Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/0eTxnYXv6xLAUw-CZHke-K3TCsI.roa
File: 0eTxnYXv6xLAUw-CZHke-K3TCsI.roa (raw, json)
Hash identifier: IiwtzJFKIzZIy5TSTy6MHSgtxDJ1itROpu1u6yoZCA8=
Subject key identifier: D1:E4:F1:9D:85:EF:EB:12:C0:53:0F:82:64:79:1E:F8:AD:D3:0A:C2
Certificate issuer: /CN=56496bb76d1f0ca8595d7dd9035b459a4c2caa9a
Certificate serial: 019F236857495A63AB8BAF443A5579B0C47C
Authority key identifier: 56:49:6B:B7:6D:1F:0C:A8:59:5D:7D:D9:03:5B:45:9A:4C:2C:AA:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vklrt20fDKhZXX3ZA1tFmkwsqpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/0eTxnYXv6xLAUw-CZHke-K3TCsI.roa
Signing time: Thu 02 Jul 2026 15:17:48 +0000
ROA not before: Thu 02 Jul 2026 15:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31712
IP address blocks: 83.142.32.0/21 maxlen: 21
95.128.8.0/21 maxlen: 21
185.108.56.0/22 maxlen: 22
2a04:4100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/Vklrt20fDKhZXX3ZA1tFmkwsqpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/Vklrt20fDKhZXX3ZA1tFmkwsqpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vklrt20fDKhZXX3ZA1tFmkwsqpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:57:49:5a:63:ab:8b:af:44:3a:55:79:b0:c4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56496bb76d1f0ca8595d7dd9035b459a4c2caa9a
Validity
Not Before: Jul 2 15:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1e4f19d85efeb12c0530f8264791ef8add30ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c0:8b:d2:38:d7:9c:55:5c:f4:ff:24:dd:fa:
29:00:d5:82:82:11:c1:a4:48:51:0f:c3:d1:0f:ca:
2c:39:36:e0:7b:80:5c:53:c9:18:25:5f:5a:da:17:
45:dd:42:09:79:1f:87:46:91:d0:6e:5e:6c:bb:55:
eb:4b:82:d8:32:7b:69:c1:24:56:a4:bb:ff:82:76:
f6:6e:1e:67:2f:a6:21:bd:3e:5c:28:32:c5:43:23:
2c:55:04:ce:c4:73:3b:d3:35:c6:14:fe:01:8c:f1:
b9:43:b5:37:3e:b4:71:df:b4:0b:2f:03:f6:af:49:
6b:9f:20:de:9f:66:e5:48:61:30:fb:63:f4:9d:0c:
8f:7f:5b:aa:ec:1a:79:2c:01:57:b5:c7:f1:0b:90:
a0:02:4c:37:d4:cb:3b:59:c1:e8:58:3d:72:de:09:
07:5d:cf:f0:e9:33:fa:76:c5:d5:15:01:6f:ac:9f:
20:bd:33:39:32:b0:e4:2a:12:89:39:13:04:c3:8e:
90:05:88:96:c9:4b:0c:a1:7a:b3:5e:23:a5:57:33:
82:fc:78:63:72:df:32:f9:73:29:1b:06:fa:ce:47:
59:a0:7a:37:99:80:d7:da:08:e7:bd:31:90:29:11:
84:42:7e:83:6e:30:9a:5c:7a:5d:34:c3:49:65:da:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E4:F1:9D:85:EF:EB:12:C0:53:0F:82:64:79:1E:F8:AD:D3:0A:C2
X509v3 Authority Key Identifier:
keyid:56:49:6B:B7:6D:1F:0C:A8:59:5D:7D:D9:03:5B:45:9A:4C:2C:AA:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vklrt20fDKhZXX3ZA1tFmkwsqpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/0eTxnYXv6xLAUw-CZHke-K3TCsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/Vklrt20fDKhZXX3ZA1tFmkwsqpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.32.0/21
95.128.8.0/21
185.108.56.0/22
IPv6:
2a04:4100::/29
Signature Algorithm: sha256WithRSAEncryption
82:5f:84:08:e7:95:bf:ed:59:07:7f:7a:6a:86:00:fa:c5:b6:
95:fb:3f:df:46:a2:87:fc:2e:c1:80:fd:7b:5e:c6:05:19:a3:
ad:f5:91:e1:3a:d7:14:79:45:5d:3c:51:7e:e7:10:25:f5:25:
ac:fa:6b:88:07:45:96:d5:65:0b:7c:28:1e:cb:8e:94:74:f8:
d9:d5:03:68:a6:3a:22:dc:ee:08:d3:bf:c2:7b:59:bf:03:6b:
4b:0f:d9:68:f6:86:0e:d6:cd:f7:01:92:b5:8f:14:3e:f2:32:
b8:51:b4:0a:d9:e7:b1:ab:aa:c1:d8:04:53:c9:8a:30:20:8c:
f6:bc:d5:3b:a9:59:af:77:de:dc:f9:34:62:90:b7:b8:ca:60:
bc:db:91:e8:78:74:da:d9:3f:30:95:f4:ed:b7:e5:ec:62:1e:
fc:5d:f5:7d:29:77:6a:fb:c8:3a:48:9f:ea:41:3b:31:da:19:
b6:d3:94:a3:2f:52:14:f4:d5:1a:75:8e:72:d9:48:e5:cb:04:
4c:e3:68:ed:0e:8a:03:bb:ac:6f:fc:98:2f:8d:1c:52:12:32:
18:a0:ee:59:c3:b8:b4:b1:df:8a:06:99:8b:21:8c:ec:a1:e1:
b0:8a:3e:de:8d:a7:d5:47:7d:f1:27:18:c3:ff:5e:88:d0:c1:
57:19:42:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:55:21 2026 by rpki-client