Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/ezSfvW2twjkVve5nAqFXyJU1V-U.roa
File: ezSfvW2twjkVve5nAqFXyJU1V-U.roa (raw, json)
Hash identifier: yCXYqjDBti2IXbGbDipByX+cxf41rBq8hGllPOt86z4=
Subject key identifier: 7B:34:9F:BD:6D:AD:C2:39:15:BD:EE:67:02:A1:57:C8:95:35:57:E5
Certificate issuer: /CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Certificate serial: 019B7F8503D4AEA73FB4C5B2B502C100E067
Authority key identifier: 32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/ezSfvW2twjkVve5nAqFXyJU1V-U.roa
Signing time: Fri 02 Jan 2026 16:23:02 +0000
ROA not before: Fri 02 Jan 2026 16:23:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31528
IP address blocks: 193.16.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:85:03:d4:ae:a7:3f:b4:c5:b2:b5:02:c1:00:e0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Validity
Not Before: Jan 2 16:23:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b349fbd6dadc23915bdee6702a157c8953557e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:30:b3:69:06:de:d4:2a:72:fe:e0:79:9b:3f:
ba:f6:1f:ab:1f:1d:a2:94:e1:1d:b2:b0:11:28:be:
ef:13:c2:38:04:8d:69:06:d0:53:99:a4:d7:c2:08:
40:22:22:35:ad:a4:3e:44:bb:5d:ee:78:95:56:43:
50:a7:b7:f2:ee:04:64:49:88:21:73:99:6d:b6:2a:
4f:3e:6f:fc:80:6e:02:d4:b5:cd:d3:f3:dc:4e:d7:
0a:ae:39:97:b0:67:f6:a9:7a:e1:e7:c9:f5:48:a2:
1f:fe:35:0e:0f:e5:2d:90:03:31:4a:50:ab:af:de:
1c:7f:c7:34:1b:01:ac:97:0d:db:81:63:71:2a:b9:
f5:2b:9e:b8:aa:9f:92:72:14:3a:2b:50:99:ef:33:
df:19:32:55:b5:11:44:25:4c:7c:c6:a4:fe:2a:46:
da:13:2b:8d:c4:2e:c5:bf:ba:89:1a:ea:21:3a:96:
3f:58:31:a5:e8:61:ad:ae:1d:8d:d0:50:4f:48:dd:
cf:b4:eb:9f:6f:fb:86:8c:a8:b1:a3:5c:42:04:5d:
f4:5b:f4:80:8b:61:a3:fe:7f:40:bf:36:f6:57:cb:
93:8d:09:a1:43:5c:95:ec:56:99:fc:c5:11:0c:c0:
3b:77:a2:4c:42:09:da:cc:9f:e3:57:d4:9e:6d:59:
6c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:34:9F:BD:6D:AD:C2:39:15:BD:EE:67:02:A1:57:C8:95:35:57:E5
X509v3 Authority Key Identifier:
keyid:32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/ezSfvW2twjkVve5nAqFXyJU1V-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.107.0/24
Signature Algorithm: sha256WithRSAEncryption
76:7f:c8:45:fa:f0:b0:b8:40:c0:bd:3b:85:52:2d:54:c2:75:
34:ac:6e:62:54:31:55:07:1b:fe:2c:70:7a:d9:37:30:65:82:
68:8a:a9:d2:47:92:06:29:0c:c4:1b:a7:66:78:92:ec:0d:1a:
5f:18:35:d3:de:95:9c:2c:8f:ba:7b:db:a8:2b:cd:af:48:16:
77:37:d8:40:42:c1:ec:a5:4a:94:59:14:33:ab:a8:cc:09:93:
13:8e:88:f4:dc:22:ec:96:bc:40:2f:a5:71:23:c0:aa:f5:8a:
c6:29:71:0b:52:37:b5:4e:a2:e1:f3:d1:d5:14:c0:04:cc:f7:
f7:b6:49:9a:56:bb:90:6e:0f:f9:52:5b:0d:01:e7:e5:7c:1e:
49:49:3a:47:54:30:88:79:a3:4a:21:8a:2c:8c:16:47:97:2d:
f5:6b:00:53:ee:7c:f9:49:e1:df:ed:00:79:0c:9d:05:54:41:
e7:66:83:e0:7d:86:6f:f7:0a:0b:a9:d5:fb:14:a6:38:40:1e:
dd:b0:f9:33:72:2a:b2:a9:13:f1:2a:d0:67:51:38:a4:c7:c7:
3a:02:d6:3d:36:9e:9e:ec:02:60:04:55:61:cc:c6:45:b9:9a:
25:08:27:9b:b7:47:ba:37:c6:c4:1f:df:7d:54:28:33:7a:ff:
02:ef:b8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:14:45 2026 by rpki-client