Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/144eyzU15_7IM3-50Fn3yd-TPPE.roa
File: 144eyzU15_7IM3-50Fn3yd-TPPE.roa (raw, json)
Hash identifier: CG72Nchm10xuRr8f1Bb+XAZQZQ9cILYiGnedodDRgi0=
Subject key identifier: D7:8E:1E:CB:35:35:E7:FE:C8:33:7F:B9:D0:59:F7:C9:DF:93:3C:F1
Certificate issuer: /CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Certificate serial: 019E3B4D61EFAC2E8671C87E4D978D404B07
Authority key identifier: EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/144eyzU15_7IM3-50Fn3yd-TPPE.roa
Signing time: Mon 18 May 2026 13:36:27 +0000
ROA not before: Mon 18 May 2026 13:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199460
IP address blocks: 91.212.186.0/24 maxlen: 24
2a13:d800::/48 maxlen: 48
2a13:d800:1::/48 maxlen: 48
2a13:d800:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3b:4d:61:ef:ac:2e:86:71:c8:7e:4d:97:8d:40:4b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Validity
Not Before: May 18 13:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d78e1ecb3535e7fec8337fb9d059f7c9df933cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:86:43:9d:f9:41:c0:ec:1c:36:d7:b1:53:
00:b1:b4:72:6a:ee:5a:10:b2:40:5f:62:bb:44:c9:
d7:8c:f0:77:75:87:8f:a3:5b:c2:be:8e:41:d4:81:
12:02:cc:e3:6f:a1:47:a4:6f:b4:76:a6:f1:ef:40:
97:0d:b8:3d:1c:c2:60:e5:5e:0b:86:cd:20:d6:ca:
ec:70:2c:9c:45:b5:c0:ab:49:f1:ed:c5:d7:e0:17:
cc:1c:66:d4:8c:b2:ea:4d:fd:91:4f:6e:a4:67:81:
48:ea:c2:6e:16:78:49:79:a6:51:77:33:4e:27:db:
c3:db:64:b2:de:10:e0:1f:f2:e7:aa:40:22:60:1c:
22:a3:cb:75:0e:e6:4c:7a:e2:a9:24:6d:c0:8f:fe:
c9:3c:f4:25:ca:2f:b1:e5:05:e7:1f:33:f7:55:cb:
6d:76:d5:8f:d0:e2:db:bb:d5:58:bd:a7:7e:06:50:
2a:52:78:6a:aa:5a:42:31:68:33:d4:a7:a0:c0:e4:
af:40:5c:cf:e6:05:23:c6:ad:92:49:6f:f2:14:3a:
a1:4a:5a:ba:1c:27:4d:cc:e6:a7:e4:f7:ab:c3:46:
b0:bf:d8:b1:46:dc:c3:ee:6a:ad:32:4c:e2:a6:45:
dc:b7:b7:3f:a7:7b:5b:aa:75:3c:37:79:b7:6d:49:
50:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8E:1E:CB:35:35:E7:FE:C8:33:7F:B9:D0:59:F7:C9:DF:93:3C:F1
X509v3 Authority Key Identifier:
keyid:EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/144eyzU15_7IM3-50Fn3yd-TPPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.186.0/24
IPv6:
2a13:d800::-2a13:d800:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
35:7b:64:49:4f:ff:7b:a3:c3:ec:d9:c4:b3:71:5e:7a:27:83:
60:24:eb:51:97:c7:53:a6:89:4f:b4:96:c4:62:f9:d5:a5:7c:
3a:ab:fe:2e:3c:33:5c:d3:87:2c:3a:58:20:f3:bf:58:eb:53:
cf:b5:2c:5a:42:97:26:38:2a:04:d5:40:70:9c:b5:7e:e4:22:
c0:36:c0:6d:c1:7e:48:ed:fe:83:93:d6:9c:5a:e5:7e:43:11:
aa:97:97:ea:79:54:79:40:a7:65:85:2c:28:a3:38:cb:5c:5c:
47:25:95:56:d4:9e:74:43:18:3f:87:52:7a:3e:5e:b6:ac:53:
53:55:80:f3:a5:7f:ae:84:6f:96:cf:06:c4:d1:48:96:35:79:
31:63:49:b1:83:37:18:9e:6b:b6:85:ce:01:46:7b:cd:ae:0e:
bd:ee:a1:a8:f6:2b:05:22:19:62:38:27:16:6b:12:58:48:37:
34:91:72:e0:03:3c:18:99:04:c2:04:f4:f4:99:f1:e5:70:21:
6f:10:f8:7e:47:8c:dc:2d:75:78:0d:e5:49:73:44:d7:3f:44:
55:2d:b8:0b:da:80:52:24:ae:87:95:d8:98:93:b3:70:88:b4:
81:95:dc:45:ca:0b:92:33:a7:bc:8f:95:ea:41:42:29:8b:49:
2a:36:97:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:38:06 2026 by rpki-client