Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/EZUD2mqntHLdvbqrtHkZp_Kr8VE.roa
File: EZUD2mqntHLdvbqrtHkZp_Kr8VE.roa (raw, json)
Hash identifier: w2ZrecaPRiS9avpPbQAXkEmzP6mL7yB7QAgS25ijT4g=
Subject key identifier: 11:95:03:DA:6A:A7:B4:72:DD:BD:BA:AB:B4:79:19:A7:F2:AB:F1:51
Certificate issuer: /CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Certificate serial: 01A13A50251D06BF06700BBAFB19F83D3431
Authority key identifier: 7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/EZUD2mqntHLdvbqrtHkZp_Kr8VE.roa
Signing time: Wed 14 Oct 2026 12:08:13 +0000
ROA not before: Wed 14 Oct 2026 12:08:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218403
IP address blocks: 2a0a:87c0:fff8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:50:25:1d:06:bf:06:70:0b:ba:fb:19:f8:3d:34:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Validity
Not Before: Oct 14 12:08:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=119503da6aa7b472ddbdbaabb47919a7f2abf151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:50:2a:18:fd:94:c9:48:5f:8a:b1:91:d3:e0:
91:9e:54:1a:da:ca:b9:ff:a1:4e:75:e5:40:70:fd:
16:01:40:0e:7f:16:a8:b4:76:9a:88:95:79:0a:a8:
59:ac:21:46:8d:b5:21:6e:cc:d4:fc:16:d6:49:15:
42:a6:59:e1:ea:50:6d:74:5a:c9:7c:c3:5d:b5:4e:
d1:e3:95:b0:27:6d:d4:dd:24:bc:3d:fb:30:0d:be:
1a:6b:f6:02:92:ef:3e:58:ab:c1:1b:f3:15:d7:82:
8a:44:0a:72:96:6a:62:80:0e:29:0b:cf:76:84:04:
ef:50:f3:80:28:9e:92:5f:e6:ec:56:26:44:05:c6:
d7:3f:91:5f:b3:e4:21:a0:1b:01:03:ad:e9:ae:41:
c7:5d:f7:24:a2:a6:fc:59:08:b7:ec:e4:92:17:77:
57:55:61:5a:5c:ba:88:73:9e:a0:ec:d3:1f:1d:bc:
20:ce:26:30:f9:35:27:90:6d:f2:d7:73:45:b3:5a:
be:b5:96:52:cb:31:80:29:f3:7b:58:8f:42:d5:1a:
3e:f2:54:92:99:68:24:92:e1:10:91:f5:51:60:7e:
23:25:c9:4d:25:2e:0d:e6:35:8d:8f:34:a9:60:1f:
5d:cd:17:bd:03:01:94:60:8b:b6:2a:bc:c9:09:58:
90:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:95:03:DA:6A:A7:B4:72:DD:BD:BA:AB:B4:79:19:A7:F2:AB:F1:51
X509v3 Authority Key Identifier:
keyid:7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/EZUD2mqntHLdvbqrtHkZp_Kr8VE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:87c0:fff8::/48
Signature Algorithm: sha256WithRSAEncryption
28:1e:a3:e5:bd:dd:a5:9c:da:71:f6:e1:62:ff:7d:ca:42:26:
85:86:f4:e8:af:af:1c:90:b4:a5:c6:56:45:ea:87:21:95:24:
5d:64:c3:10:46:12:3d:40:be:05:77:f2:a6:a5:92:28:08:a3:
48:89:a3:1f:2f:4e:4f:be:5c:01:9d:b7:03:c6:3b:31:5d:57:
d0:14:0d:0b:45:07:cc:fb:81:a3:c4:42:8d:88:53:80:c0:66:
bf:89:f6:4e:6a:b4:dc:40:30:a6:26:83:ba:01:c4:da:3e:4e:
95:6e:50:84:e7:19:b3:ea:1b:53:67:37:b2:d2:a4:81:00:c7:
e7:1e:5e:65:6f:43:8b:98:15:de:48:3f:2e:11:1a:e5:76:5e:
1b:da:d7:70:a6:c9:80:81:ff:2e:1c:21:b2:5f:0c:e0:a7:1d:
6a:e3:99:e7:a9:e7:5d:13:a2:a2:b2:d3:9c:4e:e2:2a:bf:bb:
a5:ef:7e:8e:c7:33:75:53:fe:44:40:dd:a8:0a:37:11:76:be:
d7:a6:f7:d2:f9:21:b0:e6:c6:a2:53:b1:a7:aa:6a:87:f4:f3:
06:79:35:1a:70:3f:0f:5e:c0:fe:76:e9:d1:40:6e:e9:95:c3:
f8:8d:4d:cd:57:7c:27:08:44:13:fd:18:d6:1d:9c:65:f9:20:
d8:6f:f4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:31:47 2026 by rpki-client