Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/eS4B6UGXaj1jtg698wa76I6I9s0.roa
File: eS4B6UGXaj1jtg698wa76I6I9s0.roa (raw, json)
Hash identifier: ee1yHXEYh01F57rf9ic6LVAj3dkGow/zQH8cnd6TnOc=
Subject key identifier: 79:2E:01:E9:41:97:6A:3D:63:B6:0E:BD:F3:06:BB:E8:8E:88:F6:CD
Certificate issuer: /CN=815d4c3b6e9bf8da4fa1858352d567097494eb80
Certificate serial: 019F236930A04E9B44056E98A60869E160BD
Authority key identifier: 81:5D:4C:3B:6E:9B:F8:DA:4F:A1:85:83:52:D5:67:09:74:94:EB:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gV1MO26b-NpPoYWDUtVnCXSU64A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/eS4B6UGXaj1jtg698wa76I6I9s0.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51580
IP address blocks: 185.29.73.0/24 maxlen: 24
185.29.74.0/23 maxlen: 24
185.29.74.0/24 maxlen: 24
185.29.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gV1MO26b-NpPoYWDUtVnCXSU64A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:30:a0:4e:9b:44:05:6e:98:a6:08:69:e1:60:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815d4c3b6e9bf8da4fa1858352d567097494eb80
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=792e01e941976a3d63b60ebdf306bbe88e88f6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:14:bd:1e:ce:47:2d:56:65:18:68:92:f7:7b:
0d:9b:45:14:2f:2a:fd:9f:7b:b0:c8:da:d0:39:e0:
ce:d1:c8:f9:f4:e1:38:02:ef:b7:2d:fa:9c:a2:3c:
a5:91:23:04:c6:4b:82:e8:ac:16:1e:86:78:0c:ff:
bf:75:18:bb:c7:66:d9:da:4e:77:a6:01:09:94:34:
c6:16:fe:d4:6d:0f:b0:14:05:27:cb:35:4b:c8:2c:
6b:94:48:44:39:49:bd:09:24:a9:00:c6:8e:a9:c6:
a6:ba:01:c1:71:36:68:1e:9e:4e:e8:ba:bb:7c:6c:
99:31:5d:53:6a:9d:e7:40:18:78:a5:1f:7a:a8:2a:
4c:ae:90:da:33:a9:c6:1a:db:3c:8e:6f:06:1f:04:
bb:4a:c0:c8:bc:d5:b2:19:89:07:e4:8f:32:7e:ed:
35:a3:b4:83:b3:09:0f:54:69:64:a7:9b:44:62:6b:
a6:05:2b:6d:11:d5:f9:1a:b1:c3:ce:8a:67:cd:44:
a3:d8:4c:28:94:f2:75:67:bb:d8:9b:62:7d:58:18:
10:a2:03:00:06:b3:b8:e0:2e:b4:09:b8:0f:2e:89:
c3:00:88:89:38:36:e9:05:41:b4:95:0d:00:6f:00:
5f:5f:2d:d0:7b:5f:82:f5:dd:27:fb:0c:a0:f3:13:
17:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2E:01:E9:41:97:6A:3D:63:B6:0E:BD:F3:06:BB:E8:8E:88:F6:CD
X509v3 Authority Key Identifier:
keyid:81:5D:4C:3B:6E:9B:F8:DA:4F:A1:85:83:52:D5:67:09:74:94:EB:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV1MO26b-NpPoYWDUtVnCXSU64A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/eS4B6UGXaj1jtg698wa76I6I9s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/gV1MO26b-NpPoYWDUtVnCXSU64A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.73.0-185.29.75.255
Signature Algorithm: sha256WithRSAEncryption
79:d6:68:22:68:81:df:5e:ba:bb:d2:89:33:96:82:60:42:ce:
fc:0b:88:17:65:d4:5e:f2:ea:f4:3e:9a:58:20:f6:cd:23:16:
9a:4a:ff:13:c4:a5:e0:04:5f:d7:95:23:5c:80:d2:e1:ab:1f:
4b:4d:ea:da:32:33:8b:fb:0f:a4:0e:9a:da:a8:76:57:c0:d2:
97:f4:c3:46:6a:d7:9b:f8:f0:16:ed:33:45:c4:72:55:4b:a6:
73:4f:cf:6c:8b:1f:56:27:60:7c:f5:f1:65:f3:bb:24:b4:2d:
af:1a:fc:93:b6:ec:45:85:ee:a9:9f:2e:be:79:7c:66:b0:d4:
37:e3:2f:b6:16:05:13:9c:9c:4f:ad:3f:94:03:12:c4:de:8d:
ab:ba:81:bf:25:17:76:25:80:22:99:7f:88:31:75:11:46:10:
e1:db:d6:29:69:bc:8c:c5:eb:a2:bd:31:81:7e:40:28:11:99:
f0:20:69:40:0a:67:f6:15:e9:9d:35:90:f5:22:ac:7f:2b:29:
62:2e:82:69:61:72:bb:32:8b:ce:5a:bb:b8:31:10:cf:5d:62:
65:d9:79:c3:3b:79:3c:18:9a:1e:ae:30:f0:b7:55:31:0e:b6:
18:e7:25:54:b5:0e:5f:3d:f3:2a:1c:58:e7:b8:89:a0:f8:5e:
c5:33:68:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:45 2026 by rpki-client