Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/Ei3aWkPls_AzS2jY10p19EPkpsk.roa
File: Ei3aWkPls_AzS2jY10p19EPkpsk.roa (raw, json)
Hash identifier: zb4SB34oJRAPczxZgNNmiB+q3XRqPpneSMS6PliMhAI=
Subject key identifier: 12:2D:DA:5A:43:E5:B3:F0:33:4B:68:D8:D7:4A:75:F4:43:E4:A6:C9
Certificate issuer: /CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
Certificate serial: 019FA8D7F9E0FA05F81FEF3087F2CA0AFADA
Authority key identifier: 33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/Ei3aWkPls_AzS2jY10p19EPkpsk.roa
Signing time: Tue 28 Jul 2026 13:09:14 +0000
ROA not before: Tue 28 Jul 2026 13:09:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48943
IP address blocks: 94.136.0.0/19 maxlen: 24
185.36.16.0/22 maxlen: 24
185.202.148.0/23 maxlen: 23
2a02:ab8::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d7:f9:e0:fa:05:f8:1f:ef:30:87:f2:ca:0a:fa:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
Validity
Not Before: Jul 28 13:09:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=122dda5a43e5b3f0334b68d8d74a75f443e4a6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e0:e0:1c:2c:f2:15:5f:8d:f5:0a:17:55:fb:
62:81:71:dd:6f:05:e6:19:e9:d2:32:73:c1:ae:76:
7f:26:de:c0:91:07:0e:29:11:cb:47:52:e1:e7:9d:
8c:39:9d:48:f2:3f:d2:6c:ff:ea:17:9d:5c:f4:91:
ec:c1:fe:62:de:c6:af:39:c7:6d:78:f0:59:8f:5b:
77:f6:81:7d:d2:a5:76:ad:be:fe:62:f6:d7:3e:aa:
92:f6:5b:86:d3:f3:7e:88:5f:e7:13:5a:74:d8:0b:
64:50:13:21:7c:ae:df:91:56:de:8b:06:41:99:35:
d8:cd:37:6a:6b:a5:13:29:65:d6:72:a5:db:f9:84:
88:24:30:20:7d:c6:12:32:fc:cf:cf:62:63:92:3d:
3d:7a:b1:04:2b:9b:80:24:18:cc:89:92:7c:a3:99:
59:83:34:63:f2:04:af:2f:00:2f:1b:7c:d5:94:90:
94:4a:c7:aa:02:96:f3:5b:fe:e1:58:cf:b5:da:f5:
eb:36:c3:21:81:51:18:09:bb:33:ce:3e:cb:ee:a1:
9e:3c:bc:8a:a2:48:39:12:34:e4:96:30:97:a8:52:
db:81:c6:e9:87:df:92:dd:2f:ea:79:4f:9d:46:69:
a6:9b:15:0b:8d:79:ea:26:35:d2:25:77:a0:3e:7e:
92:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2D:DA:5A:43:E5:B3:F0:33:4B:68:D8:D7:4A:75:F4:43:E4:A6:C9
X509v3 Authority Key Identifier:
keyid:33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/Ei3aWkPls_AzS2jY10p19EPkpsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.136.0.0/19
185.36.16.0/22
185.202.148.0/23
IPv6:
2a02:ab8::/29
Signature Algorithm: sha256WithRSAEncryption
84:99:79:ce:4a:ef:f2:c8:d0:46:93:25:fe:34:a3:db:e0:a1:
e3:f9:32:ee:17:5d:01:61:71:5b:18:e1:d6:54:f4:3b:1f:7a:
37:d2:47:51:13:d7:23:61:e9:27:a9:8f:d0:73:b9:6e:7f:46:
d5:87:21:14:04:a9:63:dd:fb:c6:8c:e5:0e:f7:15:68:fd:94:
e2:f7:e3:a7:6e:45:fd:9c:ab:68:25:7c:c3:16:e0:ff:6b:68:
82:18:6f:9f:f9:c9:33:4a:0e:69:ec:e3:85:3c:91:63:fa:51:
6e:82:55:b0:be:66:30:d5:29:be:8f:d5:13:31:75:41:8d:a8:
20:5e:19:fd:58:42:e3:4c:fe:dc:7d:ed:5a:a3:25:7f:37:99:
f5:1e:7f:83:13:8f:f1:0e:c2:bd:f4:11:00:bf:aa:82:b6:9f:
8a:9a:23:24:d5:bf:af:f1:2e:d5:cd:5c:1e:ec:75:e5:9d:4b:
47:80:7d:41:c1:e2:8b:70:be:33:82:56:0b:3c:8a:a1:ce:da:
2f:62:2e:20:cb:9b:3e:91:03:5e:48:46:24:83:55:59:2a:e6:
b1:16:22:3c:7e:9c:cb:b5:8d:59:a0:00:cb:44:e9:1f:f0:a0:
36:e6:89:f7:d2:17:53:ea:90:85:f1:fd:8e:85:5a:fc:45:d8:
0e:ba:da:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:02:58 2026 by rpki-client