Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Eblfd6wGvp-Cq5boxRPEF6YbNe0.roa
File: Eblfd6wGvp-Cq5boxRPEF6YbNe0.roa (raw, json)
Hash identifier: Z8ue3bJC5ya4zfidrK+gIbmqZibbgBUt+OUyMIi+ipQ=
Subject key identifier: 11:B9:5F:77:AC:06:BE:9F:82:AB:96:E8:C5:13:C4:17:A6:1B:35:ED
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019DB5645F2C6252C7F92D8B2A86BBD3D27F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Eblfd6wGvp-Cq5boxRPEF6YbNe0.roa
Signing time: Wed 22 Apr 2026 13:32:27 +0000
ROA not before: Wed 22 Apr 2026 13:32:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205397
IP address blocks: 185.99.98.0/24 maxlen: 24
193.5.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:64:5f:2c:62:52:c7:f9:2d:8b:2a:86:bb:d3:d2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 22 13:32:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11b95f77ac06be9f82ab96e8c513c417a61b35ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:66:17:04:0c:3d:79:6b:38:df:a7:8d:02:
7d:6d:a8:1c:1b:b9:79:e4:50:c0:ec:e4:f7:0c:3a:
f7:08:c8:3f:d2:5b:64:24:9a:85:a1:c9:38:4a:2e:
3e:3c:dd:0c:de:01:73:7c:4f:bd:ee:52:5f:60:05:
6a:00:82:72:0b:56:45:29:a5:76:c7:d6:ee:b4:e4:
d9:e0:43:7f:95:9b:8f:7e:c8:df:7d:2a:df:0e:ae:
67:bc:06:93:7f:3d:a9:77:4b:ea:df:cf:2d:90:d1:
38:d6:2e:48:88:07:f8:29:f0:ef:a1:89:f9:41:cf:
72:35:aa:a6:f5:0e:5a:a8:8d:f6:af:3e:d7:96:49:
18:d8:17:d0:2f:7a:cf:a5:4f:18:90:a3:30:8a:1f:
07:1a:99:56:6c:d4:03:68:16:21:14:6a:10:1e:97:
3b:d1:bb:e4:e9:d9:70:f2:91:85:49:27:91:ce:92:
24:03:9b:8c:b8:a4:4d:6b:4e:0d:3f:bd:1e:bf:03:
04:8d:1a:0b:68:76:a5:9d:f0:78:b0:a1:43:b6:aa:
63:b4:93:a7:fa:b9:02:4e:f4:04:04:85:d2:a2:c2:
56:fc:33:7f:4b:99:7a:21:0d:8b:64:61:19:ea:7e:
99:9b:43:89:f0:fc:74:d7:89:a7:67:fe:71:1b:11:
20:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B9:5F:77:AC:06:BE:9F:82:AB:96:E8:C5:13:C4:17:A6:1B:35:ED
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Eblfd6wGvp-Cq5boxRPEF6YbNe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.98.0/24
193.5.251.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ad:2c:4b:0c:77:29:d4:d2:ec:92:5d:b5:61:60:1a:23:7a:
9f:81:7f:67:7b:f0:93:91:3a:0a:3b:48:49:e0:15:1f:b6:93:
78:36:92:00:04:ba:ae:f0:15:b6:be:b7:d7:bf:22:15:79:2e:
45:82:08:2b:20:b9:bc:58:ab:c3:70:87:a7:a9:e6:22:45:25:
93:a0:bc:b3:0d:9a:c4:6a:ac:01:1b:9e:ba:9b:6d:03:7c:94:
34:65:ff:bd:57:b3:ca:dd:5e:0b:ae:0b:4f:f7:8f:5a:13:8a:
da:25:f4:78:04:24:fd:e1:43:83:f1:e1:d0:72:06:4e:c7:5d:
86:a9:5e:c9:7d:86:c5:5a:04:d8:49:97:28:f2:12:fa:98:d3:
d2:7e:2f:72:a1:e9:2b:cd:d9:20:0d:c9:37:e4:9c:f6:91:59:
74:4f:c9:6b:83:14:fc:31:2f:29:9e:90:8a:9d:4a:da:62:5e:
bc:eb:45:04:bf:54:f0:af:68:74:44:81:76:ac:a6:be:5e:d1:
81:35:02:71:b1:0b:ac:39:cd:ca:6e:0e:f4:2a:36:f2:37:04:
1f:7e:7a:f3:e5:d5:c0:b0:35:ba:dd:70:8c:44:b4:4e:ea:f7:
c2:ee:b1:a8:bc:e7:ea:25:cb:d5:51:04:43:6b:f1:48:86:a8:
43:d9:af:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:02 2026 by rpki-client