Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/e22f5e-b997-4f4b-a821-9bafd5f995ef/1/EmTxLgOX0u1eXdSLbwj1AYSs8Gw.roa
File: EmTxLgOX0u1eXdSLbwj1AYSs8Gw.roa (raw, json)
Hash identifier: ZEwFPYBWkArICUZkIkdL6JG/Cplugs/id++jvH+LHRs=
Subject key identifier: 12:64:F1:2E:03:97:D2:ED:5E:5D:D4:8B:6F:08:F5:01:84:AC:F0:6C
Certificate issuer: /CN=43353579645bbea1c67cda9a91c8b419b52d8344
Certificate serial: 01A0BBCC5A7AEB886C34B5679C2E71F8E1EA
Authority key identifier: 43:35:35:79:64:5B:BE:A1:C6:7C:DA:9A:91:C8:B4:19:B5:2D:83:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzU1eWRbvqHGfNqakci0GbUtg0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e22f5e-b997-4f4b-a821-9bafd5f995ef/1/EmTxLgOX0u1eXdSLbwj1AYSs8Gw.roa
Signing time: Sat 19 Sep 2026 22:32:06 +0000
ROA not before: Sat 19 Sep 2026 22:32:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219477
IP address blocks: 87.247.132.0/24 maxlen: 24
2a02:e700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e22f5e-b997-4f4b-a821-9bafd5f995ef/1/QzU1eWRbvqHGfNqakci0GbUtg0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e22f5e-b997-4f4b-a821-9bafd5f995ef/1/QzU1eWRbvqHGfNqakci0GbUtg0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QzU1eWRbvqHGfNqakci0GbUtg0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bb:cc:5a:7a:eb:88:6c:34:b5:67:9c:2e:71:f8:e1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43353579645bbea1c67cda9a91c8b419b52d8344
Validity
Not Before: Sep 19 22:32:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1264f12e0397d2ed5e5dd48b6f08f50184acf06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5f:46:e3:d8:8f:6a:48:61:9e:06:31:c1:7f:
05:4c:3a:2b:89:3a:b0:3b:9d:d6:96:d1:ec:33:83:
2d:48:40:0c:8e:10:28:3f:ee:1d:30:5f:ad:d2:fe:
55:c0:14:9f:b9:f8:20:24:79:c8:c9:aa:0d:d8:75:
71:35:c1:83:26:d3:bb:60:cc:a5:fb:40:79:44:d4:
a4:55:9b:5a:e7:53:20:54:06:94:3a:90:53:fa:b0:
62:a9:a3:7e:a4:54:a2:17:f1:92:67:6d:8d:43:86:
fd:96:31:af:c7:b4:89:ac:8a:31:8f:0f:3d:ff:43:
5d:ab:b3:b6:a1:81:02:ef:39:58:90:26:74:c9:56:
6c:0f:69:6c:c7:3f:16:ae:01:6b:80:c0:43:04:05:
5e:1e:d6:5b:62:37:05:9e:b2:4c:bf:8f:5d:0c:95:
e3:f8:7c:da:bd:d0:14:9c:f9:1b:f9:9a:3a:84:7d:
6c:c6:66:f6:3e:cf:2c:d9:5e:dc:6a:db:a5:6c:81:
58:ab:66:2f:8e:fb:d4:f4:c8:67:4f:c5:32:ea:fd:
08:37:08:fb:23:e7:84:e5:48:62:b9:17:5a:1d:8e:
bc:3c:f3:60:e9:bb:d1:b0:61:78:67:e9:f1:7f:bf:
99:6f:eb:62:90:5b:2a:ee:0e:09:32:7a:dc:59:5a:
8f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:64:F1:2E:03:97:D2:ED:5E:5D:D4:8B:6F:08:F5:01:84:AC:F0:6C
X509v3 Authority Key Identifier:
keyid:43:35:35:79:64:5B:BE:A1:C6:7C:DA:9A:91:C8:B4:19:B5:2D:83:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzU1eWRbvqHGfNqakci0GbUtg0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e22f5e-b997-4f4b-a821-9bafd5f995ef/1/EmTxLgOX0u1eXdSLbwj1AYSs8Gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e22f5e-b997-4f4b-a821-9bafd5f995ef/1/QzU1eWRbvqHGfNqakci0GbUtg0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.132.0/24
IPv6:
2a02:e700::/48
Signature Algorithm: sha256WithRSAEncryption
a5:fd:58:f2:d4:28:b4:0a:41:66:64:5e:d3:8e:1a:0b:e9:52:
d1:72:32:72:54:8d:6f:f6:62:4b:9f:5e:03:af:d6:c0:d5:83:
0f:85:78:03:c5:49:3c:79:12:41:53:c7:94:79:a9:4b:3a:1c:
71:48:c1:a8:b5:9e:6b:02:0c:cd:f2:63:99:96:25:bf:f7:35:
c1:34:0f:a1:6a:2e:34:d2:49:5c:44:1c:31:05:67:0d:23:ba:
52:54:dc:ed:58:3f:1f:ea:04:c5:84:b9:f6:5f:c9:0d:19:33:
45:e9:28:b8:3c:d9:7a:55:b3:8b:7c:c9:87:20:f9:fa:fe:6f:
4e:04:2e:ef:04:14:fb:d8:b7:b7:26:df:55:e7:e0:07:43:4d:
27:10:7e:38:8c:89:d0:a1:e3:8b:ae:a1:07:5f:24:7b:98:63:
76:03:c9:7a:de:95:99:b3:bc:5c:fb:8b:96:e7:e9:8c:b3:6d:
e2:65:9e:cf:a4:04:b6:86:61:b7:bd:c8:62:73:2a:26:9e:0c:
7b:a4:b1:82:99:07:96:79:dc:53:7b:ab:18:a2:18:9e:03:91:
0d:89:4b:ce:8d:91:0c:a8:99:90:ec:bf:19:09:ff:ca:75:47:
b7:d7:8a:9e:4f:26:5f:07:c1:64:be:6d:e9:6a:48:f6:59:4d:
ac:a3:76:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:19:53 2026 by rpki-client