Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/eNXPCO1fHb_gJYVH4GnPb4mGFDE.roa
File: eNXPCO1fHb_gJYVH4GnPb4mGFDE.roa (raw, json)
Hash identifier: JihQS0yZMKtFk/5EkGa1ZLbQrYoFngG1jvn3sBcFOiE=
Subject key identifier: 78:D5:CF:08:ED:5F:1D:BF:E0:25:85:47:E0:69:CF:6F:89:86:14:31
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01A0BD9534EA95D9B85A96D2367200DDEC41
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/eNXPCO1fHb_gJYVH4GnPb4mGFDE.roa
Signing time: Sun 20 Sep 2026 06:51:07 +0000
ROA not before: Sun 20 Sep 2026 06:51:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 77.246.221.0/24 maxlen: 24
77.246.223.0/24 maxlen: 24
88.80.142.0/24 maxlen: 24
88.80.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:95:34:ea:95:d9:b8:5a:96:d2:36:72:00:dd:ec:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Sep 20 06:51:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78d5cf08ed5f1dbfe0258547e069cf6f89861431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:41:3d:65:75:da:33:0c:aa:da:73:eb:58:ee:
0d:cf:a6:cd:8d:16:0f:28:00:58:ca:6a:cb:c8:42:
d2:f2:7d:34:4a:da:69:b3:cc:ac:61:dd:b3:c4:47:
d1:d6:2a:c0:0d:be:71:7e:2f:97:98:72:7a:11:0c:
c6:10:ce:af:e2:a5:c5:4b:74:01:06:b2:da:2a:7c:
38:06:06:ea:bc:83:26:58:82:a7:6d:fe:44:d5:e8:
66:df:35:02:e6:02:db:cb:25:24:74:6f:9b:f7:73:
5f:f0:c1:bd:75:22:5d:90:32:74:2a:ee:60:84:c8:
72:64:20:6a:f9:f9:4c:82:2e:8c:d0:f7:f5:62:40:
bf:c8:54:c1:12:68:14:6f:3d:67:ac:0b:b3:5f:f9:
3b:be:b4:aa:8a:bb:8e:f7:ab:1e:22:b5:61:42:c2:
29:7b:e5:70:5d:d9:99:86:f4:bf:d3:20:32:b7:ee:
9a:42:08:13:24:37:22:fa:70:4d:00:26:3b:63:b5:
62:a6:3c:c5:88:e8:f9:60:66:5e:71:7d:4a:9d:01:
d1:1e:2e:13:55:94:88:05:42:92:53:2d:e3:a2:3f:
6d:01:cc:5f:3d:48:1d:cd:c1:f7:a6:4f:28:fa:fa:
fd:70:0d:62:99:1b:b7:17:04:75:4e:ed:20:ad:2c:
3c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D5:CF:08:ED:5F:1D:BF:E0:25:85:47:E0:69:CF:6F:89:86:14:31
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/eNXPCO1fHb_gJYVH4GnPb4mGFDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.221.0/24
77.246.223.0/24
88.80.142.0/23
Signature Algorithm: sha256WithRSAEncryption
45:6c:3a:da:e5:32:f3:44:01:80:b2:6c:bb:9c:b0:a3:5b:1f:
08:f5:9d:e0:4d:21:2c:16:01:6e:cf:72:8a:4e:72:88:b8:ea:
5d:c7:0e:07:98:f9:fc:f8:c6:34:b7:7c:2d:f0:d3:99:70:31:
a0:60:4d:88:db:82:7b:fb:fb:52:07:53:97:7e:32:39:59:c2:
9a:06:15:b9:ad:78:27:76:2e:d4:5f:de:93:a8:e0:0a:1f:96:
b3:4f:65:8b:01:49:7b:37:bd:d2:9f:42:3e:cd:ec:52:b2:0a:
6c:6e:c7:1c:42:ef:31:7c:ab:67:58:fb:6b:51:d6:5f:fb:50:
32:5e:0d:09:e3:b3:02:94:6d:d7:25:03:1b:79:d9:cc:7a:c0:
fa:5d:1f:73:81:55:cb:cd:bc:c6:3b:f9:b4:0e:4d:28:45:49:
2b:ec:47:f8:11:f6:12:3f:44:d7:2b:e6:cc:a0:f1:d6:46:85:
f6:4c:a2:a3:90:ea:c6:a7:d7:5b:1f:60:6d:f9:f9:14:6d:0f:
4b:a7:51:2f:5d:4f:73:c9:db:b2:5e:9e:04:f9:f3:05:20:f6:
7b:ba:b9:fe:2a:d8:c2:d5:7d:4a:69:63:4a:f9:28:c5:c6:f7:
bd:f3:91:61:d5:ee:11:da:26:33:79:b3:dc:24:89:8f:ef:d8:
77:59:2b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:17:39 2026 by rpki-client