Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/3iYvgJ_eTlUQ-O3G1juF5EdX47M.roa
File: 3iYvgJ_eTlUQ-O3G1juF5EdX47M.roa (raw, json)
Hash identifier: cQV4nw2YNAHZleBjiJhNysmR6KlbphemL85k3lR/q4I=
Subject key identifier: DE:26:2F:80:9F:DE:4E:55:10:F8:ED:C6:D6:3B:85:E4:47:57:E3:B3
Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial: 019E0D1629763A2BBC6B74A7A26056445D10
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/3iYvgJ_eTlUQ-O3G1juF5EdX47M.roa
Signing time: Sat 09 May 2026 14:13:36 +0000
ROA not before: Sat 09 May 2026 14:13:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48789
IP address blocks: 2.57.8.0/23 maxlen: 23
185.179.57.0/24 maxlen: 24
193.104.229.0/24 maxlen: 24
2a12:6cc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0d:16:29:76:3a:2b:bc:6b:74:a7:a2:60:56:44:5d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Validity
Not Before: May 9 14:13:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de262f809fde4e5510f8edc6d63b85e44757e3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:39:4d:0f:74:58:b3:0b:3f:03:96:8c:02:5b:
93:99:13:80:ae:09:63:f9:3e:35:3e:32:6f:25:54:
07:3d:a9:01:17:cb:5e:bf:b6:d7:17:ee:36:d3:5e:
aa:14:dc:e9:d8:58:00:56:b9:7b:98:18:1d:b6:d9:
21:76:81:db:fb:e2:45:de:36:15:81:4c:45:80:13:
53:a4:06:2b:dd:12:1c:a9:83:7a:35:57:ab:e9:0e:
d7:71:d4:6e:7d:49:b5:2b:f6:4c:2c:92:4c:d0:5e:
9d:36:c5:30:cf:c9:11:ea:73:92:26:d1:ba:28:ca:
37:c5:43:e2:6b:a7:d3:1d:5d:bf:fb:c5:38:39:b7:
c1:f6:8c:2e:8b:c5:1a:78:50:dc:4b:d2:4e:9c:f2:
4b:c2:46:f1:d0:5b:1d:09:97:01:fa:56:1e:7e:60:
50:43:6e:a3:8e:2e:9d:ca:ea:af:d5:bb:6b:09:40:
25:4b:f1:ba:eb:38:aa:e1:93:0f:5a:59:17:f8:ea:
4a:79:ac:ef:53:77:0c:79:97:3f:af:f8:9f:b1:38:
46:c6:15:3a:57:e4:59:e9:12:83:05:15:42:cf:ec:
53:36:a2:70:5b:3d:ec:89:e9:f9:63:b4:2e:53:90:
d2:28:1f:73:6c:2b:74:94:a0:e1:49:12:84:3b:96:
07:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:26:2F:80:9F:DE:4E:55:10:F8:ED:C6:D6:3B:85:E4:47:57:E3:B3
X509v3 Authority Key Identifier:
keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/3iYvgJ_eTlUQ-O3G1juF5EdX47M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.8.0/23
185.179.57.0/24
193.104.229.0/24
IPv6:
2a12:6cc0::/32
Signature Algorithm: sha256WithRSAEncryption
c4:ff:e6:7c:ab:4b:af:b2:36:52:a2:9d:4a:18:a5:7f:36:26:
57:82:33:eb:40:22:c2:15:55:90:a1:1c:f8:89:67:44:cb:62:
4d:bf:fa:4e:ca:d4:16:7f:36:06:8b:f6:c1:d8:f2:cd:5b:8c:
be:47:2c:60:3a:32:5a:90:fb:6d:72:e1:0f:c1:59:7a:13:7c:
7b:03:57:f6:2a:06:2a:05:3a:cf:15:43:ef:12:c9:4f:ee:85:
52:47:aa:c1:36:af:62:3c:f5:5b:9e:84:9d:6c:b8:28:9a:55:
0b:84:ef:46:7a:79:9b:5d:dd:17:1a:04:f5:ad:e0:7a:b6:de:
53:45:d1:eb:58:ed:74:24:31:bb:4b:f6:7f:fc:c7:76:ec:1a:
6a:13:30:61:63:75:ed:93:67:9d:c9:4c:24:42:84:ed:1e:6c:
62:59:a5:37:3a:e2:d1:68:38:1b:4e:24:78:9c:59:66:2f:4f:
28:87:25:41:89:92:b3:6d:f2:ce:41:01:fd:52:e7:54:ed:9e:
de:7f:ba:65:32:fe:90:fd:6b:0c:af:25:9c:53:e4:be:61:ab:
fd:1d:eb:ee:d4:49:f1:17:74:11:75:f7:08:ff:86:8e:f7:a7:
b0:71:0c:75:5a:3b:77:bc:e4:81:ee:90:e9:8c:ff:51:bf:30:
2a:f6:e1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:38 2026 by rpki-client