:cf:03:3a:4a:b1:4a:51:7a:8b:bc:4b:62:15:d2:
18:c9:59:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:05 2026 by rpki-client