Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/e3qzYZKsiXi2JvR8gSKvnSuYwtE.roa
File: e3qzYZKsiXi2JvR8gSKvnSuYwtE.roa (raw, json)
Hash identifier: V3dxX8nRKOg3+e1hOcKrnPrRXrDt/Vgdwrv2Gxb63Tk=
Subject key identifier: 7B:7A:B3:61:92:AC:89:78:B6:26:F4:7C:81:22:AF:9D:2B:98:C2:D1
Certificate issuer: /CN=949dbd7faf8c3f93dcbffdc6105e4b00bec8c825
Certificate serial: 01A0C7EA75349DE8EC7293E4FB1B3838FCCF
Authority key identifier: 94:9D:BD:7F:AF:8C:3F:93:DC:BF:FD:C6:10:5E:4B:00:BE:C8:C8:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/e3qzYZKsiXi2JvR8gSKvnSuYwtE.roa
Signing time: Tue 22 Sep 2026 07:00:26 +0000
ROA not before: Tue 22 Sep 2026 07:00:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 194.36.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:75:34:9d:e8:ec:72:93:e4:fb:1b:38:38:fc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949dbd7faf8c3f93dcbffdc6105e4b00bec8c825
Validity
Not Before: Sep 22 07:00:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b7ab36192ac8978b626f47c8122af9d2b98c2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:25:c2:90:b0:2a:b9:a5:11:47:3c:42:b5:
1d:88:80:85:9b:ba:42:33:8a:86:e3:f3:c0:0b:cf:
80:b6:d5:42:05:5e:99:b3:68:26:0c:dc:42:ea:d2:
f9:60:62:6b:5e:a2:94:56:28:11:be:92:17:45:34:
91:af:7f:cd:0f:17:86:65:b6:26:cb:eb:ed:e7:c7:
76:26:38:f7:5d:f1:5f:80:93:95:25:ee:3b:b1:e2:
ed:bb:5b:cd:e6:d5:60:3c:86:ae:9f:c3:52:a4:ce:
f0:fb:0b:14:c9:14:db:97:1b:a4:9e:dc:49:67:32:
db:35:0f:87:6d:84:fc:c2:40:b2:a9:1c:d8:d1:19:
70:46:d2:3c:8b:7c:60:47:f1:07:99:10:a9:23:91:
a1:bb:c5:28:a3:eb:7b:04:38:ff:01:49:02:9a:ba:
a1:57:f9:4c:d7:01:63:37:d5:d6:9c:d1:13:b9:ca:
ef:94:38:ff:32:d8:68:68:56:6c:64:5c:8e:43:e9:
5d:7d:c9:b4:f7:2a:96:b6:e2:15:7b:7d:3e:e6:e8:
20:d0:7c:e8:6a:9e:10:bb:ab:84:0b:fa:0a:b2:e2:
66:95:59:46:12:b3:b4:ed:d3:56:38:dd:fc:0e:27:
11:ef:dd:04:5e:f3:70:e0:a6:18:6d:d3:35:05:a2:
e2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7A:B3:61:92:AC:89:78:B6:26:F4:7C:81:22:AF:9D:2B:98:C2:D1
X509v3 Authority Key Identifier:
keyid:94:9D:BD:7F:AF:8C:3F:93:DC:BF:FD:C6:10:5E:4B:00:BE:C8:C8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/e3qzYZKsiXi2JvR8gSKvnSuYwtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.1.0/24
Signature Algorithm: sha256WithRSAEncryption
89:64:4b:2f:69:c2:fe:16:ec:ed:c6:f8:2d:e4:28:51:82:51:
b7:39:bc:ff:e9:3d:b0:4b:83:50:11:2a:19:9f:1f:0d:0e:8f:
18:1c:60:6d:f3:93:85:93:b1:d7:bc:7f:ad:05:49:bc:bd:b5:
9d:bc:a3:32:26:dc:28:91:2d:5b:e1:d9:a9:48:f7:fc:02:71:
e2:57:3e:41:8b:88:eb:0c:35:6a:7a:3a:96:39:5c:9f:0f:a1:
d6:e2:7e:3f:b3:da:1e:21:3f:56:5b:f6:af:11:13:1e:1a:85:
e7:42:f0:e3:41:18:20:6a:05:ae:6b:35:22:16:7e:ee:af:94:
e8:11:12:97:ab:59:92:a7:31:ed:45:d7:a4:c7:d8:ed:06:0c:
c0:21:24:f4:03:c8:05:87:00:09:db:9b:33:43:ee:04:50:94:
de:18:0c:66:5f:0c:7f:f0:21:93:be:33:a6:fb:ff:ca:a3:41:
82:c3:d3:71:93:61:59:93:2e:66:54:de:c0:60:e2:d1:81:20:
98:7c:c3:b1:c2:af:a0:79:8f:33:2a:03:a5:f0:fd:7f:39:a0:
6f:f8:7a:c0:92:8f:ce:10:9c:c5:f7:16:d1:56:d6:13:a9:4d:
17:9b:b9:a4:0f:b5:8b:4f:db:9a:16:72:c7:a2:53:c5:7a:b5:
84:f4:60:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:11:19 2026 by rpki-client