Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/e-_N_tZjIs-eMKkNFVaZPYjX0CA.roa
File: e-_N_tZjIs-eMKkNFVaZPYjX0CA.roa (raw, json)
Hash identifier: 1S2gGG4KQxZpn/mHKh5ptE5M/VS6nzF1eTyd+VCMLrQ=
Subject key identifier: 7B:EF:CD:FE:D6:63:22:CF:9E:30:A9:0D:15:56:99:3D:88:D7:D0:20
Certificate issuer: /CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Certificate serial: 019B7B35AD43F17C5D0DECA2B8A20926DA4E
Authority key identifier: 8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/e-_N_tZjIs-eMKkNFVaZPYjX0CA.roa
Signing time: Thu 01 Jan 2026 20:17:53 +0000
ROA not before: Thu 01 Jan 2026 20:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216302
IP address blocks: 31.24.248.0/24 maxlen: 24
2a12:48c0::/29 maxlen: 32
2a12:48c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:ad:43:f1:7c:5d:0d:ec:a2:b8:a2:09:26:da:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Validity
Not Before: Jan 1 20:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7befcdfed66322cf9e30a90d1556993d88d7d020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:97:f9:27:76:06:92:e6:40:fc:4c:df:ea:
82:73:05:2a:82:38:79:28:7d:48:ef:10:49:fb:ab:
0f:1a:f5:cf:7c:9d:37:b2:5e:be:a0:d3:fa:15:01:
70:51:3f:1f:d3:74:52:3c:27:c3:5b:d6:95:c9:1c:
db:fa:0f:59:72:fc:25:bd:25:a6:27:fc:e5:95:d9:
92:b7:04:56:eb:e9:ad:d3:a3:73:51:96:8f:6d:ca:
9a:ca:e8:92:9d:1e:24:38:c8:42:98:64:30:b4:09:
9e:bc:ab:01:48:6d:0c:84:98:f1:e3:d1:58:8c:b2:
b8:75:5c:12:96:84:54:ce:67:1d:aa:82:fb:fc:2a:
62:cc:78:0b:81:c2:de:ae:0d:47:ee:35:00:22:ba:
fc:6e:a5:d0:af:d4:41:79:48:3c:fc:a5:2d:f1:d0:
df:15:17:5b:2e:09:01:2d:df:20:a0:52:dc:fe:8c:
e8:86:3c:f8:01:84:2b:87:34:d1:89:e8:d5:ae:59:
b9:72:15:dd:8f:4d:53:f9:60:00:8a:b9:b4:e9:9a:
18:f6:44:86:eb:e2:74:1e:d2:ee:9b:27:c7:39:62:
08:11:08:5f:60:ed:58:10:87:4b:09:01:98:09:36:
44:6b:97:8e:c4:bf:85:61:14:66:aa:3d:d8:42:89:
ec:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EF:CD:FE:D6:63:22:CF:9E:30:A9:0D:15:56:99:3D:88:D7:D0:20
X509v3 Authority Key Identifier:
keyid:8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/e-_N_tZjIs-eMKkNFVaZPYjX0CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.248.0/24
IPv6:
2a12:48c0::/29
Signature Algorithm: sha256WithRSAEncryption
44:cb:05:2e:7d:c5:df:96:18:f6:01:71:82:25:d1:6b:76:ee:
e4:2c:49:78:3f:02:67:af:d6:95:58:20:7c:5e:07:dc:d0:7b:
c9:b8:4d:50:1a:4a:34:9f:5b:2c:83:96:f8:70:49:b8:87:2f:
7f:ac:58:09:45:49:ea:9a:02:05:3d:87:cd:c1:37:b1:18:5f:
f5:aa:60:52:7b:fd:60:4e:01:c4:94:41:30:28:3c:86:20:25:
83:c4:55:ed:55:45:a0:d5:01:30:ff:3a:7e:33:a2:00:28:8f:
d0:64:0e:62:5e:b8:f2:d7:5c:5c:73:4e:66:c4:56:db:6e:93:
83:13:fb:1d:82:c0:52:0c:b5:4c:b6:8a:8d:02:13:78:0a:63:
b7:b6:2c:70:17:e7:02:0b:aa:89:60:fb:bb:7b:7e:4d:7c:a8:
a1:9e:83:c7:87:76:49:ae:13:45:86:a0:d9:0e:47:c4:f4:49:
cf:d4:8e:7e:a6:6f:e7:11:37:4d:dc:3b:bd:00:05:9c:53:53:
f1:79:23:2d:8e:5f:8b:31:45:db:2b:6f:de:4e:05:6d:c2:14:
23:1a:94:e1:2d:c0:42:3a:3f:b2:ae:32:51:64:f4:43:dc:19:
d0:ad:e0:a6:56:5a:36:1c:42:be:04:8d:31:dd:8d:23:c2:94:
cc:92:79:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:33:52 2026 by rpki-client