Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/ePY7pKo_r6F5r4kushtbD4C6B8c.roa
File: ePY7pKo_r6F5r4kushtbD4C6B8c.roa (raw, json)
Hash identifier: OOhXQHhG608Rk4uBCg7UcjZxEcLM+GjApQwGOTyy+Xk=
Subject key identifier: 78:F6:3B:A4:AA:3F:AF:A1:79:AF:89:2E:B2:1B:5B:0F:80:BA:07:C7
Certificate issuer: /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial: 01A07F81FC6C5AECD5DEEA1A094A65097868
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/ePY7pKo_r6F5r4kushtbD4C6B8c.roa
Signing time: Tue 08 Sep 2026 05:33:40 +0000
ROA not before: Tue 08 Sep 2026 05:33:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213476
IP address blocks: 199.244.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:81:fc:6c:5a:ec:d5:de:ea:1a:09:4a:65:09:78:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Validity
Not Before: Sep 8 05:33:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78f63ba4aa3fafa179af892eb21b5b0f80ba07c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:86:8c:44:1a:34:dc:7b:d8:40:b8:12:ee:
fd:71:68:5c:6b:d9:68:40:0d:88:20:2d:0a:9a:73:
2a:2d:58:08:72:ce:87:ce:2a:c6:c0:46:c6:f2:9a:
1e:60:8b:2b:5f:68:f1:51:76:27:e6:00:9a:09:e0:
01:d7:de:fb:4c:c1:bf:09:e9:96:98:82:30:6e:8a:
72:d1:42:b4:e5:c1:f7:db:d3:16:5b:43:93:8a:12:
7d:75:f8:af:c1:4d:8a:a8:f4:d5:65:68:7b:d2:6d:
6f:86:89:1c:c9:e7:60:9f:e9:e8:67:e1:71:59:75:
82:c5:25:f2:70:30:08:a9:83:e4:fd:16:0e:b4:bb:
8a:48:0e:73:38:34:1b:e2:b3:23:09:52:7d:ec:ab:
27:41:31:d3:6b:e2:e9:c0:fd:d1:ca:4c:1e:2a:6f:
52:4f:f1:f0:2e:3f:74:8e:21:aa:a9:34:60:6b:15:
60:39:30:39:1e:0f:9f:2a:5b:3d:23:eb:b3:f3:cc:
19:f0:ac:ce:3e:57:71:94:f7:39:0f:26:32:b1:25:
ee:e0:65:14:fe:02:78:44:86:48:36:61:cc:27:1c:
5e:d3:21:b8:39:78:47:5f:bf:92:92:c1:06:1a:8f:
21:8f:e0:12:a3:d0:ce:f4:fd:1a:85:b6:7c:d6:a7:
ce:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F6:3B:A4:AA:3F:AF:A1:79:AF:89:2E:B2:1B:5B:0F:80:BA:07:C7
X509v3 Authority Key Identifier:
keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/ePY7pKo_r6F5r4kushtbD4C6B8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.244.100.0/24
Signature Algorithm: sha256WithRSAEncryption
14:c8:c8:50:90:59:62:32:f9:80:13:f2:35:54:9a:01:72:ad:
b2:a9:3b:66:6d:80:e7:b3:ed:d7:61:01:d9:1a:a2:4f:84:e8:
85:4e:be:44:d9:a8:25:9f:91:02:2a:a2:ef:b9:f3:17:9e:34:
44:f7:75:65:42:4e:93:47:10:ca:2c:0d:f1:a4:1b:3d:d8:43:
2f:d0:24:d0:6b:aa:97:57:52:71:67:6b:47:7a:56:8b:09:02:
d0:1d:46:58:0c:ed:18:4c:04:ef:fb:1d:15:2a:03:34:20:6c:
03:20:38:bc:bf:e8:a9:22:72:84:da:17:67:5d:2c:ee:9e:75:
cc:6b:a9:93:ba:0d:ce:bd:9a:36:82:ef:69:7f:33:d5:30:ae:
ba:70:53:17:aa:41:e0:39:79:6e:45:f4:1a:a6:9a:c0:88:99:
e0:5b:d3:7e:82:cb:d1:ad:37:a6:66:20:b3:fc:5b:06:04:17:
e5:be:eb:f0:73:c4:c1:8a:33:20:1c:cc:8e:12:69:ad:96:e5:
b9:b5:99:9f:db:8c:34:ef:13:c6:3f:ce:6c:e1:76:df:a5:55:
32:56:6e:a4:2a:71:2d:f3:d3:da:2f:f5:4d:30:5a:ac:11:f9:
6c:e6:a4:24:5f:c9:ad:b0:65:03:b3:06:70:e4:6f:3e:87:a3:
87:90:df:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:23:05 2026 by rpki-client