Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/83a373-c45a-457d-8687-ca0c8e5dc849/1/eMmjxl2ax4RboNyy7t7DciWI2GY.roa
File: eMmjxl2ax4RboNyy7t7DciWI2GY.roa (raw, json)
Hash identifier: OxpJEytqLM1clRPMJ3w5XoDWzMhouly5oIX7Pec1B2c=
Subject key identifier: 78:C9:A3:C6:5D:9A:C7:84:5B:A0:DC:B2:EE:DE:C3:72:25:88:D8:66
Certificate issuer: /CN=49c73bc2ce2154026034bc3b90bd63831f78b005
Certificate serial: 01A06D4F1E70907BC8D338EB9C264BFAEF88
Authority key identifier: 49:C7:3B:C2:CE:21:54:02:60:34:BC:3B:90:BD:63:83:1F:78:B0:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Scc7ws4hVAJgNLw7kL1jgx94sAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/83a373-c45a-457d-8687-ca0c8e5dc849/1/eMmjxl2ax4RboNyy7t7DciWI2GY.roa
Signing time: Fri 04 Sep 2026 16:44:56 +0000
ROA not before: Fri 04 Sep 2026 16:44:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 185.34.68.0/22 maxlen: 22
193.27.72.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/83a373-c45a-457d-8687-ca0c8e5dc849/1/Scc7ws4hVAJgNLw7kL1jgx94sAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/83a373-c45a-457d-8687-ca0c8e5dc849/1/Scc7ws4hVAJgNLw7kL1jgx94sAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Scc7ws4hVAJgNLw7kL1jgx94sAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:4f:1e:70:90:7b:c8:d3:38:eb:9c:26:4b:fa:ef:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c73bc2ce2154026034bc3b90bd63831f78b005
Validity
Not Before: Sep 4 16:44:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78c9a3c65d9ac7845ba0dcb2eedec3722588d866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:9a:28:80:77:76:db:db:97:22:d1:e0:f5:
96:b5:bd:52:10:71:60:8b:91:e9:52:dc:a0:13:47:
e8:1f:bf:ab:b8:31:37:e9:30:34:c1:d6:ac:16:14:
45:fc:ba:bc:40:68:45:2d:79:4f:9c:ee:99:bf:9b:
97:fb:7a:c4:80:0f:21:f4:b4:25:b9:f1:de:59:d2:
ba:e5:39:f0:eb:2e:f8:57:98:78:08:d0:3e:2a:88:
f2:2b:ed:3d:50:bc:91:0d:94:02:83:4c:a7:ee:71:
c5:68:f9:da:49:8e:b0:67:ae:5a:80:44:30:27:d0:
a1:67:44:95:cd:85:d1:bb:cb:de:08:fa:8b:6a:67:
76:f6:79:10:bd:c9:37:68:65:52:57:59:83:1b:ef:
44:dc:68:6e:be:30:32:b2:40:05:bc:d4:3d:4f:c3:
4b:6f:40:f4:ef:3c:87:a2:6a:4a:c0:2a:e2:b3:74:
c8:ee:25:7a:fe:f1:51:26:86:f9:c5:e8:fb:89:fc:
08:20:93:0f:52:6f:37:30:d5:6f:ae:65:c9:e3:68:
8f:dc:5f:a0:91:8f:79:da:e3:9d:5d:54:23:20:2b:
41:a6:e5:bd:b7:45:cf:b8:5f:23:eb:ef:b6:e9:cc:
33:51:8f:88:70:f6:c9:58:0a:cf:1c:0e:0e:f9:21:
e9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C9:A3:C6:5D:9A:C7:84:5B:A0:DC:B2:EE:DE:C3:72:25:88:D8:66
X509v3 Authority Key Identifier:
keyid:49:C7:3B:C2:CE:21:54:02:60:34:BC:3B:90:BD:63:83:1F:78:B0:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Scc7ws4hVAJgNLw7kL1jgx94sAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/83a373-c45a-457d-8687-ca0c8e5dc849/1/eMmjxl2ax4RboNyy7t7DciWI2GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/83a373-c45a-457d-8687-ca0c8e5dc849/1/Scc7ws4hVAJgNLw7kL1jgx94sAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.68.0/22
193.27.72.0/23
Signature Algorithm: sha256WithRSAEncryption
95:0f:a8:24:3d:9d:17:c5:ee:03:6b:d0:ae:ce:4e:53:51:f6:
56:bb:df:11:a7:22:f9:ee:b3:59:52:09:95:97:a4:88:71:70:
67:8d:75:95:82:8f:75:fb:7b:7f:01:46:8b:cd:cd:2f:70:ef:
67:a0:86:81:fb:24:c6:ce:c1:b1:80:4e:cb:b6:ac:d2:92:34:
f3:24:55:bd:5d:16:bc:a8:c3:5a:70:9f:c4:6d:23:00:7c:98:
80:60:2f:26:40:cb:2d:cf:e2:29:e5:5b:a7:8e:77:f6:e3:98:
65:58:40:77:e4:1e:78:4a:b5:6f:5c:45:65:ec:38:58:8d:ed:
df:8d:a6:53:70:97:25:3b:0a:fd:bd:b4:a7:78:96:8a:fd:10:
39:96:17:00:eb:b8:92:56:35:18:c9:2a:4f:47:37:e0:74:7a:
d0:39:9e:82:8f:8b:71:a7:7f:c5:fa:bb:af:3a:5d:14:e1:fe:
0e:8c:b0:fd:6e:a6:b5:43:1a:9f:5e:2b:01:08:2d:27:ab:4d:
9e:c3:95:9d:90:e9:1a:d8:59:59:e3:a6:7f:1b:c0:77:d8:48:
69:0e:89:41:36:65:7e:79:2b:a3:8f:f8:c0:a2:67:cb:04:e7:
c0:7a:54:6e:58:97:1e:ef:d3:35:96:60:de:61:57:d4:00:6e:
f6:85:1a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:48 2026 by rpki-client