Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/E_fsK2xkMQPa9f4KE0p5s-E33Rs.roa
File: E_fsK2xkMQPa9f4KE0p5s-E33Rs.roa (raw, json)
Hash identifier: fBstBj+krtA4Tx9gbY6Hp+BWosNY6KbmZu55yGuUOb4=
Subject key identifier: 13:F7:EC:2B:6C:64:31:03:DA:F5:FE:0A:13:4A:79:B3:E1:37:DD:1B
Certificate issuer: /CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Certificate serial: 019B7F15663FD09B856B3ED01D1C3DE02538
Authority key identifier: 79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/E_fsK2xkMQPa9f4KE0p5s-E33Rs.roa
Signing time: Fri 02 Jan 2026 14:21:07 +0000
ROA not before: Fri 02 Jan 2026 14:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205787
IP address blocks: 185.206.180.0/24 maxlen: 24
185.206.181.0/24 maxlen: 24
185.206.182.0/24 maxlen: 24
185.206.183.0/24 maxlen: 24
2a0b:1640:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:66:3f:d0:9b:85:6b:3e:d0:1d:1c:3d:e0:25:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Validity
Not Before: Jan 2 14:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13f7ec2b6c643103daf5fe0a134a79b3e137dd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:eb:b5:74:96:2c:d1:4d:0a:25:85:b1:41:fb:
5e:7a:51:43:10:76:99:d6:80:73:33:a1:a3:d8:4b:
76:f3:8e:f0:b0:31:aa:a3:c1:71:76:cb:27:85:e9:
f8:ab:87:c0:5f:dc:d9:fe:78:c5:15:f7:9e:2f:da:
1f:32:c9:4d:de:82:4e:a8:3f:21:8b:ce:94:d8:65:
03:24:90:4f:0e:fb:b7:11:d6:71:52:75:a1:9a:8a:
f4:6b:73:01:00:bf:22:95:69:bd:d3:66:b6:2d:f0:
a8:9f:5d:21:81:b0:10:23:f3:70:e2:a2:dd:77:3e:
b6:40:ab:a5:db:64:bf:21:a6:14:51:37:e7:ef:11:
94:63:df:30:c4:07:35:ff:ad:07:94:e0:2e:b8:8b:
11:d3:c3:39:8d:3e:a4:eb:d3:d3:77:fe:f5:23:02:
12:29:6d:5a:b1:93:22:f6:d4:fb:05:39:39:7e:8e:
ca:64:b1:eb:3a:ab:aa:d0:04:13:95:c2:42:f9:5d:
eb:21:b5:8e:9e:12:1b:8d:56:9c:5d:1c:a0:41:c9:
f8:d3:cc:9a:97:96:83:f2:b2:c1:bf:4a:44:70:75:
2d:48:30:72:7e:48:4b:a3:66:70:8b:d6:b1:4d:32:
65:2b:2b:32:da:91:3b:c0:f3:db:c3:38:e0:e7:98:
6d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F7:EC:2B:6C:64:31:03:DA:F5:FE:0A:13:4A:79:B3:E1:37:DD:1B
X509v3 Authority Key Identifier:
keyid:79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/E_fsK2xkMQPa9f4KE0p5s-E33Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.180.0/22
IPv6:
2a0b:1640:1::/48
Signature Algorithm: sha256WithRSAEncryption
60:1d:f1:2b:93:57:56:58:54:bb:5c:09:c2:d5:4b:ee:b0:2a:
b0:4b:f9:1e:e2:59:67:4a:99:b5:e8:3e:f7:0f:c1:31:c0:d5:
00:86:ea:32:32:83:b5:ce:45:61:c4:88:01:45:e5:d9:b6:a6:
e6:53:3b:be:56:a0:38:26:82:62:6e:9e:e2:2e:a6:30:2c:87:
a9:8c:2a:8a:ca:54:2b:63:5b:8e:c9:e1:f1:33:de:4d:90:10:
29:da:1b:d7:35:d0:ed:7b:e6:c8:54:81:56:a9:cc:2c:56:bb:
44:0e:30:96:d6:f8:6d:38:06:92:02:f9:5d:e8:e8:86:a2:c4:
ed:be:65:dc:e9:9a:e2:9c:38:a0:32:18:25:13:3d:83:3f:55:
a6:a4:d3:0f:e0:55:2a:f3:a2:72:6e:12:03:69:8b:95:f4:f3:
57:87:04:3c:bb:aa:6e:0a:e8:96:82:fa:be:69:8d:84:d1:9f:
50:40:a5:01:8a:cd:1a:34:ca:8f:d3:12:4f:76:24:98:de:e7:
33:7b:61:e1:9d:f2:64:b5:af:c3:4a:b9:0d:84:d1:cf:dc:83:
28:b5:25:75:48:32:e9:01:d2:16:28:16:a7:c9:ee:9a:c3:c9:
3d:72:85:bf:29:41:d2:df:b6:4c:3e:0b:f5:a7:55:d5:db:a8:
66:e1:14:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:35:18 2026 by rpki-client