Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/ek0kAxmgD_bIdypuN8g651x-9uc.roa
File: ek0kAxmgD_bIdypuN8g651x-9uc.roa (raw, json)
Hash identifier: 19NypaHsjpb2/HsDFohPxp20XTcbs4VySqlMRe+Mr8o=
Subject key identifier: 7A:4D:24:03:19:A0:0F:F6:C8:77:2A:6E:37:C8:3A:E7:5C:7E:F6:E7
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 019D0BDAEC174D517145F29BAD1A0B3FE297
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/ek0kAxmgD_bIdypuN8g651x-9uc.roa
Signing time: Fri 20 Mar 2026 15:26:29 +0000
ROA not before: Fri 20 Mar 2026 15:26:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210734
IP address blocks: 193.106.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:da:ec:17:4d:51:71:45:f2:9b:ad:1a:0b:3f:e2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Mar 20 15:26:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a4d240319a00ff6c8772a6e37c83ae75c7ef6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a7:39:79:62:4c:46:38:4c:3c:05:48:cd:0d:
13:0a:c7:b5:cf:8e:08:64:d1:ba:61:64:ca:51:f7:
86:c1:06:f9:f2:f3:ae:ad:ab:a7:3b:ac:b3:41:34:
95:91:a4:37:48:71:d2:7e:0e:e0:f6:a6:c0:04:06:
5f:a8:a7:5b:1e:56:73:71:9c:35:f4:af:2d:72:7d:
60:f5:b2:6e:af:88:31:9e:8f:08:fb:4f:1a:2d:90:
8a:00:1e:1d:b0:cb:ab:af:76:ea:ee:97:23:d9:09:
51:7e:24:6e:34:18:38:c5:b3:90:16:11:d7:3d:02:
bb:4c:c6:56:d3:9b:20:f3:98:25:12:83:ee:1d:4c:
66:fe:7a:52:37:d0:de:70:80:1b:52:04:88:ec:fb:
8b:e5:5c:5b:23:10:88:23:83:9c:c0:08:6a:9c:da:
19:56:8e:28:f5:25:19:18:ad:71:29:a9:64:e2:43:
28:fa:de:73:be:f5:a1:48:56:78:82:86:c1:f6:1c:
91:04:43:52:df:46:28:95:4b:40:af:d9:65:70:14:
6a:e9:c0:40:b0:01:df:7b:9a:d7:6e:e4:f5:08:bb:
f7:5d:3a:42:c1:f0:9f:37:ae:9a:a4:28:71:79:7e:
c3:27:44:86:1d:9e:f1:d5:b7:6f:0c:44:f6:90:a9:
2c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4D:24:03:19:A0:0F:F6:C8:77:2A:6E:37:C8:3A:E7:5C:7E:F6:E7
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/ek0kAxmgD_bIdypuN8g651x-9uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.196.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:0d:b0:7e:cb:ec:bc:d1:ac:eb:1d:36:f8:6d:7f:ac:ca:b9:
16:36:f4:9f:e3:80:7a:ec:4f:09:5d:88:c5:7c:d5:75:5d:6a:
9c:f7:9c:88:b3:d8:f9:c0:c8:67:a3:1d:41:77:1d:2c:a6:bf:
e9:bf:39:7b:4f:97:9c:47:bb:d3:b1:58:e5:43:6e:f1:d4:2a:
bc:14:d5:50:d9:19:33:44:28:5f:79:70:c5:6e:51:6c:6c:c7:
cb:d8:1a:27:c5:52:1a:0e:79:22:f9:61:64:5c:65:43:5d:91:
0d:90:cd:ca:92:bb:2d:2e:88:6a:d6:4b:16:d5:18:dc:32:e2:
07:5c:ba:24:bc:9f:37:ab:95:cc:77:65:65:0b:a0:5b:7d:49:
25:e6:ed:cb:f3:dc:28:84:9c:32:6e:fa:5c:07:a0:6a:11:17:
95:05:3e:05:ef:84:46:d3:16:c5:eb:c4:9d:d7:85:a3:0a:54:
59:77:a1:c6:01:36:73:fb:d5:9e:4f:71:df:7c:d7:3b:7f:cc:
2b:4e:26:7d:53:1c:1a:1a:7e:49:31:e2:eb:54:95:ce:c9:1e:
2f:aa:6b:55:23:a7:ce:11:6b:6a:d2:b8:52:c9:9e:81:24:d6:
65:99:61:27:6c:22:1a:c7:7e:9c:aa:93:7e:a4:bd:3b:7c:34:
77:3d:32:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:37:06 2026 by rpki-client