Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/N-Sdq5OOC6qg3Yo7EYuyULZcZFc.roa
File: N-Sdq5OOC6qg3Yo7EYuyULZcZFc.roa (raw, json)
Hash identifier: 6sw14/gkOvHxoOy3kFLe5erZX/etKXB1hfy7LL5FcYQ=
Subject key identifier: 37:E4:9D:AB:93:8E:0B:AA:A0:DD:8A:3B:11:8B:B2:50:B6:5C:64:57
Certificate issuer: /CN=eaeea20bbbdb9a5d1cdc7114e2af518e76b1426e
Certificate serial: 019F33E6AE8A71E22688F8AB73753599380D
Authority key identifier: EA:EE:A2:0B:BB:DB:9A:5D:1C:DC:71:14:E2:AF:51:8E:76:B1:42:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/N-Sdq5OOC6qg3Yo7EYuyULZcZFc.roa
Signing time: Sun 05 Jul 2026 20:09:43 +0000
ROA not before: Sun 05 Jul 2026 20:09:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209223
IP address blocks: 2.57.12.0/24 maxlen: 24
2.57.13.0/24 maxlen: 24
2.57.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:33:e6:ae:8a:71:e2:26:88:f8:ab:73:75:35:99:38:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaeea20bbbdb9a5d1cdc7114e2af518e76b1426e
Validity
Not Before: Jul 5 20:09:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37e49dab938e0baaa0dd8a3b118bb250b65c6457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:1d:f7:f3:7a:7f:98:2f:c2:ff:11:70:ff:
43:5d:2a:e8:7a:d9:a6:45:bf:7d:c1:d2:c9:49:da:
a5:f7:18:bb:7f:b3:82:ac:a4:17:0b:de:c6:8c:b2:
09:42:2d:49:f2:4b:48:9c:c0:2c:b5:46:5c:5b:b3:
b7:b5:67:4e:bf:64:66:60:c2:7e:2f:6a:7a:36:8e:
db:2e:a0:c4:bb:9e:09:4f:74:43:98:1a:4c:13:b4:
e5:9b:b0:6a:51:f9:b7:41:e4:4e:ab:24:01:b7:0f:
15:18:ea:e0:06:15:b5:45:35:c8:54:e6:58:b2:ac:
17:29:60:65:bd:94:d5:06:70:88:01:7e:75:e9:14:
55:98:f3:be:62:6b:36:0c:8c:83:2a:35:7d:c3:68:
f2:02:e4:d0:15:3c:97:67:4e:14:d9:44:e9:70:a5:
2d:5a:ec:7b:f0:93:de:d3:9a:67:e2:fa:24:1a:27:
25:57:44:33:0e:ce:2c:3a:05:8a:8b:71:64:95:f5:
13:9a:12:59:77:92:f4:3f:6f:23:f2:9f:35:47:e8:
11:c5:1c:1a:b1:c7:12:92:42:26:8a:fa:fb:54:70:
eb:c0:8e:17:6a:88:2d:69:73:4a:13:c9:be:57:85:
2f:36:2f:92:fd:2c:d7:78:77:b4:4b:90:81:b1:59:
87:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E4:9D:AB:93:8E:0B:AA:A0:DD:8A:3B:11:8B:B2:50:B6:5C:64:57
X509v3 Authority Key Identifier:
keyid:EA:EE:A2:0B:BB:DB:9A:5D:1C:DC:71:14:E2:AF:51:8E:76:B1:42:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/N-Sdq5OOC6qg3Yo7EYuyULZcZFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.12.0-2.57.14.255
Signature Algorithm: sha256WithRSAEncryption
68:74:98:28:e0:f8:d4:fe:22:4d:9c:ee:b7:1d:69:90:7b:67:
12:f6:49:50:7c:04:cb:c9:62:cb:64:c9:72:e8:16:7d:41:c8:
4e:af:cd:c4:f4:24:5a:a3:dc:4e:96:c9:83:79:51:46:6f:59:
c5:d3:8d:b7:9d:13:65:13:55:04:3d:59:bf:5e:70:ad:3f:db:
35:2e:d8:7b:82:1c:4b:e1:37:13:ed:f5:6e:d7:1c:9b:69:05:
f5:57:a1:bf:1e:c7:99:ca:55:21:2a:ad:45:6d:60:df:ba:cd:
77:18:f1:80:d4:cc:3c:66:e3:fb:cb:d7:1b:ee:07:a9:17:89:
2a:d4:e5:61:4e:86:2d:10:4e:b6:cb:28:b9:cc:77:56:2b:f3:
74:5c:eb:a1:88:2d:4c:2f:b0:f1:7d:e0:08:6c:55:f5:45:0f:
54:c6:8c:67:f9:29:3d:e4:a2:b2:42:b2:99:35:7b:13:19:2c:
c7:be:be:5e:53:6e:02:99:57:16:09:0d:00:70:0d:cd:ff:aa:
63:8e:a5:f0:3e:ad:b2:85:50:d5:ce:28:3b:25:2b:e5:67:bf:
77:fb:72:35:a5:09:a2:b0:0a:d5:34:22:64:dd:cd:6a:39:12:
5d:46:2e:5a:7e:2e:f1:02:b4:e5:43:86:52:07:54:18:e9:39:
e3:eb:08:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:15:53 2026 by rpki-client