Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fb2a80-64ff-4ca4-ae4d-3d4b4678d05b/1/eUTnTAS_7nDmDImqNcgOGTu0Od4.roa
File: eUTnTAS_7nDmDImqNcgOGTu0Od4.roa (raw, json)
Hash identifier: ATvILIe7CG50+QhFqAYs1mVMS6f60iOBAKB9QocsmEE=
Subject key identifier: 79:44:E7:4C:04:BF:EE:70:E6:0C:89:AA:35:C8:0E:19:3B:B4:39:DE
Certificate issuer: /CN=7a39fbb1ffb24b2246355cd7bccc1488563569c0
Certificate serial: 019B78353B613132D0774F7AF4907D88B0ED
Authority key identifier: 7A:39:FB:B1:FF:B2:4B:22:46:35:5C:D7:BC:CC:14:88:56:35:69:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejn7sf-ySyJGNVzXvMwUiFY1acA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fb2a80-64ff-4ca4-ae4d-3d4b4678d05b/1/eUTnTAS_7nDmDImqNcgOGTu0Od4.roa
Signing time: Thu 01 Jan 2026 06:18:33 +0000
ROA not before: Thu 01 Jan 2026 06:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203456
IP address blocks: 91.206.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fb2a80-64ff-4ca4-ae4d-3d4b4678d05b/1/ejn7sf-ySyJGNVzXvMwUiFY1acA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fb2a80-64ff-4ca4-ae4d-3d4b4678d05b/1/ejn7sf-ySyJGNVzXvMwUiFY1acA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejn7sf-ySyJGNVzXvMwUiFY1acA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:3b:61:31:32:d0:77:4f:7a:f4:90:7d:88:b0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a39fbb1ffb24b2246355cd7bccc1488563569c0
Validity
Not Before: Jan 1 06:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7944e74c04bfee70e60c89aa35c80e193bb439de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:4b:7a:8f:b4:35:37:a9:01:5d:7a:78:9f:
6e:15:5e:a8:94:7e:5a:5a:fc:f4:4b:03:84:3e:f1:
d5:66:24:01:f2:16:d2:91:18:62:c8:8f:f0:a3:ce:
b0:31:77:73:11:5c:e1:14:43:42:cf:a0:1b:b5:2d:
19:4f:76:c3:1d:3a:b4:c0:31:b9:c3:0a:88:88:f5:
9b:d2:84:18:93:ff:23:78:52:8c:34:9b:be:4d:7a:
f8:04:70:15:2e:ef:9f:b4:f3:87:c7:a2:36:42:5e:
94:19:04:8f:98:27:2f:fd:21:e8:78:94:93:89:b3:
15:8e:7c:6f:66:2c:0c:3d:d1:0a:d8:fd:10:50:12:
67:33:83:f9:53:c8:ff:8c:33:18:f1:a4:16:9c:44:
86:3a:4d:78:eb:51:9c:87:03:12:43:9e:82:41:0b:
22:cf:b2:0f:f4:e2:e7:4a:22:23:29:8b:00:9d:7a:
b9:3f:14:3f:54:0d:97:43:0d:92:31:86:f2:8c:0a:
87:e4:7b:5b:f4:00:be:ca:7d:fd:75:ff:50:3e:d2:
d2:d7:24:42:ef:9b:11:ee:53:8a:07:b7:f4:e5:b0:
28:dc:50:33:2c:61:b5:49:71:1b:cc:8a:b0:14:ca:
9c:57:5d:2d:b0:e7:f7:41:4a:04:3c:88:be:7e:47:
4b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:44:E7:4C:04:BF:EE:70:E6:0C:89:AA:35:C8:0E:19:3B:B4:39:DE
X509v3 Authority Key Identifier:
keyid:7A:39:FB:B1:FF:B2:4B:22:46:35:5C:D7:BC:CC:14:88:56:35:69:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejn7sf-ySyJGNVzXvMwUiFY1acA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fb2a80-64ff-4ca4-ae4d-3d4b4678d05b/1/eUTnTAS_7nDmDImqNcgOGTu0Od4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fb2a80-64ff-4ca4-ae4d-3d4b4678d05b/1/ejn7sf-ySyJGNVzXvMwUiFY1acA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.54.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:08:63:ad:ef:1b:14:79:09:f0:53:e8:a1:f6:89:5b:3f:88:
d7:6e:5b:e9:ad:55:9d:f2:35:3b:c7:ee:a1:29:5b:42:98:60:
bb:29:04:f9:bc:d8:44:c6:2b:13:e2:ab:9e:a4:25:0d:15:45:
f9:af:ea:91:1a:28:83:bb:8b:45:db:73:1f:7d:5f:12:79:e5:
1d:b8:dc:d7:61:e1:05:e7:9b:de:d3:53:4a:9e:09:eb:92:62:
b8:b7:a9:91:71:28:b3:34:63:6d:27:d7:75:80:bc:d9:5a:01:
dc:8e:72:64:3c:cb:11:63:43:2e:bd:f1:40:9e:91:be:f1:43:
7f:f4:3d:62:e3:38:66:ae:32:69:72:70:32:fc:91:d9:95:32:
77:81:a1:de:4f:00:58:7e:04:02:57:c0:84:3f:2d:be:32:f9:
7d:2c:a8:d7:54:15:12:71:31:f0:36:98:b3:a2:f3:78:06:8d:
2e:ef:2c:a8:be:bf:f9:30:1a:53:ea:c1:95:81:53:be:a0:d2:
12:b8:9e:4c:8b:51:33:c9:40:1d:f4:86:94:34:91:8e:2c:45:
8d:ef:f0:77:80:c2:cf:86:b7:86:4c:a2:8c:47:c1:d5:64:8a:
5f:f9:6a:51:47:35:4d:54:21:0e:34:43:b9:1a:df:8f:20:f7:
8f:58:cf:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:03:43 2026 by rpki-client