Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/ecHMOQxFC5KFCSuIYE00HmqpzWQ.roa
File: ecHMOQxFC5KFCSuIYE00HmqpzWQ.roa (raw, json)
Hash identifier: gU+ReNKkd+2JNIkLsRTGjoAlGLm5qsdMFS7ADUk7csg=
Subject key identifier: 79:C1:CC:39:0C:45:0B:92:85:09:2B:88:60:4D:34:1E:6A:A9:CD:64
Certificate issuer: /CN=505122f4dea7df3927d4011b3087d4d067f9d19a
Certificate serial: 01A05CA149EFA5A4D58F4611E0D8EF8C8465
Authority key identifier: 50:51:22:F4:DE:A7:DF:39:27:D4:01:1B:30:87:D4:D0:67:F9:D1:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/ecHMOQxFC5KFCSuIYE00HmqpzWQ.roa
Signing time: Tue 01 Sep 2026 11:01:09 +0000
ROA not before: Tue 01 Sep 2026 11:01:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 159.253.180.0/24 maxlen: 24
159.253.181.0/24 maxlen: 24
185.153.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:a1:49:ef:a5:a4:d5:8f:46:11:e0:d8:ef:8c:84:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505122f4dea7df3927d4011b3087d4d067f9d19a
Validity
Not Before: Sep 1 11:01:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79c1cc390c450b9285092b88604d341e6aa9cd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:5c:13:d9:38:e3:73:86:bd:d7:0f:85:45:
a6:02:da:84:12:23:67:d2:72:33:f5:68:48:fc:27:
40:b1:a3:6b:8a:c0:93:f8:ad:f1:11:73:12:58:e2:
27:9c:f9:4f:4d:d8:80:d1:cf:4e:47:82:75:67:5b:
98:c2:49:8b:c7:43:a5:da:6c:40:03:27:60:c3:f6:
ec:01:16:26:8e:22:60:52:23:34:81:89:42:1c:21:
26:e2:d1:0f:c6:da:dc:86:46:04:85:8c:60:92:ee:
d4:c7:33:5c:65:69:8e:35:82:8e:d7:40:4a:be:40:
f6:d2:06:71:56:5e:25:01:b7:9d:c1:c0:a4:f9:45:
f5:60:76:10:b5:56:de:82:76:f9:f4:0a:3d:22:51:
55:5e:b9:84:28:5b:bc:00:8b:08:10:e4:15:c8:8d:
06:a1:34:90:2f:01:16:57:f5:76:f8:03:11:fb:79:
94:fb:88:83:18:18:b7:5c:9b:e8:d2:4f:a7:6f:b1:
ff:cd:40:64:e2:68:1e:1b:d5:22:c3:d2:58:6d:1d:
56:46:f6:4c:eb:ef:19:a2:17:b6:1f:91:6f:ff:49:
10:28:1f:64:af:15:e2:6c:7c:61:36:22:91:5e:c5:
22:93:42:d0:7a:89:40:af:49:51:8c:62:96:f6:9c:
dd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C1:CC:39:0C:45:0B:92:85:09:2B:88:60:4D:34:1E:6A:A9:CD:64
X509v3 Authority Key Identifier:
keyid:50:51:22:F4:DE:A7:DF:39:27:D4:01:1B:30:87:D4:D0:67:F9:D1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/ecHMOQxFC5KFCSuIYE00HmqpzWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.180.0/23
185.153.128.0/23
Signature Algorithm: sha256WithRSAEncryption
85:4e:58:fb:42:06:18:b6:c6:bc:01:bb:ac:18:d3:df:f3:ca:
a8:5e:22:67:c6:2f:ff:72:a6:5e:91:51:8a:15:e7:67:27:21:
3e:5a:53:03:d2:f6:e0:b2:ff:3e:4b:b4:77:a3:88:15:e3:86:
b4:49:38:c3:05:05:36:b1:c0:b2:1e:44:30:74:2d:0a:c2:ec:
2a:85:21:a5:8a:8a:55:9c:43:62:6f:ad:ce:b1:a5:a3:a8:59:
e0:b3:8a:5c:77:99:bd:d4:70:e5:b1:3f:3e:a7:70:48:ce:2f:
57:10:48:86:ff:23:e5:a9:7e:71:b1:35:e7:f5:ee:86:af:3a:
b6:a7:6b:81:91:30:ed:f0:ab:5d:be:f0:d3:56:76:ef:19:37:
01:05:ef:2e:cd:8d:63:43:05:00:f2:4d:87:0d:38:b7:ed:93:
c5:70:35:f4:b9:2f:9d:8c:e4:96:8a:35:cb:17:b9:3f:fd:f2:
ee:0e:fb:81:b2:86:ef:81:1b:43:0a:13:f9:4b:22:43:25:40:
78:55:e7:d9:09:eb:78:f1:16:00:2a:51:42:67:d6:c9:1d:00:
88:11:a9:04:33:07:09:e3:be:e0:c0:58:2f:bd:a5:82:26:5e:
cc:2c:9f:2e:c2:61:c7:44:04:70:72:73:68:00:b3:90:2d:56:
81:b8:4a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:29:44 2026 by rpki-client