Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/eg0JID_zEbBxlM0p8j8SZtUMvWk.roa
File: eg0JID_zEbBxlM0p8j8SZtUMvWk.roa (raw, json)
Hash identifier: ZhB5gQL3Vss4uF8TXJM6HL62/+gk0ipDnB4vJm0UQtQ=
Subject key identifier: 7A:0D:09:20:3F:F3:11:B0:71:94:CD:29:F2:3F:12:66:D5:0C:BD:69
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0B88FD146CFD28D7B3802ABA8190DB290
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/eg0JID_zEbBxlM0p8j8SZtUMvWk.roa
Signing time: Sat 19 Sep 2026 07:27:07 +0000
ROA not before: Sat 19 Sep 2026 07:27:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395954
IP address blocks: 217.79.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:8f:d1:46:cf:d2:8d:7b:38:02:ab:a8:19:0d:b2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 19 07:27:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a0d09203ff311b07194cd29f23f1266d50cbd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:e5:9c:0d:e7:77:b9:fe:57:ef:c8:c3:94:
a7:bc:f1:6e:4f:a0:2a:34:11:46:37:80:25:a1:14:
a5:a3:05:7c:46:7e:01:18:1a:32:65:1a:35:fa:9b:
1d:81:f5:e8:1f:43:a6:7a:33:07:29:ec:86:d5:d9:
95:3f:3b:f0:33:94:74:88:00:fd:6e:97:7c:59:38:
4a:da:a9:e3:26:84:13:8f:3c:97:6b:f4:fd:89:26:
b3:e7:33:98:8c:f4:ab:bc:1f:bf:a2:0d:97:2a:80:
80:2b:16:22:16:3a:78:b4:a4:cb:58:a3:f6:8a:96:
57:c1:ae:0a:df:0c:7d:2e:5a:71:b0:c2:6d:86:e7:
b5:7d:5f:a0:5d:18:1b:bb:e4:0c:4e:50:c7:6f:91:
84:4f:a9:2a:f7:a9:a7:1d:7e:4c:1d:bb:9c:ab:b6:
ab:a6:f5:62:cf:7e:9a:da:4a:f7:b7:0f:b6:b7:c1:
38:ae:56:dc:f4:fe:8f:fa:84:4e:d3:27:9e:54:2c:
66:46:87:6d:d9:b4:d0:aa:6d:03:4c:2e:1a:ba:8f:
58:08:27:0f:fa:dd:d4:1e:af:31:82:bd:43:eb:4a:
33:f4:3e:a4:57:4f:17:07:22:ba:c5:4f:af:9f:6c:
36:4c:b5:b6:f5:39:f2:64:38:f7:16:55:19:b6:8c:
0c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0D:09:20:3F:F3:11:B0:71:94:CD:29:F2:3F:12:66:D5:0C:BD:69
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/eg0JID_zEbBxlM0p8j8SZtUMvWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.79.98.0/24
Signature Algorithm: sha256WithRSAEncryption
12:c9:96:0a:49:82:bc:5f:ed:9e:36:06:b6:aa:ec:58:c9:7d:
5a:dc:b2:5a:ba:8e:a2:d6:df:50:d1:80:05:0a:95:d7:fb:b9:
32:3b:da:69:69:a6:36:fe:22:29:91:ad:8c:3b:72:8c:66:2e:
24:a5:20:df:fc:c2:7c:45:a7:09:75:c1:60:80:b6:02:6a:70:
f1:30:f9:21:1d:2f:52:68:85:2a:b6:90:c3:38:cc:89:d2:10:
a8:4f:f8:1d:11:3b:13:ee:22:45:c6:0d:bb:5f:9b:04:eb:2f:
17:74:a7:75:3d:8f:46:7e:41:b7:36:fd:bd:b6:61:0b:93:bb:
5a:05:ea:45:8c:4c:b9:65:8f:b1:b1:f9:93:5c:d7:d8:da:b3:
01:21:c1:ec:bc:a4:1f:06:a3:82:76:63:a8:aa:83:e9:b6:e7:
51:4f:c6:a5:99:67:5c:37:c4:ef:e4:dd:ad:1e:89:e0:97:d5:
a3:21:75:3a:90:f4:7c:73:c3:07:a8:b1:1d:a6:3c:5d:4c:66:
aa:d1:bb:09:ef:96:ca:db:10:3c:55:75:3f:55:b8:93:ad:ee:
9b:90:f2:e8:25:db:7d:56:92:81:f3:3a:d3:56:aa:f4:fa:1c:
9b:da:75:5b:e0:26:e5:3c:f1:5e:76:11:fb:58:ee:fc:61:60:
aa:fb:7e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:22:51 2026 by rpki-client