Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/eKPo8KqYIDnsAPIOylUfknn_lOA.roa
File: eKPo8KqYIDnsAPIOylUfknn_lOA.roa (raw, json)
Hash identifier: WXfUp61NO+QV6o3kxlalE/MVA9vTXlllKhfZCGG66yg=
Subject key identifier: 78:A3:E8:F0:AA:98:20:39:EC:00:F2:0E:CA:55:1F:92:79:FF:94:E0
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 019D452BE49A979777F0C9BADF0FCB53D91A
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/eKPo8KqYIDnsAPIOylUfknn_lOA.roa
Signing time: Tue 31 Mar 2026 18:33:17 +0000
ROA not before: Tue 31 Mar 2026 18:33:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 80.246.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:45:2b:e4:9a:97:97:77:f0:c9:ba:df:0f:cb:53:d9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Mar 31 18:33:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78a3e8f0aa982039ec00f20eca551f9279ff94e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:f0:eb:92:9c:6e:12:e9:76:51:3e:f4:b4:
9c:60:49:04:d4:71:e0:06:05:9d:24:57:7e:8f:7b:
a2:0b:b2:b2:82:55:01:12:d9:f8:14:48:08:fb:fa:
a3:27:b4:09:de:d7:2d:1d:9f:22:d0:a6:24:b4:fe:
00:be:17:8b:24:66:4a:c1:79:a2:a1:28:01:9a:ab:
b5:1d:ab:5a:d4:f1:9c:c8:1b:48:2d:de:5c:07:56:
d4:ca:fd:fc:49:2b:10:d6:b9:b1:11:da:0f:b6:fd:
0a:71:29:3c:5b:c4:83:17:ed:5e:fd:eb:58:5e:16:
07:01:04:06:6e:2e:9b:f1:f4:3f:fa:35:ed:be:67:
2b:62:a9:3d:0e:8c:c1:ec:65:1a:91:c5:dd:fd:88:
17:11:93:7a:2d:c7:8b:70:a6:93:b7:32:12:74:cd:
2a:f5:2b:ef:0d:36:2c:2e:00:24:c7:91:fa:c2:70:
36:5a:b7:8f:dc:6e:73:87:90:78:0b:0d:5d:1a:58:
64:af:29:ed:cf:4c:08:2e:70:f2:13:19:d9:d6:61:
ed:76:0e:fa:72:2c:68:95:62:85:15:55:68:08:d4:
e0:65:42:e6:52:02:e0:b3:52:b1:99:be:b9:e9:20:
3c:3a:dd:0c:1e:9e:e4:e2:da:e3:bf:eb:f9:31:4b:
3c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A3:E8:F0:AA:98:20:39:EC:00:F2:0E:CA:55:1F:92:79:FF:94:E0
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/eKPo8KqYIDnsAPIOylUfknn_lOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.232.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:f5:66:76:c3:90:95:06:56:2f:f2:13:f4:9f:67:26:57:5d:
48:b7:4c:30:6f:08:fd:79:fe:2d:7f:d0:51:5a:02:7d:4f:b5:
cb:28:35:41:7e:8d:70:5d:23:23:34:c3:94:ba:33:e0:63:98:
3c:8c:e4:87:27:91:f7:42:e8:9b:68:db:27:41:7f:a0:1a:65:
48:d2:95:bb:4f:94:6e:8c:e2:e8:57:61:47:5d:57:db:1f:b2:
ff:30:c3:f3:6c:75:40:84:bb:1d:2c:87:60:be:e2:1a:36:c5:
0b:a9:51:6b:e2:11:1a:7d:8d:39:79:c2:97:dd:33:fc:a9:6f:
a6:9c:77:c7:25:dd:e1:29:72:67:a3:c2:9c:35:fe:db:c2:b7:
1c:15:9f:bd:65:fc:95:77:e6:27:7b:3a:a7:a6:4f:8b:ec:d6:
fd:f3:01:45:70:3f:93:af:79:f1:6d:d9:ba:4c:91:62:45:01:
73:6f:19:88:da:cf:f3:23:89:97:24:4f:f4:d8:8e:38:1d:b8:
9b:b3:53:7f:4f:77:f7:10:00:f2:63:c7:f8:ea:e7:42:0b:63:
e5:68:dc:cd:6e:8b:d5:34:81:e8:61:d2:b0:d7:26:e3:0b:0c:
7d:8e:12:20:dc:42:b7:26:65:f1:f5:52:4f:67:be:74:ad:0c:
3b:61:d6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:33:46 2026 by rpki-client