Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/Eja0CE3ZxbDf7o-_WJU2Gi-eewc.roa
File: Eja0CE3ZxbDf7o-_WJU2Gi-eewc.roa (raw, json)
Hash identifier: fP4z0QfDdb5/q/K705XT9QrkxFFgOo2XV/DFWmhk+oA=
Subject key identifier: 12:36:B4:08:4D:D9:C5:B0:DF:EE:8F:BF:58:95:36:1A:2F:9E:7B:07
Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial: 019D7D337F64961C8CE62ED56C79DF7BAA77
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/Eja0CE3ZxbDf7o-_WJU2Gi-eewc.roa
Signing time: Sat 11 Apr 2026 15:40:20 +0000
ROA not before: Sat 11 Apr 2026 15:40:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210705
IP address blocks: 87.248.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7d:33:7f:64:96:1c:8c:e6:2e:d5:6c:79:df:7b:aa:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Validity
Not Before: Apr 11 15:40:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1236b4084dd9c5b0dfee8fbf5895361a2f9e7b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:32:04:cb:6d:3b:6f:56:71:da:8c:bf:4a:a4:
0f:1e:59:31:bc:54:65:b6:c4:30:2d:4f:97:b1:d3:
f3:67:a0:1f:ae:03:c5:c8:b5:99:96:58:83:2a:c4:
0d:0c:4e:07:a7:10:1b:50:b2:6d:83:e9:ed:f6:a1:
7c:d7:95:a3:48:29:7f:ce:94:be:07:43:1c:55:6c:
02:b6:a3:a8:62:62:4a:2c:07:00:69:0b:9b:c8:15:
65:d8:8a:43:17:e1:80:31:34:53:f4:b7:8b:7c:f4:
f3:5a:b7:31:43:03:73:04:4a:bb:37:38:68:de:e8:
61:fe:24:6b:e1:c9:1f:e2:dd:74:82:72:1f:ac:6e:
75:ec:41:a3:39:25:24:4f:e0:d4:77:9d:08:1f:9e:
de:d1:13:14:8c:b9:ae:51:d1:b6:54:27:c8:3b:75:
58:95:61:91:6a:5c:50:86:a8:5d:e7:23:cf:40:d0:
c8:29:49:dd:0b:e1:49:cf:29:53:da:14:91:26:42:
56:56:c9:80:f3:0b:de:1d:db:4b:92:bd:cb:2e:c3:
3e:32:44:e7:8b:7f:c7:6e:fb:cd:ef:c5:52:0a:34:
e7:9d:2d:56:18:bf:8b:6c:95:d2:81:3d:55:63:8f:
9b:f3:75:a9:64:e0:1e:f4:f5:f3:92:b2:1c:28:10:
8b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:36:B4:08:4D:D9:C5:B0:DF:EE:8F:BF:58:95:36:1A:2F:9E:7B:07
X509v3 Authority Key Identifier:
keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/Eja0CE3ZxbDf7o-_WJU2Gi-eewc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:03:cb:f5:43:2a:02:50:d1:58:2a:b3:86:cc:b8:9f:19:bc:
8d:71:e7:4a:41:4b:61:d9:54:ff:33:61:28:e8:56:d3:76:6d:
be:63:94:37:89:42:d7:42:eb:2f:05:38:b8:c5:85:23:2b:64:
6d:85:d2:31:2f:1b:14:b4:c0:f0:5e:f8:4c:80:fe:e9:2e:ee:
be:43:7f:d0:69:30:16:05:5a:e9:08:47:fb:24:5d:26:48:a2:
47:09:8a:f4:0a:8b:d6:85:a3:2e:4e:49:f5:c0:05:e8:1d:41:
89:61:43:f1:1a:d1:ce:a3:d7:2d:73:3a:fe:be:07:96:ea:4f:
95:92:fd:3f:c4:ee:53:4c:3c:26:fb:e1:ca:ca:6b:88:4e:7b:
a5:31:f3:a3:64:0e:56:85:ad:fe:45:e6:43:2e:cc:91:2a:f1:
0e:12:3c:ac:3c:be:df:6f:2a:6f:8f:31:ff:78:8f:d6:20:f5:
08:06:02:77:88:87:cc:5d:60:62:8d:fb:00:16:34:88:4a:8d:
00:75:9f:f4:05:e2:07:7a:e4:7f:57:07:68:79:ad:e4:1d:84:
07:e0:1e:f0:57:4d:4f:fc:b9:42:d5:33:38:34:7c:b0:a7:9e:
ff:66:49:5b:5d:f3:69:50:9a:3b:f2:15:39:86:a3:96:a6:d8:
cd:11:a9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:06 2026 by rpki-client