Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/eSOXNELPy2P_3h7R8IBwrZVgqTM.roa
File: eSOXNELPy2P_3h7R8IBwrZVgqTM.roa (raw, json)
Hash identifier: r38ULUfgOCtbQfGW33x7ibVGykkgQ5HIh/ZXyBOz91w=
Subject key identifier: 79:23:97:34:42:CF:CB:63:FF:DE:1E:D1:F0:80:70:AD:95:60:A9:33
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 019E179E63EA592F07E65ABAEEC5A22E492A
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/eSOXNELPy2P_3h7R8IBwrZVgqTM.roa
Signing time: Mon 11 May 2026 15:18:36 +0000
ROA not before: Mon 11 May 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201552
IP address blocks: 185.5.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:17:9e:63:ea:59:2f:07:e6:5a:ba:ee:c5:a2:2e:49:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: May 11 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7923973442cfcb63ffde1ed1f08070ad9560a933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:15:51:6f:0a:b9:5e:6e:56:e8:7b:c3:5a:
cb:8c:9b:0b:76:f1:34:2e:e1:a9:89:a9:58:44:34:
74:90:0f:5c:65:d3:a4:30:c0:93:00:ad:dc:dd:00:
6b:c0:f2:0f:89:78:ee:c1:35:9c:f5:0a:eb:42:d5:
69:95:4c:ed:53:79:c1:bf:2f:96:ae:cb:57:57:14:
49:78:ab:3c:51:41:63:2d:eb:ea:20:6e:9c:5c:88:
3c:95:b1:8a:e7:a6:84:f2:c0:7d:b9:0b:03:e7:bc:
81:1b:7f:21:6a:1e:bb:4a:fb:8c:f5:2c:f6:32:ca:
e5:30:b1:f1:5e:de:af:a6:79:f2:ce:a3:ab:42:e2:
da:85:a3:5e:94:e3:95:96:f2:b9:e0:cf:f8:2a:08:
fc:c9:f3:02:ff:eb:b0:4c:10:ce:ab:67:8b:9d:ce:
fc:62:bb:94:a5:cb:9c:49:f0:02:ad:41:1e:3d:a4:
e5:a7:a1:79:1f:5c:3a:c2:3a:cb:b1:b4:85:bf:c8:
7c:08:a1:e5:92:04:2b:ca:16:52:5d:22:1e:9b:31:
e2:a8:16:cd:a8:1f:ab:51:50:b3:c8:7b:13:6f:3a:
b9:ce:b0:93:24:c3:b4:60:d6:37:ff:55:db:76:5c:
bb:ee:ef:47:5c:d8:74:05:f2:f1:4e:e7:ec:3f:2a:
1a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:23:97:34:42:CF:CB:63:FF:DE:1E:D1:F0:80:70:AD:95:60:A9:33
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/eSOXNELPy2P_3h7R8IBwrZVgqTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.131.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ea:63:19:1f:4c:67:27:47:37:2f:ca:4c:bb:15:c1:c8:fe:
91:07:c5:71:22:45:9b:45:66:c8:1d:89:6b:3a:fb:c8:79:bd:
e9:6f:41:98:3d:c4:28:51:88:b4:70:7f:55:16:09:e1:46:07:
1f:66:29:3c:27:a8:b8:15:da:05:6d:dd:79:71:a9:89:71:87:
7e:a2:db:e3:0f:c8:26:0d:cd:02:ef:49:03:f1:0d:93:0b:0b:
c7:e0:54:9b:63:dd:29:c7:72:8a:d7:3a:a6:17:b5:9b:0d:0a:
30:58:e2:16:c6:92:a3:62:2c:bb:85:de:73:26:c1:ce:b0:c8:
ba:14:e5:35:42:d8:07:aa:c1:c2:d9:25:5b:a0:6d:36:6a:64:
d3:77:a8:e9:e5:a6:aa:18:54:1d:37:32:7e:bd:5c:6e:58:42:
c1:e8:98:e1:08:49:34:cb:57:23:1e:fb:02:97:8c:2e:2d:c8:
0a:6c:6d:15:44:5f:7a:99:03:f7:18:7d:86:99:3d:cb:f6:36:
ee:80:a8:a5:b4:c4:2f:53:02:eb:1b:e7:ab:30:41:fa:75:5d:
12:5e:ee:c1:e1:cb:74:76:c0:78:17:8b:45:e3:92:71:4f:1d:
13:b6:0c:16:b7:a5:96:44:db:85:d5:e0:f2:db:7b:8d:87:5b:
8a:6c:b5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:09 2026 by rpki-client