Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/eW52yqvF1GGAE0TXCYsOxEow5Yw.roa
File: eW52yqvF1GGAE0TXCYsOxEow5Yw.roa (raw, json)
Hash identifier: jVx5InVbyJfQ/V5eXsNQ8OqW7VIt2V6pyzq79PNouiw=
Subject key identifier: 79:6E:76:CA:AB:C5:D4:61:80:13:44:D7:09:8B:0E:C4:4A:30:E5:8C
Certificate issuer: /CN=a1760a50148319d6172a3820d888a924c09d7a5f
Certificate serial: 019B78A277359DDF1CE7FD7805B91E64A3C8
Authority key identifier: A1:76:0A:50:14:83:19:D6:17:2A:38:20:D8:88:A9:24:C0:9D:7A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oXYKUBSDGdYXKjgg2IipJMCdel8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/eW52yqvF1GGAE0TXCYsOxEow5Yw.roa
Signing time: Thu 01 Jan 2026 08:17:51 +0000
ROA not before: Thu 01 Jan 2026 08:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25167
IP address blocks: 193.109.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/oXYKUBSDGdYXKjgg2IipJMCdel8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/oXYKUBSDGdYXKjgg2IipJMCdel8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oXYKUBSDGdYXKjgg2IipJMCdel8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:77:35:9d:df:1c:e7:fd:78:05:b9:1e:64:a3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1760a50148319d6172a3820d888a924c09d7a5f
Validity
Not Before: Jan 1 08:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=796e76caabc5d461801344d7098b0ec44a30e58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:04:4d:00:91:41:04:d9:37:5e:5a:4d:0f:
5c:06:c0:b9:5b:1a:85:9e:16:29:a4:88:71:f5:65:
f0:84:bc:83:f6:c3:67:2d:e3:27:5b:0f:58:0b:11:
2b:04:e6:be:f7:7b:e6:7f:37:cb:75:08:02:58:f6:
54:51:63:50:9e:f3:d4:9d:3a:76:9c:8f:41:71:51:
0d:6f:26:4d:0b:32:4c:20:4d:18:34:b8:ac:e0:74:
1b:0d:41:e2:5b:bb:cd:e8:ad:5b:26:c2:52:43:5d:
e0:c3:46:b3:cc:9d:69:66:f1:fe:a5:62:df:0f:26:
5f:24:9c:80:6b:9f:78:67:4a:ca:50:8a:cf:b6:a1:
69:4e:24:89:db:78:56:02:f0:6a:b6:ce:7d:df:f4:
1c:58:6f:f9:c3:04:6e:d9:fd:a5:89:3f:f5:40:0b:
7e:16:fb:63:79:74:a7:87:4a:78:22:8e:d8:ba:48:
f2:9d:80:61:7d:1d:bb:cf:a2:84:e4:46:c8:d6:b6:
b9:8b:18:7e:be:2d:9b:38:e7:4c:3a:b1:fb:93:f2:
c5:12:7c:48:4c:98:4c:fb:21:5b:aa:0d:8a:72:99:
b3:5a:a7:a3:0d:2d:86:9f:4b:45:97:26:24:ac:ff:
9e:42:aa:e6:86:c2:41:ed:f8:e5:71:ab:07:ad:9c:
81:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6E:76:CA:AB:C5:D4:61:80:13:44:D7:09:8B:0E:C4:4A:30:E5:8C
X509v3 Authority Key Identifier:
keyid:A1:76:0A:50:14:83:19:D6:17:2A:38:20:D8:88:A9:24:C0:9D:7A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oXYKUBSDGdYXKjgg2IipJMCdel8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/eW52yqvF1GGAE0TXCYsOxEow5Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/oXYKUBSDGdYXKjgg2IipJMCdel8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.113.0/24
Signature Algorithm: sha256WithRSAEncryption
02:8a:19:3b:9c:67:d3:f9:cd:73:0f:07:b7:a3:31:cd:31:ca:
4f:5d:fc:d6:6b:d5:d6:db:3e:1f:21:a4:eb:68:85:77:0f:9c:
d1:ab:db:cd:25:71:cf:c2:57:3d:7e:30:e3:b8:b7:99:53:55:
f3:44:78:d1:ac:ce:af:70:16:14:41:53:aa:c2:4c:02:91:05:
14:29:03:d7:58:83:c2:26:b4:88:94:f3:c2:87:b9:75:f8:da:
47:d9:89:c2:8d:42:d5:30:dc:d5:d5:80:74:03:d3:90:4e:21:
ae:5b:9c:27:45:86:9a:2b:e8:58:ac:fa:0b:70:09:1c:bb:4d:
8b:7c:34:04:5b:a2:1c:34:ae:cd:64:4a:73:be:23:8f:fb:7d:
e3:a6:cd:7f:17:1e:11:f2:21:a4:03:4c:59:26:07:8e:36:2a:
43:09:f8:52:1b:8c:23:ae:74:ee:11:6e:88:9f:9e:95:e7:d5:
58:a0:97:57:c8:bd:a2:7d:73:c8:0d:3a:8a:87:05:08:bc:25:
63:8b:dc:b4:1c:f1:52:b5:e9:59:fb:d5:d1:7b:60:64:a1:aa:
ff:a8:fa:a9:c5:95:5d:75:7f:32:e2:f3:bb:ca:48:b7:b1:f6:
5d:08:a8:0a:09:36:38:c8:8f:f6:96:2a:7c:d0:2c:76:e2:64:
e5:4a:93:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:49:59 2026 by rpki-client