Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/cELAqh1rhQs7HHakhns3tnBjY3w.roa
File: cELAqh1rhQs7HHakhns3tnBjY3w.roa (raw, json)
Hash identifier: PBsTnIe7z1489WqJ4J1UmxWvdAM7l794q7VGnf8gxlk=
Subject key identifier: 70:42:C0:AA:1D:6B:85:0B:3B:1C:76:A4:86:7B:37:B6:70:63:63:7C
Certificate issuer: /CN=5b7747fb1596ec1d081867e5e3d2a2b873848635
Certificate serial: 019F2368D742E5C752A3920F69170AB3D3BF
Authority key identifier: 5B:77:47:FB:15:96:EC:1D:08:18:67:E5:E3:D2:A2:B8:73:84:86:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3dH-xWW7B0IGGfl49KiuHOEhjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/cELAqh1rhQs7HHakhns3tnBjY3w.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34878
IP address blocks: 193.196.32.0/20 maxlen: 20
2001:7c0:2310::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/W3dH-xWW7B0IGGfl49KiuHOEhjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/W3dH-xWW7B0IGGfl49KiuHOEhjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3dH-xWW7B0IGGfl49KiuHOEhjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d7:42:e5:c7:52:a3:92:0f:69:17:0a:b3:d3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7747fb1596ec1d081867e5e3d2a2b873848635
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7042c0aa1d6b850b3b1c76a4867b37b67063637c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:30:e9:c4:e5:6e:e9:e0:a7:71:77:d7:32:04:
22:60:c3:2b:10:64:32:af:c8:2e:eb:52:39:5e:f2:
68:8c:f0:b1:da:6f:81:08:0b:c5:3b:1b:d2:62:1e:
d2:e4:17:e9:d3:06:e7:d7:5d:02:07:27:49:e0:ae:
c6:19:80:36:f5:00:94:bd:99:e1:a8:e8:dd:2a:1e:
46:e4:18:f2:19:4f:4e:af:10:f6:4e:cf:e7:e9:91:
00:a7:58:05:27:6d:96:79:30:8c:4a:b9:48:1c:7f:
e1:5c:28:3e:b6:39:da:d4:44:d2:ac:18:39:65:17:
23:53:d6:0c:d6:d3:df:f2:76:53:a7:ef:01:90:71:
bd:f8:33:61:ad:24:cc:4a:70:51:0b:43:8a:09:98:
d2:af:81:4a:bc:57:8c:9e:ea:50:c4:0a:03:84:94:
f7:c1:44:bf:74:f8:10:c6:9c:a3:6f:e9:c7:75:bb:
89:da:90:c6:0c:8a:e0:11:d3:88:63:ec:b6:40:85:
55:ee:37:b0:ff:e5:8a:7e:5f:90:41:be:74:b9:45:
79:08:8c:6c:0d:20:1c:73:63:ac:b5:eb:d2:26:8f:
fd:f7:ba:58:31:3b:b2:d3:78:8a:98:5f:a7:29:3d:
8d:f1:82:64:c0:c5:54:4b:8d:10:60:33:b2:5f:4a:
4e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:42:C0:AA:1D:6B:85:0B:3B:1C:76:A4:86:7B:37:B6:70:63:63:7C
X509v3 Authority Key Identifier:
keyid:5B:77:47:FB:15:96:EC:1D:08:18:67:E5:E3:D2:A2:B8:73:84:86:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3dH-xWW7B0IGGfl49KiuHOEhjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/cELAqh1rhQs7HHakhns3tnBjY3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/W3dH-xWW7B0IGGfl49KiuHOEhjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.196.32.0/20
IPv6:
2001:7c0:2310::/44
Signature Algorithm: sha256WithRSAEncryption
8b:6b:c4:1e:42:93:a2:b6:4e:e5:5e:6e:48:30:3f:c2:0f:69:
7c:e0:59:b2:e6:dd:e2:0f:47:da:be:34:a3:ff:14:f9:ef:93:
a1:87:55:0a:86:df:c9:66:8a:00:64:4e:22:4a:27:d8:74:8e:
e6:4f:b3:14:1c:0a:b6:89:52:1b:61:0a:11:d5:61:39:a7:83:
df:b5:99:ff:b2:97:79:86:40:23:ff:43:f4:77:c5:99:3e:4a:
6e:b2:76:45:65:3e:ef:d7:2b:3c:01:00:ed:72:88:25:c0:ff:
4a:35:91:21:90:be:c0:34:79:84:0d:95:8b:11:ed:84:55:86:
b8:71:2d:9b:8b:b3:43:4d:7e:63:86:a8:18:19:ba:aa:fe:02:
32:1b:e2:04:15:2e:f0:2b:ae:9c:38:08:66:67:82:17:e1:38:
b7:4d:49:ff:c3:59:9e:7d:f6:47:f3:5f:87:76:fc:ce:e8:d6:
d2:25:34:88:af:01:27:11:a8:ad:95:69:45:14:00:83:0d:02:
88:40:8e:7c:75:79:60:38:3d:bf:c6:95:8b:2f:ff:4f:af:51:
22:5c:e6:05:56:23:85:20:c9:02:ea:bb:f4:d0:5a:00:f0:ed:
9d:85:70:a4:80:93:e7:e4:2e:1c:39:1a:24:68:ed:35:fe:61:
fd:42:67:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:33 2026 by rpki-client