Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/e5vify-AokjiZ6kTt0W2bbxgaPI.roa
File: e5vify-AokjiZ6kTt0W2bbxgaPI.roa (raw, json)
Hash identifier: Wa/dm6wyQi4XS2R5a7Q4c/5ZdV7GxruUS2geewglCcs=
Subject key identifier: 7B:9B:E2:7F:2F:80:A2:48:E2:67:A9:13:B7:45:B6:6D:BC:60:68:F2
Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial: 01A0E7AF30570147DD0F85A1E88951515BA7
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/e5vify-AokjiZ6kTt0W2bbxgaPI.roa
Signing time: Mon 28 Sep 2026 11:03:33 +0000
ROA not before: Mon 28 Sep 2026 11:03:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 144.124.208.0/24 maxlen: 24
144.124.210.0/24 maxlen: 24
144.124.211.0/24 maxlen: 24
144.124.212.0/24 maxlen: 24
144.124.213.0/24 maxlen: 24
144.124.214.0/24 maxlen: 24
144.124.215.0/24 maxlen: 24
144.124.223.0/24 maxlen: 24
158.94.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:af:30:57:01:47:dd:0f:85:a1:e8:89:51:51:5b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Validity
Not Before: Sep 28 11:03:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b9be27f2f80a248e267a913b745b66dbc6068f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:34:8e:48:d6:a7:cb:84:63:4d:f5:4a:81:02:
3e:ef:27:ff:06:6d:ef:8a:5a:79:a8:eb:92:81:60:
6f:b0:83:b0:9e:f1:2d:cd:1c:50:a0:bd:9f:c6:b4:
c7:d8:92:11:4c:af:20:00:eb:09:84:b5:4a:fc:f8:
29:0f:33:43:76:5f:3f:8e:cf:ff:db:21:21:90:28:
c6:68:b1:aa:c9:6e:e8:56:42:94:c8:d2:99:d9:0c:
9b:7c:bf:03:d0:0c:02:2c:ec:75:2c:8a:d6:93:f3:
80:ad:bb:b9:ec:f0:27:ce:12:b1:1e:79:44:44:59:
62:01:f4:f4:1a:96:65:13:24:0d:16:11:b7:62:94:
3e:8b:76:c8:ef:72:66:db:c6:5b:c2:9b:6c:ac:bf:
ef:04:b9:28:08:5a:6e:f4:96:bb:b9:70:8c:5b:d2:
fc:86:d8:59:bc:18:8b:db:5b:11:d4:02:9d:d7:27:
42:fe:2f:63:39:b6:b6:ea:46:2f:e7:ff:f9:7d:e5:
8e:28:ae:a9:98:78:16:50:f7:16:67:72:df:69:29:
5e:53:77:e0:af:bd:35:86:0e:17:53:72:ca:38:98:
ab:77:79:ef:21:1e:ff:73:b4:95:a8:08:2e:15:60:
41:c5:0c:ea:29:1e:b1:18:84:d0:15:b4:a5:a6:56:
2b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9B:E2:7F:2F:80:A2:48:E2:67:A9:13:B7:45:B6:6D:BC:60:68:F2
X509v3 Authority Key Identifier:
keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/e5vify-AokjiZ6kTt0W2bbxgaPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.124.208.0/24
144.124.210.0-144.124.215.255
144.124.223.0/24
158.94.212.0/24
Signature Algorithm: sha256WithRSAEncryption
87:5e:d2:b4:4d:ad:90:e4:e0:ad:47:d3:db:2d:a2:a4:bc:c8:
df:77:bb:17:b5:63:94:04:79:b9:1e:b5:17:5e:cd:bc:40:13:
ac:eb:8c:35:cd:48:e5:66:1c:78:b0:49:19:f1:e9:02:13:56:
49:3f:11:0e:5d:e3:c3:ba:7d:7f:2f:0e:39:78:9e:06:d0:0d:
ee:35:83:6b:4d:69:87:bd:e6:8f:2a:3b:e4:a8:a7:85:fc:2c:
c2:22:ed:20:e2:65:54:dd:88:a9:02:5e:fe:af:f1:8b:15:c7:
40:82:26:d0:24:14:c4:df:df:8e:d6:39:38:06:02:47:8f:5b:
fc:34:2f:b0:c6:84:d3:d1:2a:e9:88:e7:6e:91:10:33:9f:dc:
dc:05:b6:75:17:3e:66:38:13:08:13:49:cb:22:c6:6b:33:4f:
3f:02:43:bd:77:ed:45:62:69:72:cd:61:67:2e:78:16:a1:d5:
d3:68:c9:a0:4a:ef:cd:84:f6:c1:a9:09:11:81:0b:e5:51:c6:
fb:45:53:6b:81:a4:c5:fc:91:f2:da:7d:1f:18:93:8c:fe:c7:
5d:0c:23:ba:ae:87:3d:cd:37:d3:25:36:f2:88:cd:d9:60:43:
05:48:32:b7:3b:c6:54:bf:8c:77:13:77:fa:d3:85:3b:0b:3d:
7a:ca:fb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:22:29 2026 by rpki-client