Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/E6joSh_KCsRZIeJuWns6mUSAvaQ.roa
File: E6joSh_KCsRZIeJuWns6mUSAvaQ.roa (raw, json)
Hash identifier: /pkjUktJxl5tikLBDBKNXbabaHGDBXecObDRlAAJ4OY=
Subject key identifier: 13:A8:E8:4A:1F:CA:0A:C4:59:21:E2:6E:5A:7B:3A:99:44:80:BD:A4
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 019C9AAC4437403126ADEEDA66A2FB37B23D
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/E6joSh_KCsRZIeJuWns6mUSAvaQ.roa
Signing time: Thu 26 Feb 2026 15:58:26 +0000
ROA not before: Thu 26 Feb 2026 15:58:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200620
IP address blocks: 188.95.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9a:ac:44:37:40:31:26:ad:ee:da:66:a2:fb:37:b2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Feb 26 15:58:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13a8e84a1fca0ac45921e26e5a7b3a994480bda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8a:21:2a:41:fc:67:db:42:b9:88:41:34:d3:
0d:d5:3e:6e:77:87:ac:bb:97:e0:a7:2e:20:44:6a:
62:94:3f:a0:2b:d3:9e:73:90:0a:91:88:5c:7e:12:
0e:45:b5:7f:40:93:ca:6c:85:87:5e:e0:ef:44:51:
aa:46:02:94:1b:06:d1:7b:23:78:bc:3f:f5:6a:70:
27:2c:4a:1b:39:7c:fc:20:29:91:68:6b:97:a5:e3:
99:d3:6a:7f:6c:74:1b:6a:36:ff:16:95:70:f5:55:
50:20:c2:5d:08:13:f3:db:a4:73:70:65:ef:3e:ea:
d6:2e:bb:c3:01:65:fa:ce:e3:ce:9d:aa:6c:e1:ae:
f6:44:b9:b0:e9:13:81:7c:05:c8:d8:5e:b3:e2:50:
b5:9b:b4:78:42:ac:d5:cf:26:25:72:11:1a:bf:2d:
1b:44:10:44:01:17:80:7b:92:90:b1:22:d9:32:9e:
69:61:7d:72:db:cb:6b:ce:0f:04:fd:61:3b:ca:65:
05:11:98:73:e5:d4:01:4a:ea:7a:40:db:d0:bf:5f:
1f:ab:5d:10:35:75:c8:26:31:49:2c:2a:00:89:4b:
b3:85:bf:df:22:b6:5f:6c:05:9c:c9:d9:83:c9:d4:
a3:9a:a6:19:79:e7:ff:51:da:5d:ea:de:50:70:a9:
c2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A8:E8:4A:1F:CA:0A:C4:59:21:E2:6E:5A:7B:3A:99:44:80:BD:A4
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/E6joSh_KCsRZIeJuWns6mUSAvaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.197.0/24
Signature Algorithm: sha256WithRSAEncryption
58:91:a0:d0:0d:dd:7c:62:26:60:27:a1:6d:92:33:a8:df:b3:
d4:6c:93:82:c4:6c:42:2c:23:01:52:db:22:eb:22:d4:10:35:
6a:6c:31:1f:c2:72:a7:ad:9d:df:dd:a0:32:be:6f:81:39:47:
0d:4c:18:c5:9d:32:10:c4:e8:af:d9:a6:cf:1d:53:68:be:93:
ec:40:78:49:9b:88:51:96:76:e3:c5:c4:1d:c6:54:a4:4f:15:
69:04:4e:64:e3:3d:12:ed:46:56:de:81:22:4e:8f:d9:9c:35:
b8:23:07:63:17:1c:5e:03:aa:a7:f8:6b:83:8f:2e:94:11:24:
c3:5f:85:48:9f:5b:ba:0d:fa:c3:a2:c1:73:65:25:4c:bb:3f:
87:99:38:42:86:dc:66:7c:65:24:19:dc:6a:f4:ae:56:4e:27:
4e:c2:5b:67:fd:df:ad:38:4e:e2:32:b2:3e:94:73:ab:20:80:
d3:e3:a5:34:00:44:42:9b:55:65:f2:d1:70:ba:17:b5:96:6c:
a2:54:e6:7a:3a:0c:ce:d0:80:88:5b:47:fd:32:c1:cf:a3:65:
b5:fe:2a:2a:86:39:9f:0c:75:16:cc:75:1c:86:54:56:c2:98:
2c:53:61:23:8a:0c:2b:d8:aa:f2:db:b9:85:47:12:b5:88:4d:
24:33:9c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:02:01 2026 by rpki-client