Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/eYIU0lgIGbeRVl2e4lvrfNL_AGI.roa
File: eYIU0lgIGbeRVl2e4lvrfNL_AGI.roa (raw, json)
Hash identifier: +E4U6Wwkj+cuvgvS94OAueMPchhfOUf2dvj5+HfKbkc=
Subject key identifier: 79:82:14:D2:58:08:19:B7:91:56:5D:9E:E2:5B:EB:7C:D2:FF:00:62
Certificate issuer: /CN=279fdf3e491ef66d77714389ae36f045715f2768
Certificate serial: 01A0C3E599F0D269D05FE7E986BF5422D24B
Authority key identifier: 27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/eYIU0lgIGbeRVl2e4lvrfNL_AGI.roa
Signing time: Mon 21 Sep 2026 12:16:39 +0000
ROA not before: Mon 21 Sep 2026 12:16:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 193.148.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:16:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:e5:99:f0:d2:69:d0:5f:e7:e9:86:bf:54:22:d2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279fdf3e491ef66d77714389ae36f045715f2768
Validity
Not Before: Sep 21 12:16:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=798214d2580819b791565d9ee25beb7cd2ff0062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:85:15:c0:d5:4d:da:86:6c:2a:2b:dd:c8:14:
c3:f1:ac:c2:7b:27:8e:cd:0d:e4:0a:59:b9:ea:73:
b0:9e:a9:6e:46:8f:9b:e2:d5:98:e3:de:0c:71:98:
1d:21:8d:97:c4:88:2a:5d:c2:b1:55:f9:0c:1e:85:
46:75:6e:1b:ad:17:d9:9e:90:18:e6:d9:a4:73:e0:
8e:8c:0c:99:7b:ad:d4:f4:a8:88:d4:45:a9:81:a2:
64:6d:65:21:dd:f4:3b:2a:57:1d:19:89:71:61:70:
9a:21:4f:74:43:ca:aa:3f:9e:40:b1:60:62:19:55:
c1:00:db:6e:49:51:c3:8d:87:3d:ca:49:c0:ff:97:
e6:32:96:89:ff:62:e4:3f:45:7e:36:02:5d:3b:9a:
38:72:df:50:d0:a3:8d:c9:f5:d0:15:ea:e6:51:db:
f8:71:d3:28:30:2d:14:65:bf:3f:87:ed:c8:f5:e0:
d1:d9:47:54:34:5f:dd:95:a8:5a:e9:87:9a:51:20:
63:2d:ec:51:7d:00:e8:a4:73:a8:50:32:9a:0f:dc:
8a:03:e8:04:0c:97:00:b5:ff:67:45:5e:f4:bd:5e:
79:91:a9:c2:9c:c0:38:73:fb:ff:d4:c8:45:99:de:
2a:85:76:88:09:e3:ce:92:27:a5:12:15:98:e4:5c:
77:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:82:14:D2:58:08:19:B7:91:56:5D:9E:E2:5B:EB:7C:D2:FF:00:62
X509v3 Authority Key Identifier:
keyid:27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/eYIU0lgIGbeRVl2e4lvrfNL_AGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.14.0/24
Signature Algorithm: sha256WithRSAEncryption
29:c1:69:28:0b:01:71:37:fb:63:12:b3:01:7c:65:7b:ee:44:
15:e5:86:c0:79:ca:d9:b2:96:16:58:f1:4c:42:6d:9e:c8:c7:
8d:17:b1:32:0e:e2:20:7f:1d:0b:79:d3:6a:13:1b:c4:56:44:
54:a8:30:64:4d:5d:2d:50:7c:73:93:e6:08:47:3b:a1:0b:8e:
ff:8f:fd:8b:18:84:57:c5:ce:a9:a3:81:3d:a7:72:65:18:eb:
37:b8:1d:43:2a:ae:f1:6b:a4:b8:d6:60:10:56:66:c1:a7:56:
47:3f:cb:a0:66:de:74:89:5d:17:99:1b:3c:8a:87:60:ac:9e:
4f:e7:52:ed:7b:51:9e:05:06:ad:d4:92:ac:aa:7d:0b:80:ce:
28:46:c9:92:d2:a3:a7:91:b2:66:1b:f2:94:69:ed:44:1b:ce:
b1:20:13:d6:f0:ce:f2:d7:7c:04:56:dc:c8:61:58:14:8c:07:
8b:40:7d:b8:35:6d:8d:b8:a0:3d:a7:17:a5:c5:e6:a0:ff:30:
de:1b:e6:bc:25:07:d7:dd:1f:cb:b3:90:be:31:1c:28:73:80:
75:8f:e5:f1:76:08:1f:76:20:67:04:e7:c7:ef:87:39:f8:3f:
56:a0:b8:16:ad:8a:e9:52:49:3d:e9:8e:88:27:1b:1c:4a:71:
cf:6e:92:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:43 2026 by rpki-client