Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/1-EAsB25AZ4X-I_GY_t9vKuEY86Y.roa
File: 1-EAsB25AZ4X-I_GY_t9vKuEY86Y.roa (raw, json)
Hash identifier: nav09sGI16l96Ot72m87rg0Es3Mohhog/elp3en7JIY=
Subject key identifier: F8:40:2C:07:6E:40:67:85:FE:23:F1:98:FE:DF:6F:2A:E1:18:F3:A6
Certificate issuer: /CN=e7fa8e4c9156c0d82a333268ad2de1f516cbb728
Certificate serial: 019F2368D653B8AAAA6706F5A46881D9B84F
Authority key identifier: E7:FA:8E:4C:91:56:C0:D8:2A:33:32:68:AD:2D:E1:F5:16:CB:B7:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/1-EAsB25AZ4X-I_GY_t9vKuEY86Y.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202857
IP address blocks: 193.169.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d6:53:b8:aa:aa:67:06:f5:a4:68:81:d9:b8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fa8e4c9156c0d82a333268ad2de1f516cbb728
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8402c076e406785fe23f198fedf6f2ae118f3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9f:18:13:c9:67:47:06:76:18:bf:74:a6:2f:
36:ed:09:22:be:44:7e:ae:1c:77:0c:46:15:c8:5f:
98:f8:5d:e7:73:dc:b1:c1:7a:79:84:a5:e0:10:1c:
46:de:d6:35:60:d3:d6:0c:47:61:97:65:70:34:29:
cd:59:37:29:3a:5b:fa:14:2a:bd:47:7b:f7:38:e1:
b3:21:6b:7b:0a:ec:8e:76:9e:93:38:1f:74:07:ea:
c2:fa:1b:a9:6e:19:8b:17:d0:fb:1d:b1:38:0d:45:
d9:bf:b1:c8:90:07:8c:f3:2b:99:20:82:88:99:b8:
eb:0e:40:3d:a3:f8:62:59:44:dc:1a:94:b4:15:e6:
8e:cf:18:bd:56:b0:4a:48:9a:02:f7:49:bc:10:13:
dd:cb:ef:a0:ac:9a:f2:2b:e0:92:4b:b7:e3:f1:91:
19:fb:6b:07:f1:10:70:4e:19:d4:f0:d6:6c:f4:32:
05:68:8f:7a:85:04:d0:57:d1:f5:6e:6c:d2:60:9a:
35:b6:b2:ea:fa:6b:0c:4a:b9:d4:6d:0f:bc:2a:72:
d0:9e:49:2c:98:ed:69:39:b2:b3:d5:18:a3:0c:6f:
a6:fb:1f:85:b7:6a:3b:ba:e5:83:d4:26:76:8a:07:
b0:34:72:e2:fd:45:ce:06:ca:37:d7:1e:be:bd:49:
cd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:40:2C:07:6E:40:67:85:FE:23:F1:98:FE:DF:6F:2A:E1:18:F3:A6
X509v3 Authority Key Identifier:
keyid:E7:FA:8E:4C:91:56:C0:D8:2A:33:32:68:AD:2D:E1:F5:16:CB:B7:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/1-EAsB25AZ4X-I_GY_t9vKuEY86Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.212.0/24
Signature Algorithm: sha256WithRSAEncryption
48:de:f5:1e:03:02:33:bd:61:1a:2c:90:cd:44:a4:ec:43:b1:
32:2f:09:5d:55:ca:d3:24:ef:f4:4f:c8:44:58:23:cf:93:57:
7a:30:1b:bc:4d:65:1a:6e:1b:21:27:59:cc:83:c1:53:05:e9:
f0:15:9d:ca:f3:07:c5:be:ca:a8:8f:71:52:76:28:76:89:84:
54:cc:8f:9c:aa:48:67:98:cd:65:35:0d:8a:04:7c:a2:f5:a1:
e5:2d:5d:05:cc:ad:c4:e6:e0:fd:c0:c8:1e:e7:e0:27:38:dc:
94:9d:3d:74:a0:8a:4d:3b:8a:29:26:5a:ae:ec:94:8b:77:e0:
5c:44:7c:4f:0f:53:cf:d5:f7:ae:ef:33:a8:a1:e5:dd:0a:3f:
6b:5d:3f:b9:07:c6:44:94:c2:99:6d:05:ff:82:8a:72:e9:e1:
88:6a:7c:32:eb:8e:20:d1:b3:a6:42:2e:57:f2:a8:f1:47:14:
c6:a3:ec:9d:9f:d8:3b:15:68:44:0c:c2:4d:4f:03:8b:01:54:
1e:6a:d4:31:a0:85:ee:e0:e4:c1:59:7b:ac:42:50:43:4a:c9:
4d:24:22:b9:65:ab:b5:cc:36:ed:4a:d2:ed:e1:3a:d4:c8:3c:
d7:7f:97:bf:42:e2:58:c7:3f:19:ce:e5:99:c3:99:5f:4c:63:
8e:d6:58:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:24:31 2026 by rpki-client