Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/EeCRzoR4nazEsh_3JHs5ATYajN4.roa
File: EeCRzoR4nazEsh_3JHs5ATYajN4.roa (raw, json)
Hash identifier: OfDGT87U4vjn+M5c9D5VS04RxDEM9rWVa6tSfAOjeLE=
Subject key identifier: 11:E0:91:CE:84:78:9D:AC:C4:B2:1F:F7:24:7B:39:01:36:1A:8C:DE
Certificate issuer: /CN=e938f9182b7da44003591eeae2560f8451b3393a
Certificate serial: 01A099DE23C47D317A1A2FEA768262A76184
Authority key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/EeCRzoR4nazEsh_3JHs5ATYajN4.roa
Signing time: Sun 13 Sep 2026 08:24:27 +0000
ROA not before: Sun 13 Sep 2026 08:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49556
IP address blocks: 158.255.78.0/24 maxlen: 24
2a13:5ac0::/38 maxlen: 38
2a13:5ac0:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:99:de:23:c4:7d:31:7a:1a:2f:ea:76:82:62:a7:61:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e938f9182b7da44003591eeae2560f8451b3393a
Validity
Not Before: Sep 13 08:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11e091ce84789dacc4b21ff7247b3901361a8cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:35:e5:03:8d:2e:c1:12:0e:3f:6f:98:fe:43:
fb:7b:99:e8:aa:4b:8d:9b:b5:ff:80:9a:a0:3d:c1:
0e:6d:15:fc:d8:00:15:6b:4a:33:e4:88:24:67:1e:
bd:aa:3f:cb:49:61:4d:2b:68:d7:b3:07:08:bf:bf:
bc:03:ff:7d:3b:59:77:9a:8b:e8:7d:f5:a0:0c:61:
59:48:06:3c:84:d9:da:4c:74:82:30:a3:3b:bb:ca:
16:8c:9f:f6:21:9a:d2:73:db:49:6f:d2:3d:07:4c:
f9:a5:11:ea:8c:a3:f7:4b:6f:23:05:81:37:7d:1f:
f9:e7:cb:d8:d7:2c:50:3c:e4:46:b0:36:e1:7c:7d:
37:83:72:e4:6c:94:42:98:44:07:97:6c:9f:d2:7c:
d1:e9:0d:4b:37:6b:0d:7f:a3:bd:5d:d9:7f:c3:c7:
5a:06:19:0b:c8:6d:e0:bb:65:40:a2:c1:0f:be:51:
bc:56:6d:ef:e6:a3:2c:7d:c2:9f:e9:84:51:31:a2:
c5:53:2f:25:e3:c0:b0:b5:b4:39:74:62:2d:64:55:
21:0a:3d:41:d1:5d:e0:3d:8a:5d:25:2a:b8:53:59:
b0:5a:a7:9c:92:54:2b:98:a6:58:75:ab:d1:a6:ec:
44:e1:57:21:17:21:c1:f0:cd:c7:3d:8f:ee:81:16:
74:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E0:91:CE:84:78:9D:AC:C4:B2:1F:F7:24:7B:39:01:36:1A:8C:DE
X509v3 Authority Key Identifier:
keyid:E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/EeCRzoR4nazEsh_3JHs5ATYajN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.255.78.0/24
IPv6:
2a13:5ac0::/37
Signature Algorithm: sha256WithRSAEncryption
12:aa:44:f4:43:f3:de:ca:39:94:25:67:e3:34:96:37:b7:7f:
e4:17:8b:0c:09:7d:2d:30:b6:13:1d:70:57:13:2d:db:9c:c0:
34:03:55:2a:e0:9a:a7:dc:c1:ee:8a:3b:da:03:a4:9e:31:0a:
e2:48:43:27:e6:f0:ab:b4:0d:cb:a3:33:3e:da:55:d9:97:3f:
97:69:55:ea:66:72:cc:f2:3e:62:ef:93:0e:51:d4:8e:6d:45:
5b:91:f6:7a:27:9b:c4:1f:65:60:c2:fc:b4:b7:9d:ff:08:42:
d2:e8:b0:e0:f0:53:99:92:62:d8:1b:79:e5:3e:72:2d:dd:54:
57:af:35:19:9c:64:7d:a6:ce:93:53:a0:f7:5f:13:b6:b3:e9:
fb:9d:ae:22:70:f4:91:0e:c3:35:68:9d:8a:41:d1:6b:f3:36:
47:de:b6:be:f0:e0:dd:a9:89:95:93:77:57:ff:a5:5e:7c:b2:
08:f4:ff:a0:42:67:0b:97:3a:b4:45:62:90:6e:5c:aa:a3:6b:
5d:fa:7a:39:1f:af:c9:c9:88:e5:15:52:12:61:91:cb:fd:e9:
4e:29:33:34:f3:8d:f8:43:03:9d:9b:3c:93:fd:a9:47:29:ac:
87:cd:44:bf:ea:97:9a:4e:53:df:92:26:79:38:20:2f:87:80:
f9:70:d3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:17:31 2026 by rpki-client