Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EishyMEOCImw4IqZPIdhHfl4IWU.roa
File: EishyMEOCImw4IqZPIdhHfl4IWU.roa (raw, json)
Hash identifier: DzVlMoaucTlPO2sQjU7vmdHAP+0JY1m/BNRJ/lFSo3k=
Subject key identifier: 12:2B:21:C8:C1:0E:08:89:B0:E0:8A:99:3C:87:61:1D:F9:78:21:65
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E54A4F5A2FFF9DBD1B78E4497657041DC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EishyMEOCImw4IqZPIdhHfl4IWU.roa
Signing time: Sat 23 May 2026 11:42:37 +0000
ROA not before: Sat 23 May 2026 11:42:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198590
IP address blocks: 5.175.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:54:a4:f5:a2:ff:f9:db:d1:b7:8e:44:97:65:70:41:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 23 11:42:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=122b21c8c10e0889b0e08a993c87611df9782165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:f8:59:12:09:2b:f5:b3:61:37:cb:24:1e:
d2:d5:53:86:0c:fd:e9:5c:f9:54:dc:43:ad:cb:f8:
6a:33:a5:4a:de:f1:b8:2e:f9:96:67:9b:3f:2a:01:
3b:e0:1b:76:db:d0:99:0f:71:bd:97:10:75:4d:ad:
2f:47:e6:1a:70:af:61:95:c3:6b:c7:3d:bf:df:5f:
ad:54:5d:fc:43:58:04:d8:78:07:51:47:76:a4:8a:
66:8c:49:97:98:67:29:a9:a5:d5:85:bf:69:86:86:
a3:5d:84:39:92:a4:3e:d4:80:4b:a6:f6:60:41:6b:
cc:52:bc:ec:1c:44:0c:b0:5b:db:ed:0e:23:e1:64:
83:04:c5:05:51:5d:88:ab:db:b3:e7:b0:ca:44:6b:
d6:76:1b:6c:2c:89:fd:50:a1:52:21:5a:1b:e8:2c:
25:a8:4c:26:75:d5:19:1b:d5:d4:f6:a9:b8:b2:fb:
30:b3:b8:30:2e:f9:c1:06:e4:50:0d:a0:10:a1:44:
3a:6f:09:31:68:d5:d0:ae:01:05:80:d0:ef:ce:75:
af:88:d8:ee:2b:0b:65:66:60:08:91:a4:20:df:49:
71:85:c3:d3:cd:23:b5:e4:d7:b7:1c:b3:8f:ae:36:
04:76:e3:f9:b1:b0:8e:59:a1:f1:44:6e:96:d9:25:
b1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2B:21:C8:C1:0E:08:89:B0:E0:8A:99:3C:87:61:1D:F9:78:21:65
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EishyMEOCImw4IqZPIdhHfl4IWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.176.0/24
Signature Algorithm: sha256WithRSAEncryption
df:6a:ea:23:45:1d:a4:17:26:d8:de:29:1b:56:40:26:65:db:
36:76:56:eb:b3:a9:66:76:12:08:d4:50:9b:2d:5c:9c:99:8f:
27:c7:1b:60:81:3b:65:32:09:e7:c3:6e:43:b4:15:9e:c5:15:
f6:c4:77:ad:76:81:8d:83:a4:56:55:dc:5f:db:69:27:df:2c:
ef:b8:50:b9:63:dd:61:27:b4:83:39:94:93:5e:bd:5f:b5:88:
d8:35:7d:4b:4a:51:7d:4e:39:6b:7d:0e:7f:34:9c:fd:f3:b1:
af:69:a2:c3:7c:54:ce:11:5d:0a:a9:93:b7:54:dd:f9:c4:7f:
94:87:35:8a:c1:ee:4b:8e:1a:0f:29:27:a8:d1:7b:ab:2e:5e:
42:4b:ad:82:af:f5:d2:93:6a:fa:7c:7c:fa:4c:01:9a:a5:61:
b8:b5:4b:96:6c:76:3f:dd:77:eb:15:11:40:4f:18:12:3e:da:
2e:69:c7:1a:b3:d5:55:8d:7a:f2:3b:ff:59:a2:4b:09:9c:9e:
63:7b:aa:b5:55:25:84:93:29:17:0c:d5:c4:f2:f6:b6:56:06:
b9:bd:cc:ad:3c:6d:a0:9b:9e:16:f2:56:72:81:b5:d2:c6:99:
a5:55:b4:99:78:63:d5:7f:8d:78:ee:6b:c8:1f:97:8c:c9:bc:
d6:e1:8f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 18:28:06 2026 by rpki-client