Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/enNwWa_tjEADj60hMM9KCK674dI.roa
File: enNwWa_tjEADj60hMM9KCK674dI.roa (raw, json)
Hash identifier: jbZhyNpL/OUred4wU6osJUOuoDw7EZkVk6iISt/NlJo=
Subject key identifier: 7A:73:70:59:AF:ED:8C:40:03:8F:AD:21:30:CF:4A:08:AE:BB:E1:D2
Certificate issuer: /CN=66dad7e01be8960ccab00a162be9df4f5fabbf62
Certificate serial: 019EB18A4EA5E0378F3E9B496B289E405E0E
Authority key identifier: 66:DA:D7:E0:1B:E8:96:0C:CA:B0:0A:16:2B:E9:DF:4F:5F:AB:BF:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtrX4BvolgzKsAoWK-nfT1-rv2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/enNwWa_tjEADj60hMM9KCK674dI.roa
Signing time: Wed 10 Jun 2026 12:38:11 +0000
ROA not before: Wed 10 Jun 2026 12:38:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57863
IP address blocks: 5.253.80.0/24 maxlen: 24
5.253.81.0/24 maxlen: 24
5.253.82.0/24 maxlen: 24
5.253.83.0/24 maxlen: 24
194.50.35.0/24 maxlen: 24
2a14:f800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtrX4BvolgzKsAoWK-nfT1-rv2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:8a:4e:a5:e0:37:8f:3e:9b:49:6b:28:9e:40:5e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dad7e01be8960ccab00a162be9df4f5fabbf62
Validity
Not Before: Jun 10 12:38:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a737059afed8c40038fad2130cf4a08aebbe1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:3f:b3:9e:f5:7b:db:53:f0:82:f5:2f:2c:
0e:93:ed:d8:01:36:95:07:df:c0:f1:1c:58:ed:71:
b3:4e:b0:99:47:75:4a:30:69:c8:2b:fe:6d:75:2e:
14:da:12:c0:74:25:88:cc:8e:c0:77:90:2e:a4:3c:
da:27:c8:c9:d3:de:37:26:57:41:3f:5d:74:36:29:
6c:26:27:c9:a6:bd:d1:98:41:ca:c0:59:3a:81:bb:
cd:1f:19:44:8e:4f:9b:5c:f0:a6:43:26:cf:87:3f:
fb:9e:e2:d2:65:49:db:2d:b2:f0:43:82:fe:8b:03:
d7:e6:10:2b:2a:65:f3:41:1e:48:5c:3c:02:99:62:
12:49:32:63:57:9b:66:71:30:d2:69:fe:a8:85:73:
f2:2d:dd:40:24:07:de:e9:d2:17:0c:20:09:9e:35:
ab:ed:1e:d4:e3:cc:cd:62:58:8a:41:43:c9:62:2c:
bb:d4:4d:40:4f:d0:c7:e9:93:89:85:ca:74:22:04:
e8:a7:4c:a1:e1:66:8a:96:c5:3d:4c:ff:34:93:85:
fb:f4:8c:90:e6:e6:da:a0:07:7b:81:dd:3e:14:40:
82:30:9b:1d:1b:7d:fc:08:5c:f1:10:42:ab:8b:ab:
df:6a:55:ca:ea:63:44:34:d8:94:e7:2f:bd:5e:3b:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:73:70:59:AF:ED:8C:40:03:8F:AD:21:30:CF:4A:08:AE:BB:E1:D2
X509v3 Authority Key Identifier:
keyid:66:DA:D7:E0:1B:E8:96:0C:CA:B0:0A:16:2B:E9:DF:4F:5F:AB:BF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrX4BvolgzKsAoWK-nfT1-rv2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/enNwWa_tjEADj60hMM9KCK674dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4a2d47-0e6f-4914-9481-0cdf00edb4de/1/ZtrX4BvolgzKsAoWK-nfT1-rv2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.80.0/22
194.50.35.0/24
IPv6:
2a14:f800::/29
Signature Algorithm: sha256WithRSAEncryption
3e:ee:0a:fd:b7:46:68:a6:67:06:6e:ec:b1:a0:b8:bb:cd:76:
46:57:d0:18:36:83:b7:65:d4:76:cb:cd:5e:18:3f:57:7c:a2:
31:a4:d1:77:cd:40:44:a4:53:75:13:4f:b6:74:fe:fd:b5:ae:
a3:ef:90:cb:e6:8f:13:79:c4:fd:6b:6e:04:79:01:8c:f0:6c:
f6:27:dd:91:d5:ef:5a:24:58:03:34:e8:94:93:0f:52:ae:b8:
fe:92:a6:69:06:7f:2c:51:d7:09:50:7a:6a:af:48:5e:67:4f:
89:3b:f2:31:17:de:01:04:34:c2:7c:92:10:b4:d9:85:3c:8c:
de:9e:a8:ed:ea:81:38:9c:f7:b0:df:4d:d5:39:7a:b9:3e:b8:
08:eb:6a:6d:09:53:03:2f:2b:15:93:53:66:19:6e:e9:4c:90:
cc:2a:83:39:f1:00:9a:3f:17:14:a7:89:5b:47:24:0e:14:73:
19:7a:07:c8:80:d9:56:dc:8f:34:29:36:3c:b6:d2:16:dc:3d:
5d:1d:bc:fe:e3:f4:65:51:d4:b6:61:27:cf:5a:78:51:b8:44:
11:38:15:eb:a7:c7:cc:92:2b:d1:fe:23:4b:9c:8b:86:d0:23:
c2:97:59:84:95:fb:5c:e8:26:f5:4f:3a:c2:b3:3f:93:78:ac:
ae:96:37:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:11:08 2026 by rpki-client