Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/e1xA0qhf12TewPpcKPwlaOmYujs.roa
File: e1xA0qhf12TewPpcKPwlaOmYujs.roa (raw, json)
Hash identifier: pWg+B28ely4ojEbsJr2wJT+gJj9a3mD2eiLdX2BcKiE=
Subject key identifier: 7B:5C:40:D2:A8:5F:D7:64:DE:C0:FA:5C:28:FC:25:68:E9:98:BA:3B
Certificate issuer: /CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Certificate serial: 019D76854B2B4CF88D5D3BFB8484A75263AD
Authority key identifier: EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/e1xA0qhf12TewPpcKPwlaOmYujs.roa
Signing time: Fri 10 Apr 2026 08:32:20 +0000
ROA not before: Fri 10 Apr 2026 08:32:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199460
IP address blocks: 91.212.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:85:4b:2b:4c:f8:8d:5d:3b:fb:84:84:a7:52:63:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Validity
Not Before: Apr 10 08:32:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b5c40d2a85fd764dec0fa5c28fc2568e998ba3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:44:44:43:4c:c2:4d:a5:4d:0d:20:37:5b:
e8:34:7f:c5:d9:e1:04:3a:07:fb:2d:38:f7:f2:82:
34:b5:dc:2c:31:e0:cf:98:70:0f:0c:63:cb:aa:1d:
4c:4a:9c:6f:34:2e:3c:05:6d:5a:9c:58:e0:a3:64:
b6:ba:c1:b5:45:e9:e5:b7:8b:02:f8:0b:00:33:fe:
f2:35:d0:4a:db:57:08:64:62:ad:bd:ae:c0:92:49:
af:79:f4:15:9f:8c:77:e5:a4:86:8a:e3:e7:5f:88:
7a:f1:cc:db:64:e1:70:15:28:0c:25:3f:8d:47:85:
7f:f2:59:36:9c:99:51:a9:12:45:4a:5b:55:01:76:
63:cd:7e:67:73:59:8e:9c:f0:a2:5b:25:29:56:99:
2b:6a:23:68:78:23:31:ae:1f:14:52:18:23:40:ba:
0f:b7:bb:97:0b:a9:58:ae:d2:0b:55:5b:47:da:a8:
1e:fa:e3:b5:f0:b5:a2:3d:8a:96:72:e0:52:15:36:
40:90:a3:37:c0:9d:17:39:4f:e9:45:fd:98:00:bb:
d1:b5:bd:9b:fc:91:07:a4:98:3f:aa:09:b7:c6:d2:
c5:37:b7:84:5d:e8:6d:6b:fa:39:1f:39:bf:57:05:
e2:56:76:08:e3:a6:4e:19:2e:72:a5:a4:31:e9:a4:
b3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5C:40:D2:A8:5F:D7:64:DE:C0:FA:5C:28:FC:25:68:E9:98:BA:3B
X509v3 Authority Key Identifier:
keyid:EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/e1xA0qhf12TewPpcKPwlaOmYujs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.186.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:c3:3f:2a:31:a0:7f:57:9a:97:af:92:3e:5e:a8:19:73:e3:
2e:7f:f8:49:97:09:7d:bd:21:bc:ab:f4:97:d4:8d:df:3d:00:
f7:47:a8:2b:dd:dc:0f:db:4f:84:64:28:00:3f:45:8b:7b:80:
07:ad:35:57:9b:9d:c7:8b:aa:1d:aa:2f:10:75:bf:a7:7b:d6:
69:af:2e:40:7d:30:ea:20:ec:07:6d:76:72:78:7f:b3:53:27:
c2:1d:44:74:42:d9:81:f2:cd:c5:ba:2b:8d:42:96:be:91:2a:
77:b4:b6:1a:ab:97:fa:5a:61:a0:7e:2b:ac:6a:08:e0:a0:46:
47:99:72:14:ad:90:f3:b7:cd:0d:35:51:da:10:e3:63:25:45:
91:65:f3:e4:88:1e:20:d1:f3:2d:b5:ca:76:51:68:c9:24:fc:
4e:66:24:0e:6b:3f:77:3b:16:5c:12:13:00:dc:98:f7:5e:83:
2b:72:8c:47:45:2a:02:6a:bf:cf:3a:4e:18:aa:a1:ec:e9:af:
13:1f:3b:1e:af:44:08:c5:fb:db:71:aa:b2:52:84:b8:04:56:
21:90:05:35:bc:2e:d1:95:80:3d:f2:02:e1:95:88:a5:a7:c6:
46:4a:4f:8b:4e:80:d0:81:4b:1f:aa:84:b4:cf:ec:1e:94:76:
1d:83:82:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ12hUsrTPiNXTv7hISnUmOtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhODcwMTI3MTZiNjZlZTgyMjY0MmMyZjBhMWI5MDE0OGI1
YzdiMjkwHhcNMjYwNDEwMDgzMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjVjNDBkMmE4NWZkNzY0ZGVjMGZhNWMyOGZjMjU2OGU5OThiYTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT5ERENMwk2lTQ0gN1voNH/F2eEE
Ogf7LTj38oI0tdwsMeDPmHAPDGPLqh1MSpxvNC48BW1anFjgo2S2usG1Renlt4sC
+AsAM/7yNdBK21cIZGKtva7AkkmvefQVn4x35aSGiuPnX4h68czbZOFwFSgMJT+N
R4V/8lk2nJlRqRJFSltVAXZjzX5nc1mOnPCiWyUpVpkraiNoeCMxrh8UUhgjQLoP
t7uXC6lYrtILVVtH2qge+uO18LWiPYqWcuBSFTZAkKM3wJ0XOU/pRf2YALvRtb2b
/JEHpJg/qgm3xtLFN7eEXehta/o5Hzm/VwXiVnYI46ZOGS5ypaQx6aSzkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHtcQNKoX9dk3sD6XCj8JWjpmLo7MB8GA1UdIwQY
MBaAFOqHAScWtm7oImQsLwobkBSLXHspMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm9jQkp4YTJidWdpWkN3dkNodVFGSXRjZXlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS83MjlmY2QtNzA0Yi00MDgxLThkMjUt
YzlmZjFlZTZhZDk1LzEvZTF4QTBxaGYxMlRld1BwY0tQd2xhT21ZdWpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS83MjlmY2QtNzA0Yi00MDgxLThkMjUtYzlmZjFlZTZhZDk1
LzEvNm9jQkp4YTJidWdpWkN3dkNodVFGSXRjZXlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9S6MA0G
CSqGSIb3DQEBCwUAA4IBAQDKwz8qMaB/V5qXr5I+XqgZc+Muf/hJlwl9vSG8q/SX
1I3fPQD3R6gr3dwP20+EZCgAP0WLe4AHrTVXm53Hi6odqi8Qdb+ne9Zpry5AfTDq
IOwHbXZyeH+zUyfCHUR0QtmB8s3FuiuNQpa+kSp3tLYaq5f6WmGgfiusagjgoEZH
mXIUrZDzt80NNVHaEONjJUWRZfPkiB4g0fMttcp2UWjJJPxOZiQOaz93OxZcEhMA
3Jj3XoMrcoxHRSoCar/POk4YqqHs6a8THzser0QIxfvbcaqyUoS4BFYhkAU1vC7R
lYA98gLhlYilp8ZGSk+LToDQgUsfqoS0z+welHYdg4J3
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:19 2026 by rpki-client