Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/EU6S0HJNgtU92lCj2E5oAPOEdLs.roa
File: EU6S0HJNgtU92lCj2E5oAPOEdLs.roa (raw, json)
Hash identifier: 1lpHBr2sLsew7tFbnn94rLgLk3IsikjEq2tOn5QLKjw=
Subject key identifier: 11:4E:92:D0:72:4D:82:D5:3D:DA:50:A3:D8:4E:68:00:F3:84:74:BB
Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Certificate serial: 019EF59751CCE5043FECE4C25CEAAEFC9975
Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/EU6S0HJNgtU92lCj2E5oAPOEdLs.roa
Signing time: Tue 23 Jun 2026 17:46:35 +0000
ROA not before: Tue 23 Jun 2026 17:46:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8143
IP address blocks: 152.175.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f5:97:51:cc:e5:04:3f:ec:e4:c2:5c:ea:ae:fc:99:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Validity
Not Before: Jun 23 17:46:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=114e92d0724d82d53dda50a3d84e6800f38474bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:a1:94:27:6c:98:80:28:9e:b8:10:0c:6b:
ef:b4:30:68:5b:44:7c:ca:44:64:e0:a7:2e:ba:dc:
07:a0:dc:8d:55:4e:fb:fc:79:70:56:52:ff:60:fa:
94:65:f5:61:c3:1f:99:5c:6f:14:bd:35:4f:2a:8d:
cd:63:47:50:40:2a:b3:dc:39:8e:f0:e9:29:93:d8:
a7:d2:b5:00:d8:1c:23:17:77:cf:33:dd:85:00:03:
e1:41:cb:87:30:ad:4a:5a:80:64:1e:69:11:e7:86:
26:00:03:a0:00:dd:e8:0a:9e:ac:17:1f:80:09:c4:
93:12:59:7f:5b:37:ee:f7:d1:e5:c8:d0:7d:94:6e:
3b:8b:eb:96:ee:fb:d7:6b:47:c8:ba:f5:9b:66:00:
f4:9f:90:2f:67:14:2b:52:d5:0c:09:5b:08:7e:2d:
d3:fd:38:22:a9:d0:02:ef:d9:b6:df:57:dd:b3:f2:
f2:6c:ae:a4:3b:91:69:e6:94:13:a8:92:44:46:1e:
7f:3f:f2:54:02:a8:d7:35:dc:45:32:9f:1d:01:e5:
3f:e8:f6:ff:59:6b:3f:f4:26:01:9e:89:d3:71:0f:
45:6b:9f:c5:c5:31:be:8c:1d:8e:41:5c:27:49:d8:
f0:f5:24:57:06:ed:6b:75:48:78:b9:9f:69:5f:91:
8b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4E:92:D0:72:4D:82:D5:3D:DA:50:A3:D8:4E:68:00:F3:84:74:BB
X509v3 Authority Key Identifier:
keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/EU6S0HJNgtU92lCj2E5oAPOEdLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.175.208.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:cf:27:b5:5b:bc:b7:c1:c2:b9:2e:9d:a9:c7:ec:3d:c5:90:
89:c6:69:61:19:0e:8c:39:27:77:bb:cc:2c:6b:58:d5:fe:db:
4f:86:7f:85:95:06:b8:91:bc:f9:7a:4b:c6:e5:6c:a1:41:fc:
e9:15:a2:b4:d3:28:19:57:83:ec:f3:7e:2e:52:00:5c:cb:50:
dd:73:2e:93:f9:d1:02:32:cd:a1:da:55:87:69:2f:89:be:7e:
52:0d:7a:7f:32:3b:3a:d8:90:bc:b4:42:2b:17:d6:ba:f3:4f:
62:8a:18:da:76:a6:49:3a:5c:71:39:6d:74:ed:ba:c9:a6:4b:
da:73:05:ec:8f:55:64:a6:1b:75:de:00:2e:be:c0:f6:68:a1:
e7:26:dd:e7:0e:7f:99:b9:51:55:66:ab:64:45:0e:2c:e3:6c:
3c:5f:43:26:cb:5e:a4:36:aa:1a:fc:96:3c:1b:bf:f8:85:2c:
9e:ea:04:15:52:bf:c2:d5:42:37:6e:30:e6:ff:84:bc:43:89:
68:50:84:62:b6:03:ee:1c:ab:19:c2:96:de:10:4f:5e:5a:e3:
f8:ac:de:cb:f9:ef:66:37:1a:bc:35:11:47:51:10:04:37:fe:
6a:0e:87:6e:99:ef:58:3a:74:ef:30:d3:18:8e:ed:dc:51:af:
41:65:46:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:44:43 2026 by rpki-client