Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/EBh6E2P_m2Hh-qF5uIPvlPNKo0s.roa
File: EBh6E2P_m2Hh-qF5uIPvlPNKo0s.roa (raw, json)
Hash identifier: 8c/6wKjBJ6rguhteTgW0V/6T1+JYrdCOEKjOqx2BB60=
Subject key identifier: 10:18:7A:13:63:FF:9B:61:E1:FA:A1:79:B8:83:EF:94:F3:4A:A3:4B
Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial: 019FE5D0738920678651151E8E15F5098837
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/EBh6E2P_m2Hh-qF5uIPvlPNKo0s.roa
Signing time: Sun 09 Aug 2026 09:17:51 +0000
ROA not before: Sun 09 Aug 2026 09:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5584
IP address blocks: 193.188.12.0/23 maxlen: 23
193.188.12.0/24 maxlen: 24
193.188.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e5:d0:73:89:20:67:86:51:15:1e:8e:15:f5:09:88:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Validity
Not Before: Aug 9 09:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10187a1363ff9b61e1faa179b883ef94f34aa34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:2b:fb:ac:23:df:67:0b:93:52:eb:b1:d0:
ea:e8:f0:1c:dc:e2:0e:db:3d:98:2f:50:5b:70:77:
d4:85:8d:17:af:97:54:95:ac:f7:73:e1:e9:66:9f:
a0:7c:a1:6f:2c:9b:da:b5:24:a2:5b:cc:77:cd:ce:
04:e8:cc:14:a5:7c:87:83:31:fe:e4:51:44:ea:56:
2b:c5:51:1a:e6:83:18:3e:ba:aa:a2:1a:f0:65:b4:
18:2d:74:d2:8e:bb:25:06:bf:2a:90:e4:92:14:c0:
34:65:28:5a:ee:e9:5c:a3:0c:70:25:82:d2:24:66:
82:84:ea:54:ba:14:a4:5a:0a:36:55:4b:ff:a4:dd:
e6:d7:9e:c6:c1:12:27:7b:0d:4b:9c:da:1d:cc:65:
4a:d9:37:74:00:4d:ea:b8:66:6b:5f:63:96:22:b6:
c5:f5:85:46:c7:29:ce:87:5f:62:1e:99:ce:3c:81:
3a:9e:48:cd:72:d4:38:22:d7:46:94:b5:4a:c6:c6:
37:d9:64:8f:cb:7e:64:e1:61:17:19:23:8b:db:d9:
e9:7b:a2:90:4e:00:cb:b0:de:30:9f:2a:f3:aa:9d:
5a:f2:08:16:0c:08:f6:f6:82:4d:e8:9e:33:ec:a7:
cd:8b:f7:ea:d1:8f:3e:41:0e:bc:48:20:c1:9d:e3:
bf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:18:7A:13:63:FF:9B:61:E1:FA:A1:79:B8:83:EF:94:F3:4A:A3:4B
X509v3 Authority Key Identifier:
keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/EBh6E2P_m2Hh-qF5uIPvlPNKo0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.12.0/23
Signature Algorithm: sha256WithRSAEncryption
07:aa:15:ad:fc:5f:20:d1:5f:92:82:77:c1:18:85:da:10:46:
23:fc:1a:14:08:4a:40:d2:6b:7b:69:e0:00:c3:39:e7:5f:2b:
26:14:47:b9:30:ab:e1:64:15:66:2d:16:68:53:eb:11:71:84:
79:13:ff:28:18:ea:3b:c0:70:99:4d:d9:53:66:a7:ca:75:80:
b5:93:fd:7a:b8:b6:d4:74:47:89:0a:2d:b4:4c:2d:41:da:c7:
b0:8e:48:b0:1d:f9:48:d3:c9:5d:52:52:28:3e:c9:0c:64:79:
8e:4c:a3:12:27:1b:9d:88:d4:55:1b:cb:a8:ca:d6:79:ce:c3:
47:1e:2c:6e:12:62:a7:27:7d:70:79:55:9e:3c:f0:b8:63:70:
14:ee:5a:bb:1c:97:c1:69:c4:50:8e:64:14:58:76:7f:ab:0e:
51:3d:5c:96:96:74:22:ba:b6:84:2c:c9:48:af:3d:56:a6:df:
39:1d:67:82:22:64:fe:e9:a1:44:24:a7:b6:58:c9:fc:f9:73:
ef:f5:45:51:d6:53:1a:f9:69:06:bb:da:95:d0:00:cd:b9:e2:
93:16:f3:58:86:21:1f:e3:6b:33:44:fe:9b:a8:c8:4c:4e:2b:
e5:fe:cd:15:39:8d:56:2f:62:b1:a4:1b:9a:6b:50:b3:cb:0b:
3d:94:95:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:03:21 2026 by rpki-client