Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/eXRIwecWvVcnFdwMz1QmBrjc6DY.roa
File: eXRIwecWvVcnFdwMz1QmBrjc6DY.roa (raw, json)
Hash identifier: v3I6uudSuDbk12Y8qzr+SjW1azpK3cnQafVSMOfvo60=
Subject key identifier: 79:74:48:C1:E7:16:BD:57:27:15:DC:0C:CF:54:26:06:B8:DC:E8:36
Certificate issuer: /CN=e720f037f8964cb5a379f5df81baf8f77382f33a
Certificate serial: 019F23686F8186CE3F84AF262915F2621E90
Authority key identifier: E7:20:F0:37:F8:96:4C:B5:A3:79:F5:DF:81:BA:F8:F7:73:82:F3:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yDwN_iWTLWjefXfgbr493OC8zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/eXRIwecWvVcnFdwMz1QmBrjc6DY.roa
Signing time: Thu 02 Jul 2026 15:17:54 +0000
ROA not before: Thu 02 Jul 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49014
IP address blocks: 194.107.232.0/21 maxlen: 21
194.107.240.0/21 maxlen: 21
2001:67c:2c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/5yDwN_iWTLWjefXfgbr493OC8zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/5yDwN_iWTLWjefXfgbr493OC8zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5yDwN_iWTLWjefXfgbr493OC8zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6f:81:86:ce:3f:84:af:26:29:15:f2:62:1e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e720f037f8964cb5a379f5df81baf8f77382f33a
Validity
Not Before: Jul 2 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=797448c1e716bd572715dc0ccf542606b8dce836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:78:93:15:36:f1:86:52:24:32:1c:99:24:52:
aa:e5:03:58:ea:42:37:8e:28:b1:79:64:06:27:e0:
ec:98:fe:f2:e6:eb:b6:d0:f6:c6:1c:8a:47:9b:dd:
d0:f5:be:eb:32:f2:62:02:63:0c:7a:bb:ab:e9:42:
e5:0e:7a:e0:66:5d:26:44:0e:22:20:e0:d4:d2:4d:
04:09:61:65:3f:2b:73:49:94:0e:65:76:4b:81:93:
66:ba:05:b5:7c:49:79:98:50:d6:25:5c:a7:84:19:
a2:13:d8:af:38:3b:65:27:91:c0:38:08:f7:f1:fd:
29:d4:f2:69:32:58:27:0a:b3:b0:13:96:cc:08:1e:
c3:18:b4:e0:b3:59:c6:77:b9:89:8d:ca:01:71:14:
9b:c9:bc:06:0b:3d:67:84:ba:e2:28:95:97:5e:af:
2a:0b:c5:90:dc:c8:0c:c6:83:4d:61:5e:54:ce:29:
40:d5:38:c5:3c:d1:66:c6:9c:4f:61:8a:a6:48:94:
40:06:5e:b5:69:76:c5:6f:88:e3:08:4e:a8:d9:1b:
dd:51:ee:c3:7b:39:4d:80:f8:66:10:b3:cb:78:23:
6b:04:4c:3a:ad:44:1b:53:3f:01:3e:0e:54:16:9a:
c3:92:03:f7:20:e2:41:a6:01:29:3f:70:02:cd:c1:
53:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:74:48:C1:E7:16:BD:57:27:15:DC:0C:CF:54:26:06:B8:DC:E8:36
X509v3 Authority Key Identifier:
keyid:E7:20:F0:37:F8:96:4C:B5:A3:79:F5:DF:81:BA:F8:F7:73:82:F3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yDwN_iWTLWjefXfgbr493OC8zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/eXRIwecWvVcnFdwMz1QmBrjc6DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/5yDwN_iWTLWjefXfgbr493OC8zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.232.0-194.107.247.255
IPv6:
2001:67c:2c0::/48
Signature Algorithm: sha256WithRSAEncryption
77:28:d2:0c:d7:5d:46:95:80:3e:c7:81:37:93:5c:3d:cf:1d:
37:eb:83:c6:12:9c:dc:81:38:6e:e0:32:4d:5a:a1:0f:0e:27:
43:0c:29:f1:c8:d3:d6:25:79:85:29:ec:41:b4:d9:e9:66:46:
ca:72:ef:92:9f:88:96:1e:e0:6d:63:21:3f:c1:80:33:b8:34:
7c:8f:fc:53:90:5a:69:e9:b8:3c:2e:d1:6a:13:43:95:07:5d:
67:f7:94:0a:74:e2:7a:6a:63:24:1a:c9:dc:a0:7f:df:84:92:
5f:63:4f:d4:a2:58:26:b6:25:58:fd:2d:5f:b5:22:4a:92:93:
0b:5c:c3:2e:4a:30:5a:b4:ed:09:32:9b:4b:77:f6:7d:20:33:
ed:f3:8f:62:00:21:76:49:5b:35:e2:5f:fa:9f:ed:60:eb:ef:
3c:26:60:5a:ca:1c:64:70:af:35:20:5d:1d:dc:90:e8:23:84:
30:b6:81:80:5c:8d:22:40:81:da:92:34:de:5a:38:de:db:38:
6c:b1:b7:ba:ee:79:3e:04:1c:ff:6c:33:e4:7a:51:c0:2b:59:
5d:73:99:9e:40:ce:6a:e5:1a:12:18:11:13:cc:8b:67:2e:28:
53:aa:2c:15:ea:ba:e9:e8:a2:f0:58:e5:e8:0e:91:b7:49:b7:
a8:26:55:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:15 2026 by rpki-client