Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EipUMF9Ij3EMChip3FP43nXjBww.roa
File: EipUMF9Ij3EMChip3FP43nXjBww.roa (raw, json)
Hash identifier: LY2mN5MRnkYJ7dMshDxZf0KLbOuxhk/oGr4thQbVJMw=
Subject key identifier: 12:2A:54:30:5F:48:8F:71:0C:0A:18:A9:DC:53:F8:DE:75:E3:07:0C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A00DE72AD5730EED3977E76ACE2364FFDD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EipUMF9Ij3EMChip3FP43nXjBww.roa
Signing time: Mon 17 Aug 2026 04:07:28 +0000
ROA not before: Mon 17 Aug 2026 04:07:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47263
IP address blocks: 5.231.20.0/23 maxlen: 23
5.231.20.0/24 maxlen: 24
5.231.21.0/24 maxlen: 24
5.231.30.0/24 maxlen: 24
5.231.47.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
89.144.31.0/24 maxlen: 24
94.103.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0d:e7:2a:d5:73:0e:ed:39:77:e7:6a:ce:23:64:ff:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 17 04:07:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=122a54305f488f710c0a18a9dc53f8de75e3070c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:d3:82:f7:01:24:ef:15:8b:88:2c:9d:19:
cf:0f:89:3f:3c:af:c9:b2:f0:da:1f:6c:15:b5:88:
cd:9f:c9:c4:29:f8:d0:a3:8f:cd:b0:06:8f:25:25:
49:51:57:e2:6e:90:0d:cb:df:59:93:13:a7:a0:df:
1a:1c:a5:36:94:96:49:eb:6c:da:26:76:ad:44:02:
4a:74:c4:39:2c:4c:95:76:7e:3e:dc:c8:20:31:41:
82:2a:cf:70:e8:c8:19:b4:4d:e9:68:98:44:ff:8d:
f0:64:40:90:a7:12:56:41:bc:10:08:49:97:be:eb:
e5:e1:61:a5:e3:43:5f:68:03:67:4f:68:6e:bc:c6:
d8:29:9d:62:9e:5d:4d:09:ba:a2:7e:11:bf:f8:87:
4d:13:3c:ae:32:0a:f1:74:a9:8b:5b:56:7d:c5:50:
da:c8:1c:ca:3a:80:a4:25:3f:e6:57:33:f2:6a:99:
97:1d:10:37:fa:1d:69:43:0f:21:3c:a8:54:cf:7c:
d2:d4:34:7f:07:88:12:62:26:4f:f3:0b:34:f9:bd:
76:d5:45:18:85:92:9b:1e:62:3a:d2:85:a5:a5:93:
a9:d7:93:ff:02:c7:39:ee:a7:65:ed:8d:95:53:7b:
50:76:7f:3e:ac:84:10:5e:8f:9f:13:de:8e:28:fc:
69:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2A:54:30:5F:48:8F:71:0C:0A:18:A9:DC:53:F8:DE:75:E3:07:0C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EipUMF9Ij3EMChip3FP43nXjBww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.20.0/23
5.231.30.0/24
5.231.47.0/24
77.90.37.0/24
89.144.31.0/24
94.103.164.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:97:84:9a:81:52:ae:15:87:20:07:a1:3d:73:9d:60:d2:c1:
73:f9:af:ca:10:44:d7:43:68:69:fd:df:3b:8d:c7:97:d6:75:
0c:33:72:f2:c4:3e:40:a6:92:42:e3:b8:fb:b5:15:8f:c9:3b:
00:4a:2e:39:b2:c7:3d:69:18:5b:74:51:80:be:19:df:1e:11:
ce:fa:bf:17:13:eb:3b:d5:66:aa:d2:ac:5b:27:1f:36:ed:ba:
46:b0:6c:92:a3:a5:26:54:6c:1e:18:c5:36:55:2c:60:b5:a5:
65:c9:c3:ae:f6:d0:a0:42:1d:7b:52:61:e9:f2:e4:0b:7e:2c:
f6:af:6a:62:3b:2d:54:66:15:27:87:78:a9:d2:5c:55:ba:19:
7b:93:b5:84:0a:e8:7a:f3:9f:f2:68:b9:b9:4c:bd:5d:b6:45:
41:4d:6a:9a:8e:dc:97:a2:09:f1:49:b8:9a:53:6f:b1:d3:08:
aa:d2:53:84:3c:fb:58:bc:53:84:d2:96:b4:fa:01:49:07:0b:
11:b6:dd:46:50:df:d8:11:b1:34:d1:eb:97:da:29:19:23:c1:
f9:cb:4b:4c:16:69:63:71:f6:6e:74:13:07:33:91:c3:bc:26:
2b:e1:48:27:ec:c5:56:24:b8:b2:a2:9d:96:3b:f0:4f:7e:d1:
b6:3b:ed:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:32 2026 by rpki-client