Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/elKDEgk9yKtQtzq3PdJ4l_cpSZQ.roa
File: elKDEgk9yKtQtzq3PdJ4l_cpSZQ.roa (raw, json)
Hash identifier: 8uKk6fr9oWkQeVcBDQrXHD0Zpv9/C37D7zWtE6D01OI=
Subject key identifier: 7A:52:83:12:09:3D:C8:AB:50:B7:3A:B7:3D:D2:78:97:F7:29:49:94
Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial: 019B7A5AE82EF179FEA916BF8E716B9CDEA5
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/elKDEgk9yKtQtzq3PdJ4l_cpSZQ.roa
Signing time: Thu 01 Jan 2026 16:18:56 +0000
ROA not before: Thu 01 Jan 2026 16:18:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59649
IP address blocks: 185.72.16.0/24 maxlen: 24
2a03:3da0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:e8:2e:f1:79:fe:a9:16:bf:8e:71:6b:9c:de:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Validity
Not Before: Jan 1 16:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a528312093dc8ab50b73ab73dd27897f7294994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:43:7c:2a:f0:14:75:2c:a1:6d:5c:07:15:39:
e5:fb:a4:3e:bb:95:10:41:7a:db:f9:02:da:cd:68:
a1:40:d7:79:f3:b7:6d:bf:0a:a5:4e:22:07:e0:d9:
6a:ac:30:6b:ef:35:ec:04:9b:05:90:4b:4c:08:d1:
50:f5:a7:cf:84:72:a5:ab:72:7b:bd:90:2a:42:36:
9d:16:4b:31:06:5e:b2:9f:80:bf:cf:7f:ba:5d:89:
4c:95:2f:db:dd:fa:0f:79:83:a8:fe:2b:62:65:75:
38:5a:87:b3:f4:07:99:2c:e0:37:a0:08:2b:1a:2b:
90:db:d4:96:82:e0:5a:32:bc:3a:5e:3d:6c:c9:60:
7d:66:bb:2b:ef:8d:e7:65:f7:d9:33:1d:5d:57:68:
39:d0:50:aa:40:ed:2d:cd:d6:cf:03:0b:78:5d:56:
c6:00:ed:08:0a:14:5a:19:4f:d8:e6:91:c5:c4:98:
38:43:4e:39:80:5a:a2:e5:7e:8b:0b:f3:3d:9a:42:
90:ac:07:b4:77:d5:c6:9e:29:36:ff:84:26:ff:70:
00:ce:70:d0:5e:8f:29:48:a5:79:9a:24:98:cf:96:
06:f9:98:a5:da:1c:34:4d:10:a9:13:ee:58:00:0f:
9b:0b:e8:0f:f1:83:9b:92:8b:63:e7:b6:6e:f7:3c:
a1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:52:83:12:09:3D:C8:AB:50:B7:3A:B7:3D:D2:78:97:F7:29:49:94
X509v3 Authority Key Identifier:
keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/elKDEgk9yKtQtzq3PdJ4l_cpSZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.16.0/24
IPv6:
2a03:3da0::/48
Signature Algorithm: sha256WithRSAEncryption
79:6f:98:47:81:e8:b4:2e:d8:d8:7c:e5:a4:97:77:75:bb:81:
bb:8d:41:34:e9:de:0f:57:7e:0b:fd:fe:30:73:e4:04:de:57:
16:66:be:2a:82:fb:c1:2c:44:a3:e4:e8:c0:39:3e:c1:8a:6a:
a9:c8:6d:52:83:1d:78:16:a6:97:99:d3:43:ce:de:fb:ea:7a:
58:20:9b:77:fd:25:67:e9:e7:c3:e3:47:d8:ad:2b:75:90:22:
6c:91:09:b1:dd:6a:1a:74:9b:91:97:59:7a:d8:31:6e:6c:0a:
ab:68:94:2c:44:6c:57:06:da:fa:42:e8:24:02:a9:de:6c:75:
87:99:3d:fe:8a:96:ae:3b:3a:70:4b:ae:24:cb:07:02:d9:3a:
20:61:31:35:5b:be:f7:d8:bf:7c:ab:f7:58:d9:be:ad:b7:dd:
d5:88:41:38:01:7d:5c:f1:5c:b6:61:86:1d:14:07:e1:d3:3c:
f8:e0:26:d7:a6:bd:f1:06:77:37:73:b7:07:d0:cb:59:c1:d2:
d2:27:73:44:c6:b0:64:6d:ff:32:67:75:9e:43:7f:26:30:c7:
e5:04:4f:96:7f:37:59:c9:8e:b5:d5:06:ae:45:9a:ae:2c:64:
82:98:a0:78:29:00:fa:fc:71:23:fa:82:b2:7c:9b:51:a7:c1:
6d:74:08:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:04 2026 by rpki-client