Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/1ebdJn7q31yzO4vPm0KTA5dehZ0.roa
File: 1ebdJn7q31yzO4vPm0KTA5dehZ0.roa (raw, json)
Hash identifier: FJfyAVyuZ41NDlg5/9Snjyqb1W6SkQjWpFyYtXWXN6w=
Subject key identifier: D5:E6:DD:26:7E:EA:DF:5C:B3:3B:8B:CF:9B:42:93:03:97:5E:85:9D
Certificate issuer: /CN=ed12b5f335fb92e8c32970c44616e01eaf239ab0
Certificate serial: 01A186AEB7E9C1D93577632893DC322DC52B
Authority key identifier: ED:12:B5:F3:35:FB:92:E8:C3:29:70:C4:46:16:E0:1E:AF:23:9A:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7RK18zX7kujDKXDERhbgHq8jmrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/1ebdJn7q31yzO4vPm0KTA5dehZ0.roa
Signing time: Thu 29 Oct 2026 08:02:39 +0000
ROA not before: Thu 29 Oct 2026 08:02:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 149.134.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7RK18zX7kujDKXDERhbgHq8jmrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 05:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:ae:b7:e9:c1:d9:35:77:63:28:93:dc:32:2d:c5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed12b5f335fb92e8c32970c44616e01eaf239ab0
Validity
Not Before: Oct 29 08:02:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5e6dd267eeadf5cb33b8bcf9b429303975e859d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:27:89:48:93:84:ba:b6:8b:e6:9b:4f:fe:
ea:1c:4a:1d:0f:a7:a1:a1:d8:46:ad:61:a6:47:94:
d3:36:f9:fa:60:ff:d5:96:15:1e:1b:ff:31:77:4b:
d5:06:b5:a4:6d:ab:cf:d9:1b:03:6b:a3:e9:5f:f5:
a3:34:0b:92:ff:f9:c3:52:42:4c:03:2d:3d:29:ec:
a2:80:9e:ab:eb:bb:57:27:37:fc:43:f8:c8:3a:33:
8e:5e:10:c7:a6:10:4d:11:4e:10:2b:28:f3:e8:b3:
d2:58:23:30:7a:48:22:7e:90:e1:7d:46:95:24:e6:
1f:42:4c:9b:01:ed:02:75:3d:94:9a:a1:1c:ad:07:
7a:83:06:33:9c:0e:1c:7c:15:66:58:1c:28:ad:4d:
d2:44:be:1c:cb:d6:10:0e:89:f1:4b:3a:56:e6:b1:
b4:17:c6:ee:31:a3:10:9d:a2:43:16:92:17:0d:7f:
5a:10:66:b4:6d:6a:7a:6d:fc:21:5a:a2:dc:d5:19:
25:ea:69:43:ec:20:31:61:92:79:fe:81:97:11:9b:
4c:32:81:0f:8d:4e:ce:78:a1:29:d5:f8:86:55:77:
b2:3d:18:24:18:0b:64:22:1b:e9:96:cc:c0:2e:5f:
1c:12:b5:b0:a2:04:9d:2e:96:53:37:28:f1:0f:83:
2f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E6:DD:26:7E:EA:DF:5C:B3:3B:8B:CF:9B:42:93:03:97:5E:85:9D
X509v3 Authority Key Identifier:
keyid:ED:12:B5:F3:35:FB:92:E8:C3:29:70:C4:46:16:E0:1E:AF:23:9A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7RK18zX7kujDKXDERhbgHq8jmrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/1ebdJn7q31yzO4vPm0KTA5dehZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.134.173.0/24
Signature Algorithm: sha256WithRSAEncryption
05:87:9e:1d:cd:29:ad:ee:4e:38:71:bb:db:32:9c:5c:f3:01:
2a:60:cf:6e:98:56:e6:f2:e1:1d:3e:e8:12:13:64:fd:4a:df:
5f:a1:32:bf:33:d3:b8:5f:50:af:fd:53:4b:80:58:ab:f7:5f:
dc:4a:9f:85:50:59:db:21:57:ae:f5:31:f8:d4:a2:cd:5a:dd:
3a:6f:0e:83:b2:fe:84:85:90:27:0b:ee:1b:d8:1a:6d:12:05:
a0:a2:23:1e:a5:e8:1e:d9:c7:8d:bd:71:51:88:7f:34:7e:cb:
e3:f9:96:3a:5b:01:0c:8c:fe:e3:fb:55:8a:aa:84:8a:27:35:
7a:47:35:42:5e:6d:64:f9:d6:04:66:f1:5b:85:a9:cd:22:eb:
2a:7c:c0:23:71:ce:69:2d:bf:5b:86:f6:02:a6:0e:be:f2:47:
4d:c9:73:54:ea:48:e3:8e:11:96:6e:ff:bf:88:82:88:9e:21:
e0:70:d1:d4:b6:ae:02:ba:79:9b:37:32:b3:0d:d2:56:b3:8b:
4d:d6:ce:3b:a6:4d:2a:ca:55:46:24:d6:a3:b3:af:0e:12:20:
ab:f4:d2:3e:37:70:10:f8:2b:a8:e8:a5:26:9d:49:1e:b0:b7:
f9:2d:92:ab:c7:c8:f4:a8:54:e0:a3:b4:81:5e:ad:08:97:10:
8a:0e:ac:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:01:43 2026 by rpki-client