Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/Esustr-nKce0GYWSsdcq1S7FWqk.roa
File: Esustr-nKce0GYWSsdcq1S7FWqk.roa (raw, json)
Hash identifier: 2zstjXpc+hHGR68Drzr0jQj4a47IKNLiUrHDnn0u3wk=
Subject key identifier: 12:CB:AC:B6:BF:A7:29:C7:B4:19:85:92:B1:D7:2A:D5:2E:C5:5A:A9
Certificate issuer: /CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
Certificate serial: 019F846142A74797D526D9E394CFE13E4DB4
Authority key identifier: 17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/Esustr-nKce0GYWSsdcq1S7FWqk.roa
Signing time: Tue 21 Jul 2026 11:13:14 +0000
ROA not before: Tue 21 Jul 2026 11:13:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10753
IP address blocks: 185.66.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:61:42:a7:47:97:d5:26:d9:e3:94:cf:e1:3e:4d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
Validity
Not Before: Jul 21 11:13:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12cbacb6bfa729c7b4198592b1d72ad52ec55aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:31:62:57:a7:cd:03:48:1b:1e:fd:ef:37:30:
db:76:a5:12:87:25:57:42:4c:4b:75:ee:6e:03:91:
45:20:16:97:9b:be:b3:c8:f5:9a:63:96:40:2d:a8:
ca:6c:cd:d9:05:8a:9a:4f:be:70:8b:c3:66:a9:f9:
ba:ef:d6:4e:14:f7:79:60:f5:4f:bd:a9:5a:98:22:
00:8e:7e:28:4e:8c:68:19:00:94:55:1a:13:00:67:
61:de:15:ab:5d:bc:28:d0:f6:18:40:44:72:7a:fe:
61:12:69:49:04:39:8d:b2:b2:19:b1:6d:fa:e7:52:
c8:cb:bd:16:0c:ef:ce:a4:a1:69:42:55:b1:2b:70:
28:15:01:38:28:b1:e9:64:26:b0:ca:c2:57:1c:e6:
4d:80:c5:8d:2e:8d:28:1e:ba:eb:0a:33:bc:65:b0:
d6:3c:8c:7d:f4:03:d8:e7:c5:f3:4a:db:f2:55:dc:
c6:a6:6d:4b:ef:d2:d5:a0:bc:68:ce:ad:50:c8:78:
13:18:5d:53:76:9e:5c:4c:15:57:da:7d:f7:ce:71:
7b:dd:6e:83:8b:48:63:9d:69:3e:c2:1d:ef:00:16:
09:11:12:00:77:29:ce:12:4d:94:32:35:c3:b3:e3:
5d:90:c8:8d:c5:4e:20:cb:0b:5f:58:31:79:79:1c:
8c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CB:AC:B6:BF:A7:29:C7:B4:19:85:92:B1:D7:2A:D5:2E:C5:5A:A9
X509v3 Authority Key Identifier:
keyid:17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/Esustr-nKce0GYWSsdcq1S7FWqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.212.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a2:23:53:4d:c0:55:be:b4:96:3a:55:2a:b8:be:68:7a:eb:
69:e3:43:ca:4f:e9:5f:9e:bb:b0:bf:92:ba:eb:0d:e2:94:eb:
91:f7:f9:cf:e4:22:51:51:48:b4:32:ac:73:6a:2e:4e:93:67:
80:46:1f:18:0d:45:21:59:61:96:01:80:f6:ff:30:ef:e2:04:
5e:7d:1f:8d:de:91:12:85:fc:93:19:1e:76:4d:45:39:30:c8:
b3:55:3b:c3:ff:75:96:9a:d1:20:5e:6e:ea:ee:13:a6:1e:d0:
ff:e0:01:63:b7:bd:7a:40:9a:2f:69:76:1e:bf:96:35:32:d0:
29:af:e7:4e:55:85:c4:3d:98:66:ca:5d:52:9b:d4:06:da:90:
98:d9:00:93:83:23:d4:42:f0:0b:92:76:1c:1e:56:09:63:f5:
79:c2:80:31:62:32:2f:ba:ca:0e:3e:cd:d5:24:47:61:a9:29:
7c:a3:29:10:7e:2c:de:b2:2a:de:20:7a:69:69:bc:37:68:1e:
b3:46:98:8f:7e:2a:7f:9e:e6:1c:6b:7f:27:27:2e:f3:f4:ae:
b4:99:cc:4e:0f:a0:f9:c3:2d:76:df:4d:61:e9:52:11:2a:f0:
21:b7:cd:3c:c2:8c:c5:09:9e:e0:1b:4e:08:03:db:a9:15:0f:
d4:ac:47:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:56 2026 by rpki-client