Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/E5N49IFOZzcUudGH8Hfr0F0ywvk.roa
File: E5N49IFOZzcUudGH8Hfr0F0ywvk.roa (raw, json)
Hash identifier: qu/cDpuHW9hVmNW832+M9NPLYicyAqIzhTV6hHRmh3Y=
Subject key identifier: 13:93:78:F4:81:4E:67:37:14:B9:D1:87:F0:77:EB:D0:5D:32:C2:F9
Certificate issuer: /CN=0e26d45fd56921d3469d19c47572f275f9d55242
Certificate serial: 019B7C12CD961116FA0DDEE58E09EA5F9CD2
Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/E5N49IFOZzcUudGH8Hfr0F0ywvk.roa
Signing time: Fri 02 Jan 2026 00:19:25 +0000
ROA not before: Fri 02 Jan 2026 00:19:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209354
IP address blocks: 85.208.204.0/24 maxlen: 24
85.208.205.0/24 maxlen: 24
85.208.206.0/24 maxlen: 24
85.208.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:cd:96:11:16:fa:0d:de:e5:8e:09:ea:5f:9c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242
Validity
Not Before: Jan 2 00:19:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=139378f4814e673714b9d187f077ebd05d32c2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:07:b5:1d:24:b6:06:ea:d7:e4:45:37:91:4f:
b2:b9:1b:9e:dd:a3:9d:c3:d5:5b:53:4d:62:e6:57:
3e:d4:ad:ab:7c:d0:0e:9b:68:31:8d:1c:d5:6a:60:
70:c1:5f:33:07:a0:23:44:c3:ea:0d:f1:a7:13:f6:
51:46:29:b3:db:4e:c7:dd:58:4c:57:cb:8c:ec:db:
81:42:e1:11:cf:ac:a8:a0:3d:54:9c:ee:94:4c:a6:
08:29:89:62:1e:b8:6e:d7:c6:64:69:ed:10:88:60:
29:f1:90:80:45:02:69:0c:64:6c:bc:41:06:84:c3:
88:dd:05:9c:c9:74:87:b6:b8:4c:98:17:36:d8:35:
0b:65:ea:c6:8c:7b:31:6f:9a:d2:c5:45:a9:6b:dc:
95:d1:d7:d9:11:bb:6b:04:13:b8:a8:57:ec:74:65:
2d:79:61:77:de:6e:e7:8a:54:89:ed:9d:ce:bb:f6:
f1:e2:14:cb:a3:07:94:ea:f1:a7:b5:a4:fb:2f:7f:
89:20:c0:c7:33:11:de:9a:2b:de:a1:76:50:c5:de:
ca:1c:b0:27:7d:09:b1:f9:78:3a:4f:be:61:01:47:
c1:6b:81:28:e5:51:21:e9:32:e5:0a:10:60:92:b0:
db:4f:79:e9:42:06:c7:a5:a3:46:a5:a5:85:13:9c:
17:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:93:78:F4:81:4E:67:37:14:B9:D1:87:F0:77:EB:D0:5D:32:C2:F9
X509v3 Authority Key Identifier:
keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/E5N49IFOZzcUudGH8Hfr0F0ywvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.204.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:fb:fa:23:53:20:0c:d5:38:90:82:f6:43:b0:8c:ba:e0:dd:
a8:f0:fd:40:86:df:91:69:cf:88:2e:59:c3:71:94:df:e2:66:
23:0d:55:5f:96:a3:38:2e:3e:ec:6a:77:ee:fe:4c:e3:dd:0e:
03:ee:77:45:70:3c:98:f4:0b:7c:40:60:18:77:e6:98:59:f4:
ac:3b:06:e6:66:aa:35:c2:26:d0:5a:54:fa:cb:d2:50:93:f2:
5c:d1:16:fd:9a:67:52:93:6f:4f:5e:c3:04:66:8c:09:8a:c0:
02:49:35:3b:df:9c:13:dc:c5:04:03:d9:88:98:2d:52:eb:48:
94:b4:4f:61:1d:6f:69:79:0e:fd:69:12:99:71:26:da:e9:37:
92:2c:21:6c:6e:0a:c6:e3:85:78:28:f5:c3:c7:61:da:10:b3:
82:27:01:b7:39:b4:eb:d9:af:cd:50:b0:e6:69:c3:4f:05:7b:
80:f1:d0:6f:c4:d8:96:78:8d:03:10:e0:35:1f:63:ea:5b:c0:
6f:10:be:5e:d1:2f:2f:23:c2:75:ab:61:50:b4:23:b1:18:7b:
fe:ed:e7:57:8f:51:ad:c7:ec:47:e4:2b:52:b7:18:06:f7:37:
9d:cf:8f:3a:b9:28:4f:be:c3:67:bb:12:61:17:79:25:e7:2b:
9e:df:f1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:30:09 2026 by rpki-client