Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/EDaR0hlJ69k3tmJS5qE6JSTx9HE.roa
File: EDaR0hlJ69k3tmJS5qE6JSTx9HE.roa (raw, json)
Hash identifier: efDuAmcnNpFOvzFx+pZEPqBZJO7OWPwyoMU32+Sy6mE=
Subject key identifier: 10:36:91:D2:19:49:EB:D9:37:B6:62:52:E6:A1:3A:25:24:F1:F4:71
Certificate issuer: /CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Certificate serial: 019B79ECE7AC2678E9E8ADDAFC75E2890482
Authority key identifier: 06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/EDaR0hlJ69k3tmJS5qE6JSTx9HE.roa
Signing time: Thu 01 Jan 2026 14:18:47 +0000
ROA not before: Thu 01 Jan 2026 14:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213926
IP address blocks: 91.202.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:e7:ac:26:78:e9:e8:ad:da:fc:75:e2:89:04:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Validity
Not Before: Jan 1 14:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=103691d21949ebd937b66252e6a13a2524f1f471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:2f:4d:71:5f:54:87:ab:a4:91:cc:8f:11:
81:9d:b0:b0:d2:4d:f2:08:03:84:51:74:2d:fd:97:
04:a3:f7:ba:25:b0:2d:b9:2a:a3:88:1d:de:06:eb:
4c:ff:82:dc:23:46:89:db:3b:24:76:63:2e:cd:3d:
ec:c4:91:27:36:ba:6b:87:90:7d:6b:5e:d4:96:32:
45:ac:82:da:5e:ec:77:dc:55:6d:8e:34:f5:ac:d1:
17:d5:ff:c6:70:c7:ce:f2:fb:e1:02:b1:d1:e2:96:
b0:17:cc:be:b9:7a:b0:ec:fb:84:ea:20:86:8a:83:
53:fd:d3:82:61:20:37:d8:9c:4c:48:ae:7c:36:51:
fb:11:05:a0:74:83:f0:cb:b1:b5:26:17:29:39:37:
32:f0:ac:58:76:dd:c8:30:a3:5b:e0:2e:43:b2:12:
03:f9:69:13:cc:23:c6:9a:1f:db:cf:12:0b:3d:7b:
bc:51:b9:a1:cd:23:a2:bf:f9:4a:ee:b1:eb:c9:75:
fb:2e:be:0b:e1:83:77:48:f5:30:39:6a:1f:17:1b:
1c:75:c6:c3:3c:cf:12:15:b4:14:14:8d:09:89:de:
52:1c:11:1c:c4:4f:a1:a1:78:1b:17:9e:4d:f7:ee:
e8:ff:05:85:85:65:6d:71:c3:c9:9d:74:85:48:28:
30:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:36:91:D2:19:49:EB:D9:37:B6:62:52:E6:A1:3A:25:24:F1:F4:71
X509v3 Authority Key Identifier:
keyid:06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/EDaR0hlJ69k3tmJS5qE6JSTx9HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.232.0/24
Signature Algorithm: sha256WithRSAEncryption
29:01:36:51:72:7c:67:24:e4:5e:5d:cf:77:2d:66:d7:a4:a9:
db:1c:17:28:e2:e6:c6:45:45:89:8b:36:8e:dd:93:4b:12:0d:
8c:cf:10:17:48:2d:31:4e:f0:f5:d9:3a:90:4a:f1:2a:53:5c:
4c:e4:a2:95:fb:71:a5:c3:d0:16:51:e1:4b:16:0d:f5:4d:4f:
f3:f7:df:9d:b3:57:42:4b:60:2f:08:b9:d7:3f:61:38:c3:bf:
dc:e8:f5:12:71:20:d3:48:b8:44:90:88:99:a8:40:8f:3e:82:
6b:8a:a3:34:92:20:11:08:0a:ca:0c:d5:e8:93:9c:61:c1:2d:
dc:61:32:39:ca:b4:98:5e:1c:67:a9:83:52:2c:bd:b3:02:e8:
01:8d:19:9c:98:1d:c8:51:0e:c6:24:a7:62:4f:4b:6f:f3:ac:
fc:3c:3e:0a:a4:d0:3f:f5:bd:18:39:84:54:0b:74:b9:76:c2:
0f:39:15:3d:43:cc:8e:00:fb:e1:1f:43:11:d1:2b:64:81:83:
9b:6b:d6:af:61:d1:2a:15:97:f8:d7:88:57:a0:46:1f:a4:d0:
62:04:a7:63:c0:29:89:67:e1:11:de:51:6f:62:c4:87:23:0c:
33:0e:0d:82:0b:e8:90:9e:c5:a5:90:d3:36:fa:bf:2f:8b:26:
b9:3f:79:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:23 2026 by rpki-client