Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/_sgEk7zklCfZtC1O4_dCCLRdlMg.roa
File: _sgEk7zklCfZtC1O4_dCCLRdlMg.roa (raw, json)
Hash identifier: wKMlHNJ1K28OmmB3WsfZYFrOfB6X9R2aDNRCcwZc7Es=
Subject key identifier: FE:C8:04:93:BC:E4:94:27:D9:B4:2D:4E:E3:F7:42:08:B4:5D:94:C8
Certificate issuer: /CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Certificate serial: 019F23685D99CC11D8E14C173D5C92CDC41F
Authority key identifier: EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/_sgEk7zklCfZtC1O4_dCCLRdlMg.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47775
IP address blocks: 213.5.104.0/22 maxlen: 22
213.5.104.0/23 maxlen: 23
213.5.104.0/24 maxlen: 24
213.5.105.0/24 maxlen: 24
213.5.106.0/23 maxlen: 23
213.5.106.0/24 maxlen: 24
213.5.107.0/24 maxlen: 24
2a02:1c8:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5d:99:cc:11:d8:e1:4c:17:3d:5c:92:cd:c4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fec80493bce49427d9b42d4ee3f74208b45d94c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:2e:2e:fb:38:6c:e9:2f:e4:34:61:2f:16:
72:ca:8b:32:9f:68:23:8f:9a:44:d2:a2:b6:c6:10:
83:2a:76:ed:34:15:26:d3:30:a8:ed:4f:18:81:ee:
33:3c:b5:5b:96:a8:d1:fe:2e:ce:63:a2:da:35:ae:
2e:f5:81:31:da:a1:59:ab:0b:24:5c:70:20:b6:bf:
f5:56:4a:61:08:84:69:24:65:a9:22:30:1e:9b:73:
d9:ff:2b:04:27:b7:90:4d:19:2a:d1:4f:55:6b:b3:
a2:a0:90:72:26:c8:48:4f:f9:d7:eb:ef:08:c9:c4:
87:9c:3f:4d:ea:10:e4:44:4b:4c:d1:6b:3f:ff:be:
93:1c:60:64:c1:61:fe:8d:b8:48:a2:ed:49:49:0a:
11:95:a4:4b:8a:c0:51:d7:cc:0c:b6:7c:bc:46:8e:
93:9e:e9:cf:ec:fb:ce:84:64:08:3b:08:1b:1e:46:
a4:31:44:54:e3:a5:23:24:bb:b4:9b:dd:82:91:fc:
91:d2:80:f7:bd:1a:04:d4:e9:40:55:73:b8:2e:bd:
60:03:07:ac:56:a2:43:08:9c:ff:b6:3e:54:f9:e5:
aa:da:3a:de:28:aa:72:e3:22:89:fe:89:2f:96:7d:
d9:db:54:67:e0:a2:59:ca:92:85:45:83:fe:a6:fe:
fd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C8:04:93:BC:E4:94:27:D9:B4:2D:4E:E3:F7:42:08:B4:5D:94:C8
X509v3 Authority Key Identifier:
keyid:EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/_sgEk7zklCfZtC1O4_dCCLRdlMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.104.0/22
IPv6:
2a02:1c8:5::/48
Signature Algorithm: sha256WithRSAEncryption
3f:12:a7:09:32:4b:60:8a:77:be:8d:58:13:d9:87:99:b4:0d:
35:6c:34:34:4a:02:50:8d:a8:39:14:bb:fb:bc:97:a0:3c:e6:
ef:03:aa:52:0c:24:85:37:f7:3c:57:ab:ce:64:52:5f:10:ce:
dd:8d:4e:97:4d:ea:5c:e2:7b:40:fa:e5:58:97:32:72:d8:b5:
a4:74:b6:ff:4b:e7:be:b2:5e:20:1b:99:1b:72:5c:fc:62:f1:
7d:5b:b6:b9:ef:6f:ba:30:b4:ac:09:ba:8a:e4:e6:7d:1d:c7:
ee:fd:50:46:5b:10:26:ac:ec:f7:57:94:ab:7e:8d:18:e1:fc:
a5:5d:be:fe:44:ee:a8:65:73:fc:c0:20:ae:55:e2:5a:7e:45:
dd:ba:43:43:d1:a6:b8:d0:a9:4a:dd:0f:75:86:a2:5f:be:14:
dd:24:22:f0:af:83:cf:8b:71:35:7b:63:42:3f:04:38:bf:4b:
9b:45:4a:c9:39:4e:20:b8:5b:2a:c5:23:78:df:ac:97:ed:48:
8a:f6:15:b7:a5:79:c2:d5:87:32:22:5f:07:8f:bb:b5:26:ae:
76:6a:9e:76:58:1e:56:86:fb:5e:9f:4f:e7:bf:f4:3c:47:c7:
38:4b:c2:8c:d1:3d:4f:28:2e:a5:e2:99:06:da:7e:ff:24:d8:
11:c2:87:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:44 2026 by rpki-client