Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/e7-9LCeb-3BLXkp_zjmQWHgwSC4.roa
File: e7-9LCeb-3BLXkp_zjmQWHgwSC4.roa (raw, json)
Hash identifier: loc3ZJs/gO81j4lMtHMphZSezIZdKFT+rGD1FmHI/PI=
Subject key identifier: 7B:BF:BD:2C:27:9B:FB:70:4B:5E:4A:7F:CE:39:90:58:78:30:48:2E
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019D73E8F5478A3BDEED3D08CC4E3FF87FAE
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/e7-9LCeb-3BLXkp_zjmQWHgwSC4.roa
Signing time: Thu 09 Apr 2026 20:22:20 +0000
ROA not before: Thu 09 Apr 2026 20:22:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216078
IP address blocks: 212.46.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:73:e8:f5:47:8a:3b:de:ed:3d:08:cc:4e:3f:f8:7f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Apr 9 20:22:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bbfbd2c279bfb704b5e4a7fce3990587830482e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:02:ae:90:d9:5f:ab:cf:c1:5b:3e:06:9a:2f:
da:41:57:6a:ba:ce:c8:17:6a:80:84:29:a2:c2:af:
87:d1:12:71:dd:b8:76:11:3a:44:21:d2:67:39:a4:
2b:a4:81:a3:16:c1:bc:d6:cb:25:4f:86:c1:0a:71:
6c:30:4d:5b:53:f2:1e:0f:ed:c6:74:3d:6f:b9:a1:
5f:14:48:b4:71:0b:8e:40:cc:f4:a3:25:80:5b:3a:
70:0c:53:3f:3a:93:eb:d0:85:fc:83:73:f6:4e:48:
b2:0d:04:8d:c0:b4:9f:8d:ec:b6:68:ca:fc:dc:a5:
3e:0d:53:b3:0f:a1:c7:b5:a2:30:b7:53:db:d4:4a:
f6:07:44:0f:ce:6f:48:36:d8:ac:c8:05:a0:2b:35:
11:88:73:ba:f9:7f:12:60:bf:95:5b:93:77:d8:cd:
4a:ca:8f:16:79:1c:a1:f7:24:dc:9e:b2:1c:48:37:
70:fd:23:86:35:df:ec:2b:8b:2d:51:97:f3:59:5f:
54:f2:82:d8:40:9f:38:14:bf:1b:9a:db:cb:cb:87:
10:e0:d7:64:c0:67:fd:55:36:c1:90:1a:03:06:63:
c6:19:d6:b6:42:52:d1:49:65:51:91:5a:80:a6:59:
71:98:6c:81:59:f0:19:a4:c3:9d:d4:6b:e7:c2:1d:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BF:BD:2C:27:9B:FB:70:4B:5E:4A:7F:CE:39:90:58:78:30:48:2E
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/e7-9LCeb-3BLXkp_zjmQWHgwSC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.33.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:47:3d:3b:75:8a:e2:b7:39:a4:89:be:ca:e8:fd:53:53:b7:
9c:c5:62:c7:58:21:45:8f:22:8c:db:4e:a3:68:e5:50:f5:f1:
de:18:2f:23:07:eb:f2:75:20:b8:4b:0a:cd:6d:11:d6:4d:62:
bd:a6:f8:c5:a5:5a:df:06:06:ac:53:9b:b7:99:be:92:07:25:
3b:a0:4b:45:18:52:13:ad:0f:19:ab:2d:d2:64:2f:27:5e:fb:
63:18:bd:e0:41:12:d9:4a:2b:ec:5e:4a:0e:f4:b2:10:88:9f:
31:57:45:c6:b6:04:20:36:e3:82:ac:8b:75:bb:ad:7e:1a:bd:
83:11:af:9b:56:e4:c7:9c:e6:f4:68:88:f4:c1:eb:a1:1f:92:
2e:b7:37:58:59:8c:30:77:b8:d2:0c:de:27:72:cd:40:98:1f:
03:06:83:07:1b:74:48:fe:26:9e:cf:0f:aa:3a:22:b2:a8:be:
27:01:8e:fc:f4:be:29:ea:f2:b2:3e:46:b2:27:06:93:10:de:
ee:8e:d8:20:84:29:7d:eb:e3:0f:a2:53:16:a5:70:7f:9e:11:
20:c5:b6:d6:ca:24:df:29:07:35:41:1d:b4:39:ec:e6:5c:dc:
aa:f8:56:36:86:bb:96:d4:7b:4d:ec:7e:17:16:63:57:1c:e4:
c3:99:32:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:48 2026 by rpki-client