Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/x5Htn4i0apxn-dIRqpj4H4063K8.roa
File: x5Htn4i0apxn-dIRqpj4H4063K8.roa (raw, json)
Hash identifier: U53VekfQqJhTiyRwDGR9cKDjHdRVk6uSQJPEe/I+ROA=
Subject key identifier: C7:91:ED:9F:88:B4:6A:9C:67:F9:D2:11:AA:98:F8:1F:8D:3A:DC:AF
Certificate issuer: /CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Certificate serial: 01A057C264D0050F3E0951881B772EFFF3AC
Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/x5Htn4i0apxn-dIRqpj4H4063K8.roa
Signing time: Mon 31 Aug 2026 12:19:12 +0000
ROA not before: Mon 31 Aug 2026 12:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12703
IP address blocks: 185.71.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 18:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:c2:64:d0:05:0f:3e:09:51:88:1b:77:2e:ff:f3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Validity
Not Before: Aug 31 12:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c791ed9f88b46a9c67f9d211aa98f81f8d3adcaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bd:60:d0:16:0d:2c:8f:0a:01:8b:6f:46:13:
e4:a2:c8:3a:00:ff:c1:e8:6d:c5:d2:04:ce:f2:41:
0a:be:bf:fd:89:73:a4:0e:dc:f2:f8:b2:0e:47:91:
2c:92:5f:2a:aa:d7:41:bb:3b:c5:f5:9e:55:61:56:
e0:7d:29:58:2e:fc:dd:07:f8:11:ca:d2:b0:ff:c1:
ae:38:33:61:80:e0:2a:d4:31:e9:d2:80:d7:09:65:
09:d8:0b:b1:d5:95:48:7e:67:9b:67:e7:2e:d5:e4:
d4:83:45:ff:5c:74:57:67:38:3d:0c:76:25:d9:6f:
cc:96:9c:8b:24:5f:da:d2:cf:56:30:e0:f6:98:63:
f7:b8:24:55:ab:df:10:fd:cd:91:7d:52:c9:be:09:
28:c4:12:8f:f3:83:84:b8:f4:b4:87:b7:5a:25:85:
05:c8:1a:69:43:c6:2d:95:41:59:05:5a:15:7c:bd:
92:c6:ea:27:cb:f6:ad:69:6f:8c:47:3d:5f:7c:20:
68:eb:79:bb:a3:74:e3:f5:a0:b4:69:33:d5:a2:d6:
d6:4f:b9:c4:18:77:2a:6d:96:4a:94:d9:ff:f8:e9:
a6:f5:64:a4:07:b2:12:8b:38:38:fb:f8:1e:64:09:
3e:7f:d7:23:e9:b6:b0:44:fc:5e:78:14:d2:ef:d0:
e6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:91:ED:9F:88:B4:6A:9C:67:F9:D2:11:AA:98:F8:1F:8D:3A:DC:AF
X509v3 Authority Key Identifier:
keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/x5Htn4i0apxn-dIRqpj4H4063K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.100.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:c1:b2:35:b9:d8:10:9e:ff:7c:0a:62:60:92:d3:c8:93:41:
65:3e:cc:c8:21:fb:05:1f:51:3a:fc:2c:38:4e:a0:86:3c:a7:
ed:1d:6d:80:e3:a3:66:60:7b:ea:c9:ae:74:8b:c3:d1:99:ad:
be:4d:27:57:0e:41:38:62:03:43:5c:df:2d:91:56:5a:56:d6:
96:bc:73:97:35:19:ad:4d:37:6e:a6:6d:76:f4:42:f3:3c:7f:
6c:ec:5c:6f:1f:42:8c:14:c6:17:1b:84:8f:95:c8:aa:d2:e8:
5d:6b:ae:cb:73:2e:45:84:c3:d0:b6:ed:22:74:a5:0d:59:24:
d6:4c:d5:c5:02:08:e4:de:ee:8e:35:de:63:7c:e6:05:98:fe:
e3:20:4d:aa:32:0d:cd:cc:d5:ba:8b:a3:c9:77:b2:4f:4c:c5:
34:4d:14:45:47:2c:88:0a:cf:01:50:92:88:fc:c6:ac:fe:75:
9c:3e:23:42:ff:86:21:78:8b:b4:02:46:b0:04:41:ed:37:e7:
76:b2:1f:46:50:f3:dc:21:c0:1e:3e:e4:90:1c:66:c3:1a:c3:
a5:f8:b7:31:60:df:a4:45:3e:29:ab:01:dd:18:3f:e6:b0:ad:
14:96:1e:85:a5:a4:72:72:6e:e4:60:b5:dc:87:48:7b:b7:bd:
b9:04:30:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:27:47 2026 by rpki-client