Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/1eat7kVhwI0NF9zmp-ZLW6D-Q6s.roa
File: 1eat7kVhwI0NF9zmp-ZLW6D-Q6s.roa (raw, json)
Hash identifier: At/ZGdd0XmXuG3jDN8HqWqYTXTdIe4QBW/whXsaVYX4=
Subject key identifier: D5:E6:AD:EE:45:61:C0:8D:0D:17:DC:E6:A7:E6:4B:5B:A0:FE:43:AB
Certificate issuer: /CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Certificate serial: 01A085A87FBE8E45FB692F878997A0A7B37B
Authority key identifier: E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/1eat7kVhwI0NF9zmp-ZLW6D-Q6s.roa
Signing time: Wed 09 Sep 2026 10:13:27 +0000
ROA not before: Wed 09 Sep 2026 10:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204767
IP address blocks: 87.192.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:a8:7f:be:8e:45:fb:69:2f:87:89:97:a0:a7:b3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Validity
Not Before: Sep 9 10:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5e6adee4561c08d0d17dce6a7e64b5ba0fe43ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3f:de:10:6f:a3:4d:cd:c3:d9:31:a7:61:b3:
f0:d3:b0:88:74:fb:fc:7b:b9:99:7c:a9:37:ab:12:
7c:25:a6:96:90:5e:47:73:5c:b7:34:0a:7d:d4:e8:
02:92:dc:38:ff:36:70:9b:06:e8:f1:4f:03:9a:e0:
f0:a6:7c:42:76:40:9a:a4:76:c1:a3:bd:00:86:c1:
6e:6f:5d:82:c8:f3:0c:6a:9a:a6:d2:8f:6c:0c:dc:
8c:af:2c:32:69:c5:12:16:7b:8c:db:69:6a:51:06:
4c:d3:af:6d:62:20:0c:32:7d:7b:07:58:7c:59:f1:
65:1a:b6:db:c3:25:14:94:62:05:36:a0:75:be:97:
3c:c8:d6:06:60:3b:4a:fd:13:6c:02:69:16:b7:ac:
db:8e:15:d5:f4:03:0f:b1:31:c1:70:e6:01:ca:f7:
e6:86:08:20:2c:c6:f2:fb:b2:77:0e:9c:e5:74:9c:
e3:15:e8:67:1c:95:6b:64:5d:9e:b1:af:a6:c8:ab:
a7:4b:55:6e:e7:e3:21:8e:7f:8c:15:3a:da:ab:85:
01:76:0a:18:fc:c2:73:13:c4:6c:c0:56:d7:b6:ac:
62:1b:d3:25:4e:ad:64:a7:7a:e0:bd:b6:6b:e6:42:
9c:47:e5:1e:63:0e:91:22:68:2b:86:9a:70:e5:28:
0d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E6:AD:EE:45:61:C0:8D:0D:17:DC:E6:A7:E6:4B:5B:A0:FE:43:AB
X509v3 Authority Key Identifier:
keyid:E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/1eat7kVhwI0NF9zmp-ZLW6D-Q6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.40.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:2c:0e:b6:fa:ce:94:da:ff:61:5c:ff:17:63:93:35:59:93:
36:42:1f:7a:85:ed:90:31:21:1c:99:23:ec:41:f7:5f:bd:d9:
70:16:90:5e:c2:08:f7:18:92:b3:c3:9e:f4:0d:86:21:ec:cd:
3f:c8:db:3d:bc:97:bd:db:60:86:19:cf:ae:b6:16:cc:a9:f9:
c2:ad:d4:dc:7e:16:80:83:b7:97:68:98:84:24:86:19:e2:3d:
37:5d:56:9d:38:dd:82:55:00:cb:cd:51:1b:64:b2:0e:53:1a:
52:fc:30:8b:19:50:ad:ff:ce:48:a8:2d:9f:c3:66:3e:83:83:
5a:71:33:66:ee:00:1c:a2:29:e4:42:62:6c:d9:64:31:0c:be:
77:9e:ec:2c:9e:ae:44:57:f1:cb:b7:d4:b5:25:71:39:3b:02:
31:5d:57:7c:f0:c6:1f:70:cd:73:ca:39:d0:15:77:5f:25:2f:
e9:d7:17:20:51:93:dd:ac:aa:35:ac:2f:46:f0:ff:f8:76:fa:
a1:64:94:96:d9:e5:d6:6b:c0:65:0a:f7:57:2a:d9:a9:3a:36:
5e:36:8c:c6:cc:0d:bf:2e:9d:70:8f:69:4c:54:2a:a4:06:e4:
72:51:ff:7e:50:27:a1:99:d7:87:9b:bc:35:af:fe:29:a3:0e:
01:a3:2d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:42:13 2026 by rpki-client