Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/EBGrvlwkmcuKwYjdV9vGCqP65Ew.roa
File: EBGrvlwkmcuKwYjdV9vGCqP65Ew.roa (raw, json)
Hash identifier: W6egZJFWczdKr4Ta3sytyMq3K3nev0YUBA12bbUGYh4=
Subject key identifier: 10:11:AB:BE:5C:24:99:CB:8A:C1:88:DD:57:DB:C6:0A:A3:FA:E4:4C
Certificate issuer: /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Certificate serial: 019D1CC1D81F5BF972780A11150B7DDE93A5
Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/EBGrvlwkmcuKwYjdV9vGCqP65Ew.roa
Signing time: Mon 23 Mar 2026 22:12:38 +0000
ROA not before: Mon 23 Mar 2026 22:12:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39896
IP address blocks: 146.255.29.0/24 maxlen: 24
2a02:5e80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1c:c1:d8:1f:5b:f9:72:78:0a:11:15:0b:7d:de:93:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Validity
Not Before: Mar 23 22:12:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1011abbe5c2499cb8ac188dd57dbc60aa3fae44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:6b:cc:08:01:52:af:39:e8:84:e1:26:e3:
89:f8:c0:da:a3:b2:23:75:25:37:31:a7:e2:50:68:
9a:6f:ca:6e:38:f7:a8:37:bd:0a:d1:b0:98:12:74:
9a:02:66:d5:c4:fc:7f:75:0b:e5:57:01:b6:2f:b8:
88:b9:d7:5b:53:fc:46:7b:ca:63:54:9f:cd:64:e0:
cc:1a:a8:d1:ef:ea:53:2b:17:5f:f4:5b:0b:74:0d:
09:f4:82:f2:db:3d:8b:32:93:c5:78:f2:24:bc:f8:
f3:c6:8d:47:d2:14:b6:e1:b7:cf:49:39:6f:ed:ca:
49:62:16:66:9e:45:10:25:0e:56:53:73:86:de:5a:
da:96:c2:c8:28:2d:0a:97:4e:f6:a7:74:1e:37:b6:
ef:a6:2f:e4:da:70:41:e1:72:3e:73:a7:4d:b3:ed:
f8:31:4f:67:71:19:6f:87:2f:52:a4:84:42:d5:e6:
be:bb:f0:82:e3:1f:aa:59:f5:26:4a:79:d0:48:88:
ef:4d:83:24:21:14:bb:ef:91:c8:74:f4:f0:80:2b:
6e:2b:64:83:b0:5e:6e:fa:54:24:23:7f:f6:55:73:
e5:55:be:f2:f2:7f:7a:79:f9:50:17:ea:fe:4d:84:
4b:a5:2b:2d:bf:19:a1:72:85:02:53:49:ab:21:8e:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:11:AB:BE:5C:24:99:CB:8A:C1:88:DD:57:DB:C6:0A:A3:FA:E4:4C
X509v3 Authority Key Identifier:
keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/EBGrvlwkmcuKwYjdV9vGCqP65Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.29.0/24
IPv6:
2a02:5e80::/32
Signature Algorithm: sha256WithRSAEncryption
a3:6d:a0:0c:4f:4f:72:ee:4e:10:d8:2e:a1:dc:31:3f:ee:42:
52:05:42:24:78:de:bc:47:cc:d1:2e:e1:f5:bb:70:3e:f2:01:
56:bd:cc:04:f6:05:59:ee:61:43:fb:d6:68:69:5a:b5:5a:a4:
45:43:10:9f:01:34:19:f4:c4:51:09:bf:b1:19:0f:c4:50:07:
91:46:72:5c:d2:cd:88:ae:ed:90:cf:74:5e:f7:0c:24:24:d8:
a2:05:72:93:2e:40:fe:2f:b3:c5:25:e7:b4:f8:ce:74:15:e3:
b0:da:aa:6e:46:fe:35:75:10:27:2e:4b:61:37:4f:27:cd:f5:
cc:78:f1:0c:97:4e:cc:9d:82:d7:12:a6:47:c5:34:e0:7e:ac:
87:fa:20:fb:cc:86:23:bb:e1:47:0a:bf:0c:89:51:2a:1a:70:
5b:94:3f:98:6a:ff:4b:1f:8c:c3:f8:ff:35:a1:05:f9:da:79:
d4:57:7d:5d:a5:c9:19:48:3a:55:dc:1b:d9:2e:30:16:1b:0c:
a1:43:06:08:eb:d2:52:41:9b:72:01:6e:db:05:91:53:27:08:
d5:7f:c4:ca:af:8e:b2:72:f0:06:1a:17:18:5d:46:ce:94:99:
8b:ba:f0:6f:09:f7:4e:3d:e9:5d:2c:11:bd:69:22:7f:c9:e3:
f7:2a:8e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:32:35 2026 by rpki-client