Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/E26yMEGiEXVMv4qNerTa-JwUfVk.roa
File: E26yMEGiEXVMv4qNerTa-JwUfVk.roa (raw, json)
Hash identifier: wb/1cbpyGWdHfbP1L8byYm0gmWdUzDTMb6HXK24PRt8=
Subject key identifier: 13:6E:B2:30:41:A2:11:75:4C:BF:8A:8D:7A:B4:DA:F8:9C:14:7D:59
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 01A09C0635882AC5E348C4A64222EE7A9E06
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/E26yMEGiEXVMv4qNerTa-JwUfVk.roa
Signing time: Sun 13 Sep 2026 18:27:27 +0000
ROA not before: Sun 13 Sep 2026 18:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401626
IP address blocks: 185.242.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9c:06:35:88:2a:c5:e3:48:c4:a6:42:22:ee:7a:9e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Sep 13 18:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=136eb23041a211754cbf8a8d7ab4daf89c147d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:f9:de:4d:a2:eb:c1:06:e1:f5:78:b6:b0:
91:89:02:df:81:56:e8:85:ce:26:63:4e:cb:b9:a3:
e9:fb:b2:56:5b:e2:7d:97:8c:0d:4a:1c:86:33:69:
62:7e:cc:24:07:89:08:8e:b1:86:10:76:b0:24:be:
b9:49:85:04:d6:50:5d:43:e3:f4:4d:ab:e7:51:24:
4c:c5:6b:df:6a:5e:8f:55:ea:84:4a:e1:e5:56:1c:
0a:09:11:dc:30:32:5b:86:93:5d:36:08:95:e7:14:
a4:48:e4:e0:97:07:14:7f:ef:a0:ea:0c:fd:56:32:
54:e8:11:7c:f9:8a:d9:24:ba:dd:1a:9f:4e:a9:39:
c1:fa:95:02:15:3a:1d:4a:83:b4:a3:e9:a2:a0:ef:
76:f3:d7:70:bc:0b:9a:17:fc:33:6e:5c:ad:e8:f8:
3c:6c:b1:8c:b4:3f:67:69:a0:9c:6d:33:31:65:cf:
9b:f2:b8:18:37:f2:72:dc:b0:99:d2:26:75:2e:a4:
b7:ae:fc:aa:a5:18:91:29:7a:4e:f0:35:1e:ae:5f:
79:e3:f2:0d:e7:4e:a8:3c:77:be:17:a9:70:86:a9:
12:c2:fc:07:08:5c:b5:62:82:60:8b:0c:49:43:a1:
ab:68:ba:1c:7d:5f:9e:b0:c8:1d:40:74:c5:ef:50:
84:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6E:B2:30:41:A2:11:75:4C:BF:8A:8D:7A:B4:DA:F8:9C:14:7D:59
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/E26yMEGiEXVMv4qNerTa-JwUfVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.3.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:00:4e:e7:8d:c3:21:06:f8:d8:fb:a8:03:ce:c6:02:dd:ba:
d5:08:51:77:2f:79:a7:0f:cc:67:d3:a3:62:60:3b:ce:38:20:
de:f2:dc:04:08:64:0c:3c:29:6e:ca:e3:e8:f6:eb:2e:d6:e6:
37:0e:72:dd:26:32:fc:25:d4:69:a3:7d:6e:00:d3:45:2f:05:
53:7b:40:0f:df:d4:ac:27:b4:57:c3:e8:1e:0f:96:1f:c0:3f:
23:21:25:6e:f9:94:7b:9d:1b:c1:09:6a:53:54:fa:be:7a:73:
11:41:fd:51:71:d9:4a:0a:c0:c2:1f:bf:04:57:3b:de:27:62:
49:0a:5d:48:a5:72:68:17:9b:1d:08:73:0c:f9:63:10:82:ce:
a3:eb:cd:dd:c7:bc:3d:96:ee:27:1f:5f:b4:48:be:ef:d7:9f:
13:39:4b:9e:91:eb:f3:84:90:4d:b8:81:f5:7d:49:e8:d4:26:
95:6a:f7:bc:f8:d4:b9:6a:00:2e:a3:ef:77:9d:08:ee:47:78:
d4:ae:b3:0d:16:88:b5:ef:37:eb:c9:a3:a6:37:13:f2:83:a1:
3d:aa:fb:f2:47:d5:56:01:33:b7:ab:83:61:97:7f:74:52:3f:
01:98:f9:42:c6:f0:78:12:f0:32:43:1d:fe:4e:c5:87:87:50:
98:b4:f4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:50:38 2026 by rpki-client