Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/tSageFEQxzkkdzWrWiPFkT3D-Ec.roa
File: tSageFEQxzkkdzWrWiPFkT3D-Ec.roa (raw, json)
Hash identifier: 62TffehwovUDTyT5E6936YcLFqlIeIdvRZN8MDzVRzY=
Subject key identifier: B5:26:A0:78:51:10:C7:39:24:77:35:AB:5A:23:C5:91:3D:C3:F8:47
Certificate issuer: /CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Certificate serial: 019F23685E2E5B0C0564377E7F24FD41ADB2
Authority key identifier: EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/tSageFEQxzkkdzWrWiPFkT3D-Ec.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51234
IP address blocks: 176.117.0.0/21 maxlen: 21
176.117.0.0/24 maxlen: 24
176.117.2.0/24 maxlen: 24
195.191.78.0/23 maxlen: 23
195.191.78.0/24 maxlen: 24
195.191.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5e:2e:5b:0c:05:64:37:7e:7f:24:fd:41:ad:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b526a0785110c739247735ab5a23c5913dc3f847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:18:cf:d4:b6:ed:36:48:7a:fa:1e:76:a7:49:
a7:d1:86:46:ed:d9:6f:c3:9b:5f:f9:32:0a:1f:6a:
e1:b0:5d:ee:5e:39:6b:9e:77:c6:c7:7d:8b:ce:1c:
bc:dc:f9:87:03:fa:1d:67:26:1d:ff:34:eb:58:54:
d0:ca:02:9d:0c:ba:fb:59:2c:bb:e4:9a:cd:4e:27:
02:f2:fc:14:5c:f9:99:49:34:42:a7:6f:d6:25:32:
6c:47:ce:0f:70:cf:17:4c:63:a8:0b:0d:a6:f9:cd:
2f:c2:88:38:61:ec:80:81:aa:b9:a0:1d:4d:2a:5c:
12:1d:94:b5:6b:e6:aa:41:80:71:91:55:3c:0d:92:
cd:c6:4d:0e:24:46:f8:cd:15:93:6e:03:ac:ac:88:
eb:aa:e9:03:63:83:0c:b4:2a:0d:cc:68:ad:3a:21:
38:91:11:33:ab:96:60:e7:63:eb:4b:14:3b:60:6d:
97:d5:b9:05:fd:a6:eb:c7:92:a3:46:f3:15:1a:fb:
9c:e2:ae:11:c7:49:ef:2f:29:5f:98:d7:9d:6f:05:
0d:c5:bf:0e:b7:ca:8f:21:2c:5d:26:5d:bf:89:54:
f7:c4:52:6a:f8:c7:b1:b0:91:a7:fd:e1:a7:83:04:
0b:97:f6:6f:8d:bc:ca:02:69:e8:53:78:ed:7d:18:
1b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:26:A0:78:51:10:C7:39:24:77:35:AB:5A:23:C5:91:3D:C3:F8:47
X509v3 Authority Key Identifier:
keyid:EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/tSageFEQxzkkdzWrWiPFkT3D-Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.0.0/21
195.191.78.0/23
Signature Algorithm: sha256WithRSAEncryption
71:2b:2b:0a:85:83:09:9e:88:93:5d:cd:96:4d:2d:9e:6d:03:
25:66:af:ec:51:e7:09:0e:82:77:3c:8d:7f:47:12:b3:e2:35:
fd:84:4c:18:93:7a:21:01:62:f4:1f:37:2a:c0:46:22:55:2d:
18:ca:2f:f5:6f:1d:43:c4:52:78:de:aa:e8:45:71:f7:2c:3b:
e2:f8:48:58:70:2a:2a:58:7f:50:c6:06:bc:ba:33:93:e3:a6:
b6:fb:5d:90:f7:63:33:e5:27:64:5e:f9:91:07:61:bc:0d:28:
b4:c3:44:21:e4:9a:be:f1:a2:5c:af:10:07:65:d8:e9:ee:88:
e2:10:75:9c:e8:ad:7b:93:07:36:bc:28:f2:80:de:17:1f:4f:
aa:69:3c:c8:22:34:b0:ce:35:4a:7e:9e:a4:b1:ac:62:48:08:
3a:f4:cf:5a:68:f0:74:fd:67:b1:4c:18:87:e7:ef:4c:43:95:
45:86:9e:1c:32:3c:1a:c7:5d:87:50:bf:f2:85:d3:a8:01:62:
05:66:99:b5:ea:ca:f0:d2:b4:a7:9d:8a:b6:80:cb:cf:36:1f:
36:f8:8b:6e:a8:c0:d5:0d:e5:40:fe:bd:49:29:a7:f6:80:ed:
3d:b6:86:a1:e5:45:7d:81:08:1f:5e:55:78:fd:1a:cb:47:d9:
31:3c:8b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:23 2026 by rpki-client