Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/0EBeCvxmJyfS91P9dvdoxEsVlJM.roa
File: 0EBeCvxmJyfS91P9dvdoxEsVlJM.roa (raw, json)
Hash identifier: Ztm1RYUvm6dAlcHl20eJteXmU6ZIpFtevcVwkSpIGLQ=
Subject key identifier: D0:40:5E:0A:FC:66:27:27:D2:F7:53:FD:76:F7:68:C4:4B:15:94:93
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 01A0E8F48639F123D2FF4E604FFE5D632B00
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/0EBeCvxmJyfS91P9dvdoxEsVlJM.roa
Signing time: Mon 28 Sep 2026 16:58:54 +0000
ROA not before: Mon 28 Sep 2026 16:58:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 80.86.210.0/24 maxlen: 24
80.86.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f4:86:39:f1:23:d2:ff:4e:60:4f:fe:5d:63:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Sep 28 16:58:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0405e0afc662727d2f753fd76f768c44b159493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:17:f4:fd:aa:04:a1:cd:1d:d3:19:f2:a8:
30:02:41:0b:a3:5a:da:cb:09:d8:44:40:4a:10:0f:
d1:d1:3b:32:97:56:d8:8a:f4:6e:52:b6:a0:85:87:
59:00:c4:6e:8a:1f:5c:79:1e:15:08:53:74:07:a8:
cd:5d:a7:75:50:9f:a8:e7:a9:64:a2:a0:e1:95:2b:
a1:73:a7:96:7b:25:b4:b4:c5:60:52:7e:0d:98:a3:
b8:94:b4:e6:80:15:b1:34:23:c4:78:4f:56:a5:1e:
8b:c6:37:a3:e7:3b:aa:1a:a3:f4:85:08:a8:fb:24:
53:ac:fc:30:b4:b1:46:42:ae:0a:1d:fa:e9:97:5f:
c2:03:1e:ce:36:2a:96:da:3a:c7:9a:ee:12:b2:f4:
8a:a2:5b:ee:ed:8c:6d:88:ee:79:bc:3d:a9:dd:af:
68:65:de:fe:cc:12:e9:c0:44:33:40:f6:d7:68:c4:
33:cb:01:01:21:b3:c4:f4:de:9b:98:77:cb:c4:21:
09:43:69:44:0a:7f:ca:cd:73:39:df:6b:1d:2d:f9:
1e:36:c7:e0:c9:fe:dc:63:67:79:36:92:73:e5:56:
90:c9:6d:b3:42:6a:7d:ca:e4:a9:2a:41:56:9d:29:
f0:a0:d9:ba:61:af:d2:1f:37:c8:50:f9:f4:91:61:
c3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:40:5E:0A:FC:66:27:27:D2:F7:53:FD:76:F7:68:C4:4B:15:94:93
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/0EBeCvxmJyfS91P9dvdoxEsVlJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.210.0/24
80.86.213.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c8:6e:b1:7d:63:27:f2:55:94:30:34:43:bb:b1:ab:3e:e8:
a1:2e:57:89:9a:58:e8:af:dd:ed:4b:bd:ce:43:04:07:9d:01:
14:04:88:8c:6f:9d:58:0b:d5:df:eb:ca:6d:b6:e5:76:57:18:
7a:98:3d:5f:bd:cf:c4:f2:45:8f:d6:48:8a:8c:ec:a5:ba:cc:
54:b2:9a:bf:5f:33:db:26:32:da:f9:56:61:d1:71:83:b5:17:
79:55:d5:08:4e:47:8f:5c:35:0c:72:34:64:8b:c3:c7:bc:06:
1f:7a:57:06:e7:a5:2c:1c:82:7f:8c:dc:56:a4:7e:77:7f:34:
3a:82:9d:75:ed:27:8f:15:8e:9e:99:7c:7b:04:f6:1d:aa:a7:
53:1f:a1:9a:b3:cc:f4:7a:de:79:60:7e:8c:d5:59:81:7e:9c:
8f:44:a0:d6:2c:4d:9e:ec:2d:c6:12:7f:9f:fe:04:c9:9c:20:
4e:26:e7:89:4b:37:88:6c:46:0d:12:89:52:0e:59:34:18:f6:
69:66:50:b3:5b:cf:a4:f1:d2:32:85:58:40:af:34:16:f3:30:
57:a6:e5:b9:e7:6a:e5:d5:5c:36:4b:3f:86:10:4d:2a:0d:ef:
7f:6c:d2:98:21:6e:ce:71:6e:02:74:75:5f:a9:10:2a:d0:18:
ed:19:f5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:02:34 2026 by rpki-client