Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/1eGYTZkzkTnzgcwMjAg4TYC4oMg.roa
File: 1eGYTZkzkTnzgcwMjAg4TYC4oMg.roa (raw, json)
Hash identifier: N0Pwrl6Apuf0Y0kUqHgS0KkfrpMsU0M2q1pXnEawL28=
Subject key identifier: D5:E1:98:4D:99:33:91:39:F3:81:CC:0C:8C:08:38:4D:80:B8:A0:C8
Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Certificate serial: 019B7EA7302209A3BD4755EAAA1A4F653878
Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/1eGYTZkzkTnzgcwMjAg4TYC4oMg.roa
Signing time: Fri 02 Jan 2026 12:20:44 +0000
ROA not before: Fri 02 Jan 2026 12:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210185
IP address blocks: 194.56.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:30:22:09:a3:bd:47:55:ea:aa:1a:4f:65:38:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Validity
Not Before: Jan 2 12:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5e1984d99339139f381cc0c8c08384d80b8a0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:72:59:b4:c8:4c:33:3d:60:4c:7d:01:ab:
f7:4f:7e:00:7d:02:97:65:f0:03:5f:30:92:ae:da:
8f:ed:31:58:99:4a:37:38:e9:52:2e:63:11:ca:5a:
95:59:5b:a3:4a:5f:b2:96:e5:27:0e:fa:c8:39:90:
fc:f2:cf:37:20:e5:02:fe:54:c6:58:58:c5:38:d7:
9d:12:49:11:b2:0e:c9:90:65:d5:f9:e9:c3:91:e5:
19:55:61:bb:21:56:36:f3:10:f0:99:01:b4:49:05:
41:eb:1a:a5:90:4a:09:47:33:15:e3:a9:59:0a:5d:
6f:97:4a:34:cf:d3:bb:61:7b:e8:06:ca:27:a4:48:
12:bf:91:55:d8:30:c8:6a:51:2d:d6:11:c9:9e:bc:
85:88:85:2d:a8:49:a0:71:7f:0f:ac:2e:dd:b6:96:
5e:d6:09:36:a4:b4:b5:dd:a5:88:e4:88:8f:ef:6b:
e8:9f:bb:bf:ea:d8:6f:30:7a:9a:a3:4c:c5:bc:c0:
b3:eb:cc:be:1d:63:cc:1d:4a:c6:3f:92:b9:cf:95:
1e:67:fa:db:fd:5b:2a:f4:9b:ef:fb:bf:38:73:f4:
47:96:26:54:9e:db:69:4b:bf:9b:a3:7d:97:29:bc:
73:97:60:ca:b2:42:7c:c4:08:37:1e:7e:64:37:89:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E1:98:4D:99:33:91:39:F3:81:CC:0C:8C:08:38:4D:80:B8:A0:C8
X509v3 Authority Key Identifier:
keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/1eGYTZkzkTnzgcwMjAg4TYC4oMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.80.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:9d:7e:e6:00:6d:ca:b7:1f:81:a3:a3:20:fa:79:85:05:de:
63:a9:39:79:b8:e1:5e:66:fd:b6:e8:e8:72:b3:4d:4c:ad:3a:
56:c8:65:61:b5:d7:83:4e:b7:6b:1a:a7:ea:cc:c4:80:8e:cc:
2e:9d:a8:5e:b6:01:e7:a3:50:4e:20:76:8f:65:33:c2:54:8f:
7f:84:4f:2b:15:3f:e6:21:15:ba:80:79:2b:6d:3d:69:fb:87:
db:dd:b3:29:d5:18:6c:fa:97:78:72:8b:03:cb:0e:df:44:cb:
23:4b:61:bc:eb:14:0a:23:a0:26:bb:86:d6:ce:37:c6:f0:e4:
70:40:d9:5b:60:90:8e:19:08:d4:9c:9f:72:66:63:0a:25:ff:
2a:11:fa:2e:75:02:8e:68:56:a8:3f:db:b3:b1:06:cb:2d:aa:
14:e0:59:42:6f:a2:23:19:98:d4:df:e0:e2:8c:68:90:22:d4:
ab:65:29:e2:28:74:76:9e:e1:cc:0a:5c:59:be:8b:48:6b:1b:
39:c7:7c:08:55:35:c7:9b:12:a4:9b:7b:95:6e:7c:65:f9:57:
b3:17:44:eb:8d:b0:b3:0b:e3:92:0a:13:07:51:e6:a1:e7:c0:
4b:20:0f:b5:d2:df:8a:84:19:23:38:bf:53:55:ba:a6:73:62:
ce:22:6f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:52:14 2026 by rpki-client