Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/E1du0wCDYd0qkbzycOzoURh4BYI.roa
File: E1du0wCDYd0qkbzycOzoURh4BYI.roa (raw, json)
Hash identifier: KvrqxA058Oc1sNN2BjNJzwOLTtzAgr6gDrllwRypkQM=
Subject key identifier: 13:57:6E:D3:00:83:61:DD:2A:91:BC:F2:70:EC:E8:51:18:78:05:82
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 01A0C65AFE18EECD850C8F4DF4B642B44AF9
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/E1du0wCDYd0qkbzycOzoURh4BYI.roa
Signing time: Mon 21 Sep 2026 23:44:07 +0000
ROA not before: Mon 21 Sep 2026 23:44:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48648
IP address blocks: 91.198.233.0/24 maxlen: 24
91.211.120.0/24 maxlen: 24
91.211.122.0/24 maxlen: 24
185.190.151.0/24 maxlen: 24
193.107.80.0/24 maxlen: 24
194.28.100.0/24 maxlen: 24
194.28.103.0/24 maxlen: 24
195.12.56.0/22 maxlen: 22
195.12.56.0/24 maxlen: 24
195.12.57.0/24 maxlen: 24
195.12.59.0/24 maxlen: 24
195.88.27.0/24 maxlen: 24
2a0a:2c0::/48 maxlen: 48
2a0a:2c0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:5a:fe:18:ee:cd:85:0c:8f:4d:f4:b6:42:b4:4a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Sep 21 23:44:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13576ed3008361dd2a91bcf270ece85118780582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:76:1b:2d:b5:25:7e:cf:65:e5:49:bb:41:80:
d6:59:33:48:b6:96:6f:d2:e6:f2:e1:96:c0:b5:0e:
b2:d0:e5:5c:63:85:6f:f2:0d:b9:c9:d1:7c:45:ab:
80:86:c6:9f:55:e3:fb:cb:38:ee:d9:2c:ca:b2:ee:
ad:5a:87:75:e3:9b:a9:98:bb:cc:92:de:c2:8d:1d:
e7:93:dc:17:d4:93:9a:db:51:04:c8:8d:11:8d:12:
ff:ed:e8:44:af:fc:03:de:56:1c:bc:59:33:b3:0e:
78:36:54:85:76:f2:4c:80:52:ef:61:90:b2:1a:2a:
36:4b:35:ed:ad:dc:6e:96:c8:b2:25:91:53:74:c9:
01:08:b0:be:d5:db:79:22:22:24:c0:b7:97:29:a8:
d0:b5:ba:6f:33:d6:11:cd:1d:b9:68:6b:e2:1e:88:
70:ad:9e:5d:06:88:fc:59:f3:91:e0:72:09:c1:f7:
12:ca:4a:aa:e7:14:d1:1e:b4:63:23:c1:e5:8d:8f:
23:3c:c7:8a:60:27:17:39:5f:2b:33:70:40:1a:f7:
0e:8b:f1:95:7f:d3:55:c3:4e:55:3e:2c:1e:75:15:
ec:7e:2b:3a:b1:b7:1f:17:17:4f:e6:36:9b:2f:b6:
70:a6:c1:9e:58:7a:71:a4:86:ae:16:a6:61:14:27:
43:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:57:6E:D3:00:83:61:DD:2A:91:BC:F2:70:EC:E8:51:18:78:05:82
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/E1du0wCDYd0qkbzycOzoURh4BYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.233.0/24
91.211.120.0/24
91.211.122.0/24
185.190.151.0/24
193.107.80.0/24
194.28.100.0/24
194.28.103.0/24
195.12.56.0/22
195.88.27.0/24
IPv6:
2a0a:2c0::/48
2a0a:2c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
8d:5c:75:d1:eb:ce:fe:92:1d:b8:86:60:d4:60:47:19:97:91:
19:08:a4:cb:7a:1d:66:48:2d:7e:50:be:ce:fe:d8:d6:e3:a4:
bb:7b:e8:0f:7b:ee:0c:c5:21:f4:27:86:7a:20:21:36:2f:48:
8e:9b:26:21:6a:5c:8b:66:bb:6e:01:bc:3c:59:fb:08:6f:e8:
69:f9:b8:06:fa:76:5c:9b:b0:5b:53:8b:dd:fb:6c:84:f4:7f:
9a:23:bf:e9:2b:bc:07:ae:ce:e2:9c:27:fc:c9:84:36:e7:6c:
c9:19:0f:3f:95:d1:4c:4e:98:c8:dd:d0:de:35:33:1c:c2:58:
22:f4:46:e3:b1:b2:f1:7d:c9:8d:ec:a7:ae:a1:f7:f1:9c:c2:
d6:a2:b7:a9:49:06:84:be:c8:29:0b:9f:1a:a6:df:c2:22:00:
d9:0d:3e:88:47:8f:89:c8:3a:94:e8:4c:87:44:23:69:01:2c:
23:59:e1:6b:af:e4:35:88:55:c5:b1:4d:7c:6d:4d:a8:a1:d0:
e9:a3:2b:92:b2:ad:20:c7:8d:28:67:9d:c4:f7:f3:7c:4a:15:
4b:4d:24:8b:30:e2:fd:2f:57:9e:bc:a2:61:73:9e:04:b6:db:
35:00:ac:79:00:ed:3f:50:9a:9d:ee:42:06:e2:5a:e4:75:7d:
6d:d7:64:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:44:49 2026 by rpki-client