Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/eABulvX519zXYKkLmeandGZ9N7w.roa
File: eABulvX519zXYKkLmeandGZ9N7w.roa (raw, json)
Hash identifier: m6XnfSrV2frwGCv/l/D3+0tVwZvOqYONPwxqBxG3KcE=
Subject key identifier: 78:00:6E:96:F5:F9:D7:DC:D7:60:A9:0B:99:E6:A7:74:66:7D:37:BC
Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Certificate serial: 019DEABE8BD6624624E69C36FA22B0135ED8
Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/eABulvX519zXYKkLmeandGZ9N7w.roa
Signing time: Sat 02 May 2026 22:10:49 +0000
ROA not before: Sat 02 May 2026 22:10:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200293
IP address blocks: 77.91.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ea:be:8b:d6:62:46:24:e6:9c:36:fa:22:b0:13:5e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Validity
Not Before: May 2 22:10:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78006e96f5f9d7dcd760a90b99e6a774667d37bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:d6:f1:07:23:8e:6f:93:d4:2a:07:fc:43:
3d:ac:8e:76:6f:65:1a:db:c9:19:55:8b:8d:81:4f:
90:ab:41:97:c9:8e:93:cd:5f:cb:04:49:78:5c:8e:
86:4b:9c:5e:dd:7f:f1:2c:18:2b:40:f9:38:5b:61:
86:f9:b2:5c:7a:3b:54:a9:86:75:43:95:e8:2c:3a:
8a:d9:99:63:f8:02:31:4d:72:55:5f:06:c8:7e:63:
83:36:8d:74:b4:dc:1f:6a:b9:b2:91:a2:eb:c1:cd:
90:f7:78:31:4c:58:b3:af:dd:4d:b4:cf:5a:7a:52:
29:dd:fa:81:81:fc:c0:04:be:54:9f:c8:9c:e6:a8:
1f:e3:e4:e3:49:e7:53:2c:7f:5e:c1:56:7b:2d:ad:
42:eb:9f:4a:12:35:9a:4b:c0:0e:34:86:d2:63:0e:
ea:b9:e2:f3:57:c8:63:96:3a:0f:9f:67:f1:0e:79:
67:50:fe:7e:1a:00:22:ea:8a:da:f0:a6:a6:5e:c2:
a8:e6:80:ed:1a:55:64:68:d8:03:ee:3a:5e:b0:94:
e4:b6:24:57:5f:18:63:e5:31:56:7b:0c:3c:c5:b9:
ab:3d:01:aa:45:98:7f:14:71:5f:94:fd:d3:7a:2a:
fe:9c:a2:43:08:a0:9b:0e:3b:06:d0:8a:a1:0e:43:
d7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:00:6E:96:F5:F9:D7:DC:D7:60:A9:0B:99:E6:A7:74:66:7D:37:BC
X509v3 Authority Key Identifier:
keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/eABulvX519zXYKkLmeandGZ9N7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.116.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:a6:42:8f:4e:b5:58:c5:22:6e:11:7e:c6:54:55:61:f5:4d:
e6:2a:96:8a:16:f6:d7:eb:5d:ee:bc:b4:6d:78:43:c7:a9:a1:
4a:fd:77:6d:9b:8a:0e:5a:d9:72:db:b8:74:d4:b7:6b:cf:f0:
43:8e:cf:99:14:63:57:eb:a0:7c:84:56:72:1c:f5:7b:07:22:
c2:80:26:ee:c8:0f:78:c0:dd:68:96:13:9d:53:7c:f0:d2:aa:
e1:42:ea:bb:17:a2:5e:01:df:0a:a9:2d:6e:e1:c6:ba:ce:66:
00:7e:8c:5e:ec:ef:f9:a4:8f:7b:d1:d3:cc:d7:cf:a9:60:26:
e7:95:5f:35:26:a5:6b:de:73:9c:67:a6:8f:da:08:9d:2d:13:
44:03:9b:4e:38:dc:0f:1c:ca:1d:db:24:92:fa:7c:bc:e1:ef:
08:bb:5c:73:59:8f:15:d2:5b:23:ae:1f:61:19:43:3b:92:67:
c4:59:18:e8:d0:ba:7d:f8:dc:5c:a4:f1:3a:88:5b:44:83:1b:
ee:44:a4:6e:fc:0a:dc:7b:15:5e:3f:b7:c7:51:af:26:b7:78:
e0:36:67:38:50:db:40:42:09:85:53:cf:47:64:33:1d:f5:62:
d2:49:92:f6:bd:e5:52:4a:6a:dd:f4:97:80:3b:f2:aa:32:56:
5e:fc:d1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:27:49 2026 by rpki-client