Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EOMTt95nLuHJGXpUhDjkZGEQaeg.roa
File: EOMTt95nLuHJGXpUhDjkZGEQaeg.roa (raw, json)
Hash identifier: TyXshIF+Qxc+mVFbAFfoaxrl/i+MUqdc3LZunlfg91U=
Subject key identifier: 10:E3:13:B7:DE:67:2E:E1:C9:19:7A:54:84:38:E4:64:61:10:69:E8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A106E62FD321623135E3BB7CAA0DA17357
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EOMTt95nLuHJGXpUhDjkZGEQaeg.roa
Signing time: Sun 04 Oct 2026 12:31:51 +0000
ROA not before: Sun 04 Oct 2026 12:31:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214929
IP address blocks: 94.249.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:e6:2f:d3:21:62:31:35:e3:bb:7c:aa:0d:a1:73:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 4 12:31:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10e313b7de672ee1c9197a548438e464611069e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:77:41:04:73:e0:e3:fd:62:55:d3:66:3d:
fe:7d:56:76:cd:e2:1e:65:3a:4e:a1:6c:af:9f:2f:
06:3f:f6:5e:0d:8a:78:e0:6a:92:4c:3e:3d:80:6b:
80:dc:51:b2:da:b1:cc:b1:ae:e4:4f:69:99:20:3c:
db:63:37:5e:f4:17:ed:80:67:9f:c2:f2:03:00:7f:
23:d9:1e:c7:ad:2f:bf:6d:8a:2f:1e:c9:24:ba:c6:
98:3c:e6:90:5a:e4:9c:82:e6:32:bc:be:e1:e2:37:
fe:d2:fc:50:a2:53:b8:16:54:b6:8a:61:86:24:80:
fa:7b:4f:c6:dc:a3:00:c2:be:6d:eb:15:11:7f:7f:
48:b9:17:c8:d3:41:c3:53:3f:1a:27:df:8e:47:b3:
7f:28:e6:0b:a0:c9:1a:37:f1:c3:af:a6:2d:0e:86:
d1:48:4e:df:97:69:2a:ef:60:5c:a0:2e:ec:6e:3b:
0d:0a:5d:5d:e2:ac:f1:c9:d6:42:08:c4:5a:f2:db:
2c:44:a8:0e:6a:40:a9:23:4c:d0:92:04:6b:37:30:
29:a2:41:a4:43:9f:f9:33:4d:44:1f:d9:b5:22:0d:
47:c4:79:cf:15:57:05:d6:12:78:79:44:32:96:5b:
9e:83:92:4a:9c:3d:64:6e:01:05:ba:e8:80:33:6b:
b2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E3:13:B7:DE:67:2E:E1:C9:19:7A:54:84:38:E4:64:61:10:69:E8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EOMTt95nLuHJGXpUhDjkZGEQaeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.228.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:45:7f:e4:4c:c7:7a:d3:c9:d9:65:7a:c3:1b:03:d6:7e:ee:
0c:74:dd:9e:31:26:0a:5c:3f:a7:22:26:25:d9:1a:33:51:c2:
e8:9d:8d:a7:65:d8:bf:66:3a:58:72:89:03:0c:7f:97:4f:a4:
35:4b:a8:56:62:8f:44:04:5d:83:ee:6f:11:d1:f1:ea:70:9f:
51:27:1a:01:df:3d:49:68:e2:a0:fb:67:18:38:b4:62:46:8e:
60:2d:3a:a8:4b:f3:b1:27:9b:33:88:00:81:b7:b1:26:99:b7:
87:0f:ab:a2:44:78:08:1d:a7:de:8e:bc:ab:6d:0d:89:a8:0d:
c6:dc:df:c9:29:fc:14:94:ea:fb:ae:20:14:91:2f:c8:5a:11:
5b:2b:e2:b1:82:c3:e7:bb:9b:22:82:11:b0:01:31:b4:e3:b7:
99:8f:79:f7:fc:86:ee:e2:4d:ce:df:90:7e:00:75:fa:83:ec:
99:a2:45:32:a6:50:12:75:c4:ab:c4:e1:90:3c:0e:9a:33:b9:
28:f5:43:86:a8:57:db:66:2c:3b:be:dc:1a:a3:86:37:4d:f7:
2a:2a:63:1e:2d:d0:c0:bb:66:e1:a7:f2:bf:d1:3a:b5:86:68:
f9:93:35:56:e9:88:61:6d:9d:7b:61:9c:1c:d3:59:f0:59:68:
d0:bd:17:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:16:42 2026 by rpki-client