Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/eMLxI6y-HTbO7w2ItqbyAp1VerY.roa
File: eMLxI6y-HTbO7w2ItqbyAp1VerY.roa (raw, json)
Hash identifier: dhxfPAYv52Wl+ZrSc6iB9/ZZ/Q/6O14ZOn/nuz9S2/4=
Subject key identifier: 78:C2:F1:23:AC:BE:1D:36:CE:EF:0D:88:B6:A6:F2:02:9D:55:7A:B6
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019D2497C46C5D808D0A6CF6CE67E8C42F71
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/eMLxI6y-HTbO7w2ItqbyAp1VerY.roa
Signing time: Wed 25 Mar 2026 10:43:39 +0000
ROA not before: Wed 25 Mar 2026 10:43:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 84.245.23.0/24 maxlen: 24
87.101.1.0/24 maxlen: 24
185.227.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:97:c4:6c:5d:80:8d:0a:6c:f6:ce:67:e8:c4:2f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 25 10:43:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78c2f123acbe1d36ceef0d88b6a6f2029d557ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:0e:57:a3:be:36:50:bf:3b:87:f4:da:44:
63:72:5d:60:67:4e:b0:51:9a:cd:6a:bf:93:06:7c:
b3:88:5f:47:04:93:d1:f1:4a:3c:9e:84:f5:f2:b7:
df:0c:88:4a:5c:7a:b8:f6:22:46:ed:eb:1a:3c:db:
09:b2:fe:4d:2f:7c:39:76:36:ae:02:1a:99:32:d0:
8d:42:00:8e:63:de:80:62:c6:63:f1:a2:19:7a:38:
02:3b:15:66:ae:cc:0b:3e:66:96:87:1b:4f:a9:48:
d5:5f:6d:0d:e2:46:4d:9a:b6:ca:52:60:c8:41:af:
d9:d6:c1:0e:2f:7e:0f:2c:92:81:a2:e5:fe:e4:a2:
da:c7:dd:51:f5:4c:c8:33:35:cf:e3:a4:e0:ef:28:
83:4d:f3:cf:24:02:e0:a2:bf:50:44:11:d5:3f:34:
39:49:20:19:d4:d9:78:e8:7e:4e:45:07:ff:5e:c0:
ec:bb:c6:07:04:8d:6c:c8:c9:ec:91:bd:8c:4a:8e:
f1:79:f2:f7:e7:17:cd:7f:3c:51:2b:cf:98:2d:97:
f0:67:c9:ed:b6:39:d0:c4:68:7f:cd:3c:c1:ae:eb:
7c:3c:a9:6c:42:3e:70:08:69:4b:15:c2:8f:47:8b:
b6:35:40:c3:ad:e4:1c:74:ba:bd:b5:77:c5:78:f9:
65:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C2:F1:23:AC:BE:1D:36:CE:EF:0D:88:B6:A6:F2:02:9D:55:7A:B6
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/eMLxI6y-HTbO7w2ItqbyAp1VerY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.245.23.0/24
87.101.1.0/24
185.227.75.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:22:90:6b:1d:ae:0c:ce:f9:99:5d:de:42:7a:50:a4:2c:ca:
a3:83:79:97:9c:56:4d:3f:dc:74:8c:b0:d3:a4:12:98:aa:1d:
87:8c:f7:bd:f2:87:ab:bb:18:75:0f:1d:f0:86:36:46:a8:4d:
10:af:0c:ae:6b:4c:3e:c5:4b:ed:56:98:3d:5e:e2:56:5e:37:
e3:71:e0:73:66:0d:c0:0b:d1:72:67:c7:30:1b:c9:5c:70:e3:
b9:95:33:6e:7a:e2:49:8a:1d:c2:9a:dd:8f:fe:27:2a:a9:a5:
8b:2a:fd:1b:96:ab:a7:a3:d0:f8:36:3d:d0:b3:c6:3b:82:91:
08:b4:17:64:93:fa:12:aa:1e:1a:29:5d:cf:f5:23:3e:28:62:
a6:a4:c8:0c:73:c9:df:78:0e:c4:a5:a6:0f:e6:e5:0d:6e:2c:
c1:0e:52:22:10:49:b2:db:a5:ac:d6:06:1c:3c:25:9d:81:c9:
bc:a3:13:06:4f:75:9b:51:1a:fa:f4:49:35:08:67:e0:96:75:
8c:1f:2e:94:b4:5c:5f:a6:6f:45:00:0b:d5:ef:c1:97:9a:73:
ca:88:e8:aa:2e:d6:1e:a4:d7:bf:0d:00:83:09:68:57:db:e2:
80:57:e6:42:22:15:48:bb:b1:69:e2:01:56:90:ee:7d:bc:e6:
c4:4f:00:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:19:28 2026 by rpki-client