Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/EJsaaVX4Mmrix78HUL8xI_-XI2A.roa
File: EJsaaVX4Mmrix78HUL8xI_-XI2A.roa (raw, json)
Hash identifier: j35icCKHospmNh8vJHkjpu+F6El2yP7piddgmMDnQn8=
Subject key identifier: 10:9B:1A:69:55:F8:32:6A:E2:C7:BF:07:50:BF:31:23:FF:97:23:60
Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial: 01A0F69F6EF94ABC10614DD8DFA39F3043D8
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/EJsaaVX4Mmrix78HUL8xI_-XI2A.roa
Signing time: Thu 01 Oct 2026 08:40:38 +0000
ROA not before: Thu 01 Oct 2026 08:40:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35574
IP address blocks: 93.101.0.0/20 maxlen: 20
185.40.12.0/22 maxlen: 24
194.187.172.0/22 maxlen: 24
194.187.174.0/24 maxlen: 24
2a04:a9c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:9f:6e:f9:4a:bc:10:61:4d:d8:df:a3:9f:30:43:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Validity
Not Before: Oct 1 08:40:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=109b1a6955f8326ae2c7bf0750bf3123ff972360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5c:52:2e:0b:fc:ad:63:fd:80:da:12:5a:57:
9c:03:34:b7:6e:95:15:f5:cd:1a:87:25:0f:2c:7f:
9a:b6:50:67:3d:74:cb:bb:2a:6c:f0:ec:e8:b8:0b:
0a:22:77:91:fe:46:8a:f1:ff:6d:3b:94:7c:98:ba:
f9:4a:08:e8:ba:e2:40:63:9b:a4:49:be:22:4d:ec:
46:c1:c6:06:81:ab:57:5f:4f:9d:a0:e3:54:5b:e3:
9d:d9:e4:61:4c:59:eb:c9:5c:a0:6e:e3:e5:1f:76:
0b:78:66:ac:7a:f3:3a:39:32:e2:58:cc:1a:da:2c:
af:fa:26:a7:9d:50:d1:6e:c9:7b:34:6a:77:1d:04:
7e:6c:2f:40:64:87:48:1c:3b:d8:8b:0d:42:1d:e5:
f3:bd:e3:f8:5e:32:67:88:b0:7d:a1:0e:c3:4b:a7:
ef:f1:12:8f:34:bd:b1:4a:bc:f8:a9:55:4f:96:63:
12:2f:0c:c3:18:ec:4d:fe:cc:75:65:53:c1:11:7c:
6b:0c:82:91:09:af:78:5c:87:56:bf:52:49:f3:37:
af:23:7d:4d:b1:f5:a2:5f:16:4c:10:0c:bf:07:8d:
eb:84:11:eb:df:bc:8e:e2:53:fc:bf:82:a5:c0:ba:
26:16:c2:d4:41:94:92:9d:c1:b8:49:b2:3c:5d:57:
94:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9B:1A:69:55:F8:32:6A:E2:C7:BF:07:50:BF:31:23:FF:97:23:60
X509v3 Authority Key Identifier:
keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/EJsaaVX4Mmrix78HUL8xI_-XI2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.101.0.0/20
185.40.12.0/22
194.187.172.0/22
IPv6:
2a04:a9c0::/29
Signature Algorithm: sha256WithRSAEncryption
00:73:4b:2f:f6:1c:1e:18:61:4d:aa:67:65:04:6e:d6:f1:d1:
f4:4d:81:3c:97:3c:4d:7f:ff:2d:26:39:57:43:a3:6b:04:c9:
8d:7e:15:0a:a6:25:9a:06:d7:fe:0b:be:6c:d5:71:a4:b7:b3:
b2:3c:99:60:50:3f:64:a6:bf:dc:82:99:68:23:19:9e:1b:50:
40:2f:49:a6:97:17:33:46:f3:85:96:a8:2e:2c:04:db:d0:ec:
c1:91:99:b6:90:5a:00:5e:68:a7:38:74:95:0f:09:3a:08:4d:
8a:3d:1c:50:77:19:46:48:f7:d0:c7:77:0a:85:a1:63:4b:d6:
2b:58:c4:18:51:c1:89:7d:54:42:6d:0e:cc:56:bd:34:a5:a8:
38:6f:aa:88:dd:43:ca:c8:3c:6c:ec:97:c4:30:fa:38:41:ef:
b4:5e:34:08:53:a2:79:7e:c0:5d:08:f7:6b:6f:ce:be:e1:1a:
2c:bb:84:56:d1:85:c4:04:04:8f:63:81:ee:30:f1:06:73:42:
a8:53:0d:9c:e0:2b:02:3e:23:bb:6a:66:03:15:6f:6f:b0:b3:
ff:7a:bc:8a:a7:04:10:6c:fb:08:8a:99:af:88:9f:0f:04:37:
c5:58:a9:71:16:0a:c4:a2:da:6b:63:91:e8:72:f8:e5:24:dc:
17:d9:6b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:40:59 2026 by rpki-client