Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/EeCb3xsgZulN1LmF6ikRslFxSCw.roa
File: EeCb3xsgZulN1LmF6ikRslFxSCw.roa (raw, json)
Hash identifier: jjFm2wg01dKI6dAHnYnTU6ux1bEVbh+vpvsqWitVX/U=
Subject key identifier: 11:E0:9B:DF:1B:20:66:E9:4D:D4:B9:85:EA:29:11:B2:51:71:48:2C
Certificate issuer: /CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
Certificate serial: 019B7834FF56C05079F9A958CA914F5C891B
Authority key identifier: 43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/EeCb3xsgZulN1LmF6ikRslFxSCw.roa
Signing time: Thu 01 Jan 2026 06:18:17 +0000
ROA not before: Thu 01 Jan 2026 06:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47417
IP address blocks: 77.73.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:ff:56:c0:50:79:f9:a9:58:ca:91:4f:5c:89:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
Validity
Not Before: Jan 1 06:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11e09bdf1b2066e94dd4b985ea2911b25171482c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:09:32:71:b3:89:60:03:cc:70:39:6e:cd:
33:48:b1:7c:45:8e:05:82:c6:d8:3f:01:fe:ab:ee:
bd:79:79:52:49:88:fd:f1:ef:bf:19:e7:3a:9d:09:
6c:e1:4c:38:36:c9:84:0a:a0:d6:e7:9c:79:67:98:
92:90:8d:5b:19:78:7d:58:c0:f4:84:9e:16:26:ef:
42:87:1c:ee:3d:21:d0:c0:83:4b:f2:06:32:c8:0c:
1c:6f:2e:78:74:94:1e:b7:d6:4b:d2:31:4a:7e:63:
9c:40:3f:23:27:df:8a:8a:99:bd:b5:cf:47:e9:32:
91:bf:e8:d3:7d:f4:8b:60:28:09:5f:e4:74:17:30:
7e:da:83:c8:8f:7f:7e:1e:1a:f5:50:8b:43:80:ff:
46:75:12:02:0f:41:b6:04:07:00:63:19:cd:d7:cb:
7d:32:6d:f7:70:0f:ad:18:c6:71:47:df:87:e0:47:
ab:c3:ac:7c:bd:b9:d0:32:2f:bb:62:23:02:a0:97:
6f:72:98:0a:05:8b:60:81:e6:67:fa:a2:4a:cb:e7:
05:f3:ef:a9:2a:72:75:a4:e7:bf:8a:9f:5c:64:d1:
77:5d:6b:37:cc:ff:61:f6:c4:7c:e2:bd:43:ca:d3:
d6:9d:88:24:63:b0:e5:fb:8d:bd:34:ad:22:6e:d2:
09:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E0:9B:DF:1B:20:66:E9:4D:D4:B9:85:EA:29:11:B2:51:71:48:2C
X509v3 Authority Key Identifier:
keyid:43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/EeCb3xsgZulN1LmF6ikRslFxSCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.208.0/21
Signature Algorithm: sha256WithRSAEncryption
62:cb:e8:9e:27:84:ba:29:2a:d0:b4:63:9b:c1:ef:51:fa:29:
1a:9b:bf:84:08:08:9c:58:5a:f0:a7:bb:60:58:61:ea:51:ef:
1e:44:88:16:69:9b:f6:5a:37:cf:be:61:4e:81:27:47:56:9f:
b9:73:5c:5f:4b:8d:45:1a:9d:b3:6e:a2:f7:09:23:a8:91:48:
f2:5d:6c:6c:17:22:54:e4:a4:3f:f0:48:90:a1:1b:e7:86:8e:
be:fe:38:3e:8e:51:4a:86:41:e6:33:af:ad:9e:15:42:44:f9:
44:16:b6:f1:ae:70:ca:85:94:16:20:4a:de:b0:dc:c1:21:c6:
66:7d:9f:1e:c2:1e:41:46:f2:22:59:dc:59:89:ce:56:16:c9:
8f:bc:24:96:c1:01:46:24:97:26:d5:14:2f:65:fa:f1:97:4b:
fe:47:71:74:2b:cd:c9:e0:a7:dd:ee:f9:13:6c:de:7b:16:1d:
a4:07:a2:07:96:cc:07:f0:16:3a:28:b7:86:44:85:63:78:47:
f4:34:ed:b7:73:de:5f:ec:16:88:23:39:7f:24:28:c0:64:e5:
b6:57:03:e5:fe:8c:4b:b4:08:4c:4c:7d:9a:89:94:ad:62:f3:
8d:26:6b:92:31:95:93:f9:49:ea:b4:d4:8e:38:f5:15:df:92:
6b:28:a2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:45:36 2026 by rpki-client