Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/E-g-v2Rn7ovW7XAIev5scQP8c8A.roa
File: E-g-v2Rn7ovW7XAIev5scQP8c8A.roa (raw, json)
Hash identifier: q74zdfQNlbmYnT3S1OTFeC3AloIjMONMGPowWsbDW2Y=
Subject key identifier: 13:E8:3E:BF:64:67:EE:8B:D6:ED:70:08:7A:FE:6C:71:03:FC:73:C0
Certificate issuer: /CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
Certificate serial: 019B7758BF1B6C8FDB8D680E5367E5BF9F82
Authority key identifier: 26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/E-g-v2Rn7ovW7XAIev5scQP8c8A.roa
Signing time: Thu 01 Jan 2026 02:17:43 +0000
ROA not before: Thu 01 Jan 2026 02:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15882
IP address blocks: 194.102.200.0/24 maxlen: 24
195.190.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:bf:1b:6c:8f:db:8d:68:0e:53:67:e5:bf:9f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
Validity
Not Before: Jan 1 02:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13e83ebf6467ee8bd6ed70087afe6c7103fc73c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:f9:55:cf:2d:b9:50:05:22:a3:d3:be:ad:
cb:83:2b:19:e8:c2:3e:2b:3d:fd:d7:cb:00:c4:19:
6f:07:d9:d9:08:e5:b7:24:6e:d6:3e:bf:2a:a6:07:
55:0e:2a:82:43:3c:77:90:16:b8:3f:42:77:ba:b2:
33:83:3d:1a:1a:b3:e0:fc:21:8b:b4:5b:86:da:75:
99:66:32:70:e0:ab:57:d5:3c:f6:db:0f:5a:a7:8c:
a6:26:19:b2:1b:c7:c4:dc:34:59:fe:07:f5:73:18:
f7:3e:38:25:24:4a:ed:be:a9:2e:58:80:c0:21:9b:
05:9d:a9:e1:ae:b4:e7:09:10:2b:11:d1:56:9e:ea:
a7:7c:40:73:e7:33:75:70:9c:7c:c9:f3:d3:72:5c:
fe:7b:a4:5c:c0:f3:10:26:16:65:ab:40:a5:3d:96:
07:9a:ba:b3:4a:fa:78:55:1f:3b:81:7f:43:e4:ac:
2f:cb:25:df:f3:2e:02:8c:40:f8:05:21:ba:05:1b:
6c:8e:73:80:f5:00:53:a3:7f:bc:f2:e7:0f:7c:df:
b5:85:66:9e:8b:5f:63:0d:35:d3:26:37:5d:34:d2:
2d:48:3e:49:10:66:49:6f:b8:69:c1:f6:5f:35:fd:
8d:e8:a5:5a:28:dc:75:cb:9b:be:f0:e7:9a:d8:7b:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E8:3E:BF:64:67:EE:8B:D6:ED:70:08:7A:FE:6C:71:03:FC:73:C0
X509v3 Authority Key Identifier:
keyid:26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/E-g-v2Rn7ovW7XAIev5scQP8c8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.200.0/24
195.190.159.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c8:3d:9d:9d:f6:90:66:36:15:4b:5a:21:16:cf:a2:1f:31:
da:72:7c:56:e3:e4:f8:cb:46:74:1e:e5:84:44:92:c9:7a:e6:
12:22:4c:77:8d:87:b2:29:48:e3:13:2b:4a:68:17:9e:3d:1a:
13:e8:03:78:05:e8:8a:7a:ef:be:a7:25:c6:b7:cd:ed:9c:e1:
16:e1:85:82:b6:bd:61:6d:04:9b:b7:d5:8d:98:25:d2:ba:c0:
25:ab:b2:a5:93:0e:84:f2:21:96:b8:b7:9c:fc:15:5e:93:18:
60:3a:12:4d:c0:98:38:db:f8:a2:c4:d2:e5:51:8e:98:62:34:
b3:55:cc:ed:a0:1d:54:7e:80:a6:a0:49:bd:c5:6d:77:18:39:
a5:fb:f7:33:86:4d:05:6a:08:44:99:ff:68:e7:bb:c0:b7:7b:
7f:d3:71:0e:3a:63:75:d8:21:3b:bd:3d:50:1d:43:83:26:7c:
46:0e:f7:8b:3d:28:fb:d3:84:22:af:28:b5:21:0c:f1:fb:7a:
50:23:4b:ca:91:30:bd:26:40:4e:70:bf:79:3f:83:da:ae:5d:
9f:71:d0:df:62:07:3a:b0:e5:45:6b:84:0d:f2:90:77:21:7f:
8a:90:88:6b:90:f2:20:cb:7e:ce:fe:26:eb:6b:7a:f1:91:9a:
01:91:7b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:24:22 2026 by rpki-client