Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/EaA5h5-haFqykkLxdYNz4NRH894.roa
File: EaA5h5-haFqykkLxdYNz4NRH894.roa (raw, json)
Hash identifier: 35hNbngSLdJ5Vm4Smrugp6blzXRwN2jLQFd01FhQopg=
Subject key identifier: 11:A0:39:87:9F:A1:68:5A:B2:92:42:F1:75:83:73:E0:D4:47:F3:DE
Certificate issuer: /CN=1aab046d0fd210268479ba1b9d3b7bff713a3ff4
Certificate serial: 019C9402A46BEBCC94504AE1C96B8E8576A3
Authority key identifier: 1A:AB:04:6D:0F:D2:10:26:84:79:BA:1B:9D:3B:7B:FF:71:3A:3F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/EaA5h5-haFqykkLxdYNz4NRH894.roa
Signing time: Wed 25 Feb 2026 08:55:26 +0000
ROA not before: Wed 25 Feb 2026 08:55:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51521
IP address blocks: 91.217.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:02:a4:6b:eb:cc:94:50:4a:e1:c9:6b:8e:85:76:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aab046d0fd210268479ba1b9d3b7bff713a3ff4
Validity
Not Before: Feb 25 08:55:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11a039879fa1685ab29242f1758373e0d447f3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:67:d5:2e:b0:0c:5c:56:2e:40:9a:ac:29:
0a:cf:ed:a2:a8:92:51:37:24:b2:1b:d5:e1:44:af:
d2:04:8b:e0:b5:35:59:33:26:da:73:9d:d6:a6:e9:
40:c1:71:e9:11:fb:da:43:82:ad:76:f7:c4:95:b8:
92:a3:d0:0d:bf:01:4c:67:64:96:4f:f4:89:90:c2:
1a:c9:f1:ef:d1:72:75:27:04:04:9b:a6:60:ce:6e:
6b:c1:ce:16:dd:a8:5f:56:31:d0:86:ef:4b:cd:0e:
b9:3d:25:90:56:74:1e:32:27:f2:5e:80:b2:18:67:
62:50:0b:b6:b2:6e:71:c4:82:a8:2f:6a:81:9a:ae:
a4:3f:d7:2e:ce:3c:31:a5:8f:d4:ab:55:27:b6:74:
e9:df:86:cb:9f:49:aa:ce:ff:6d:12:d3:7a:36:59:
ae:99:33:dc:ed:6e:a3:3b:19:a4:38:ab:d5:bf:eb:
85:0d:10:83:11:02:62:68:92:c7:84:91:ac:9c:e3:
5c:c8:4d:d5:9d:4d:03:ad:6d:5c:46:5b:ee:58:55:
56:79:4f:92:8c:c6:87:e2:91:25:8d:1f:b8:12:51:
20:3a:52:3c:2b:93:65:d6:1b:a5:93:ef:da:d3:74:
66:c7:81:19:3a:df:e7:a5:ca:eb:30:2b:de:a4:b7:
1f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A0:39:87:9F:A1:68:5A:B2:92:42:F1:75:83:73:E0:D4:47:F3:DE
X509v3 Authority Key Identifier:
keyid:1A:AB:04:6D:0F:D2:10:26:84:79:BA:1B:9D:3B:7B:FF:71:3A:3F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/EaA5h5-haFqykkLxdYNz4NRH894.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.96.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:0e:1e:e9:5d:25:2d:87:6a:0f:32:e5:f0:b0:a2:61:f8:3d:
37:ee:87:f3:66:11:bc:3b:dc:2f:a8:e5:54:ef:ba:93:67:f5:
43:06:72:e8:d0:4c:25:96:2f:0e:46:8a:7e:b1:c9:41:16:ef:
e4:73:09:e5:e1:75:3e:23:8d:b2:40:b1:aa:a9:61:bc:4f:e2:
d0:0b:ae:ae:96:f1:5c:c1:5b:fa:85:84:12:6f:e1:09:ec:1b:
a3:34:7d:d5:72:4f:1c:7b:73:f6:b8:d5:50:57:00:e6:fe:8a:
03:84:6a:25:43:56:70:41:c3:3e:02:ea:a6:bd:68:7b:a1:cc:
50:a8:e4:05:1e:c6:2c:fa:81:45:55:98:51:0d:28:6c:1e:c6:
a0:d9:0b:21:c7:e9:a6:d1:8d:c5:5a:2d:2e:0a:87:40:30:5b:
1d:75:5a:0d:bb:a0:ca:41:76:3a:46:9a:19:3e:5c:c3:8f:78:
1d:d6:03:0f:eb:20:44:9f:e1:37:38:d5:3c:ce:22:c6:c3:20:
de:8c:e9:d9:8a:2e:d0:ec:2f:bb:08:47:c2:83:96:48:64:55:
18:9c:31:29:4c:61:e4:58:7f:b5:17:4f:24:3d:d2:e3:8a:1d:
04:e9:49:c0:95:17:3c:0e:90:81:07:e6:d8:07:c6:8c:05:5b:
ed:56:5e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:39:56 2026 by rpki-client