Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/eIdFh6Y2hgdzeMtjgTPa_J9JiIQ.roa
File: eIdFh6Y2hgdzeMtjgTPa_J9JiIQ.roa (raw, json)
Hash identifier: gOJ1QVyv1enp2QMYeZEi64KYRWZktKrcxHdJcaTNmH4=
Subject key identifier: 78:87:45:87:A6:36:86:07:73:78:CB:63:81:33:DA:FC:9F:49:88:84
Certificate issuer: /CN=c6749b22106615df1132ada519e9207092f2dbaa
Certificate serial: 019F236833922AF7DD3C9621FAC81E3DA9A5
Authority key identifier: C6:74:9B:22:10:66:15:DF:11:32:AD:A5:19:E9:20:70:92:F2:DB:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnSbIhBmFd8RMq2lGekgcJLy26o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/eIdFh6Y2hgdzeMtjgTPa_J9JiIQ.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35421
IP address blocks: 91.209.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnSbIhBmFd8RMq2lGekgcJLy26o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:33:92:2a:f7:dd:3c:96:21:fa:c8:1e:3d:a9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6749b22106615df1132ada519e9207092f2dbaa
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78874587a63686077378cb638133dafc9f498884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:7c:e0:bd:d8:55:e3:63:b0:25:af:4a:9a:
1f:16:58:a5:63:65:cf:86:4e:c3:39:9c:1e:7c:51:
f1:dc:ed:f1:b2:80:7e:58:ab:6e:d3:1e:4a:fb:00:
d7:ae:9b:9e:07:7b:30:c8:66:6b:bd:98:98:1e:f5:
42:a9:c9:7c:a1:dc:48:22:11:18:1f:96:b9:e0:9b:
06:96:d2:57:e1:54:22:72:1b:24:35:86:5e:ff:60:
51:09:e0:d9:10:ea:5a:a1:fd:9b:3e:c0:d2:bc:64:
01:5f:26:3a:8c:61:7f:99:2b:71:ee:c3:30:ee:2c:
bc:c0:de:c7:1a:c7:ff:67:36:79:5e:90:01:3f:71:
a9:48:50:85:b0:7d:fd:d2:d1:dd:7a:6e:5e:bb:b8:
3a:f5:f4:bf:98:b6:a7:93:26:72:09:20:76:88:f2:
80:f4:ad:5e:33:76:29:36:62:6d:6e:7c:6f:a1:a7:
ef:25:4c:7a:f8:8b:c8:4b:41:2a:ff:a7:0b:d4:c7:
c8:50:ef:cc:f8:f2:db:3f:84:9e:e5:33:9e:71:ce:
b4:37:52:e3:cb:ea:be:9a:7c:fc:ea:fd:a4:b4:94:
26:7b:62:66:1e:a0:0a:cf:57:75:42:1b:68:73:97:
a9:58:cd:40:f2:4c:74:3d:24:d9:0c:ae:0d:a5:d7:
ef:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:87:45:87:A6:36:86:07:73:78:CB:63:81:33:DA:FC:9F:49:88:84
X509v3 Authority Key Identifier:
keyid:C6:74:9B:22:10:66:15:DF:11:32:AD:A5:19:E9:20:70:92:F2:DB:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnSbIhBmFd8RMq2lGekgcJLy26o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/eIdFh6Y2hgdzeMtjgTPa_J9JiIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/xnSbIhBmFd8RMq2lGekgcJLy26o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.13.0/24
Signature Algorithm: sha256WithRSAEncryption
36:e0:11:c1:2c:66:b2:10:92:0b:a0:a9:0f:9a:7b:61:60:0f:
3c:50:e8:db:e0:ba:a0:ac:2a:0c:8e:91:7e:c0:8a:cd:50:73:
9b:c1:d5:c6:65:c0:4c:89:eb:bf:29:9b:ae:d1:75:98:44:5d:
0c:78:9b:86:ec:27:93:1b:4b:c7:24:79:4d:f7:13:5e:65:dd:
9d:c4:bc:5e:68:e5:40:af:53:e1:77:d2:60:02:d8:98:b8:4e:
3b:67:c0:3f:cf:93:ab:70:5f:d7:f3:ae:ab:ab:52:9d:54:af:
05:93:3d:59:71:5c:5b:b2:70:0e:d6:85:ae:64:02:2f:90:cf:
4e:75:71:9b:c4:b0:03:6d:87:5c:eb:b5:ef:95:00:55:59:45:
ca:c8:e6:b8:29:f2:17:f4:34:f3:0d:0c:81:b8:88:12:e8:22:
48:d3:d6:81:fb:a9:1b:ed:82:9b:34:21:75:5c:ad:7f:85:69:
49:48:2d:3b:11:cd:14:b0:96:6c:9b:8c:34:79:a2:63:24:85:
55:24:44:d7:80:84:ed:71:df:97:4c:ea:3a:a8:d2:21:58:fb:
21:ad:3c:a6:fd:54:ea:44:af:cc:ea:84:f5:4c:1b:ee:3c:95:
c1:fe:c8:57:bb:1f:29:ad:67:11:5f:86:48:d1:fa:ed:89:b4:
c5:02:8f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:48:58 2026 by rpki-client