Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/EQk94cHvnErnoie7u844D3sVCWo.roa
File: EQk94cHvnErnoie7u844D3sVCWo.roa (raw, json)
Hash identifier: H4OWSOagFUNX4MuWTQWafvSfmnsnQWIg36VdYvJq/wA=
Subject key identifier: 11:09:3D:E1:C1:EF:9C:4A:E7:A2:27:BB:BB:CE:38:0F:7B:15:09:6A
Certificate issuer: /CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
Certificate serial: 019FCC1E74277C860F6B213F9E6390A88B31
Authority key identifier: E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/EQk94cHvnErnoie7u844D3sVCWo.roa
Signing time: Tue 04 Aug 2026 09:32:55 +0000
ROA not before: Tue 04 Aug 2026 09:32:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35133
IP address blocks: 77.73.114.0/24 maxlen: 24
217.18.95.0/24 maxlen: 32
2a07:5500::/29 maxlen: 29
2a07:5506::/32 maxlen: 32
2a07:5507::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:1e:74:27:7c:86:0f:6b:21:3f:9e:63:90:a8:8b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
Validity
Not Before: Aug 4 09:32:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11093de1c1ef9c4ae7a227bbbbce380f7b15096a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:01:89:c8:4c:15:8c:2d:ad:c6:f4:2a:7a:
b4:11:96:90:87:60:de:84:70:a7:d4:a0:25:c6:07:
80:90:c9:5b:78:c8:77:33:03:6e:93:47:08:ec:81:
45:11:21:13:bf:e4:60:60:e6:5a:6a:ed:f7:04:a7:
a9:aa:04:51:fa:6a:80:ff:c8:dd:3d:2c:17:76:a9:
c7:3c:9a:85:91:40:e2:89:59:60:4b:c3:8c:aa:ae:
2b:3a:8a:a9:67:68:47:03:93:87:61:c6:bf:0e:7a:
8a:f1:89:c2:1f:2c:00:1f:93:9d:ca:27:a1:65:e5:
ad:6f:67:66:e9:63:6d:e4:11:53:0f:2f:b6:0d:fc:
30:77:0a:6a:c4:32:02:cd:8a:c9:fc:6e:4b:9e:8a:
58:74:2d:1c:f1:e6:5e:a2:27:32:a7:e1:7f:0d:4e:
c5:38:85:6c:c8:e2:0c:73:db:ff:49:a4:00:91:9a:
05:c4:aa:63:48:73:24:da:e0:b4:65:f3:4c:84:b4:
f4:d2:1b:5e:a5:e6:43:0d:5a:3e:a5:bb:cf:5f:13:
01:2f:04:ae:0a:4e:f1:25:70:9b:34:2c:35:fe:34:
76:b2:eb:19:95:a2:d3:c9:58:cb:5e:fc:ba:b0:d9:
60:a6:b8:94:71:dd:94:4b:27:47:76:fa:65:45:79:
1c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:09:3D:E1:C1:EF:9C:4A:E7:A2:27:BB:BB:CE:38:0F:7B:15:09:6A
X509v3 Authority Key Identifier:
keyid:E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/EQk94cHvnErnoie7u844D3sVCWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.114.0/24
217.18.95.0/24
IPv6:
2a07:5500::/29
Signature Algorithm: sha256WithRSAEncryption
4f:32:96:44:d2:bb:a4:3e:ba:29:b7:9a:41:3c:cf:bc:0a:67:
ca:cd:b8:4b:f9:66:eb:c7:c6:b7:ae:30:38:bd:a0:67:ad:57:
f9:58:98:39:3c:84:49:ac:29:c4:85:a1:8f:1b:f4:8f:5b:02:
80:50:75:ad:4b:a1:e7:cb:1c:a5:ae:67:6a:ac:fc:4f:1a:f4:
de:86:8d:c7:04:7e:fd:de:05:a3:da:6d:bf:4a:8a:7d:49:57:
49:ae:12:1f:f2:ee:ee:ad:16:b2:8e:66:ea:88:48:23:b4:58:
a6:2c:ec:ef:06:61:ab:eb:14:0f:d4:ce:56:a2:6e:2e:fe:3a:
d6:ee:0a:86:f2:ad:27:20:98:e9:2e:8e:bb:90:b8:8e:b5:cf:
e8:d9:3e:55:94:db:96:1e:26:36:c4:27:0d:5e:ad:64:10:a7:
d3:0a:20:21:51:d3:31:ea:58:16:eb:f8:83:f1:d6:f4:75:16:
e0:39:27:45:0c:cd:0f:a8:af:31:7e:8c:e8:b2:5a:86:aa:51:
2b:48:37:2f:44:93:26:a7:66:2e:a4:75:7e:ef:02:d2:40:32:
65:db:2e:09:e4:a0:64:4d:3c:47:ae:1d:1a:b3:07:64:43:ef:
b7:12:0e:dd:4a:45:77:28:8c:ee:5f:d6:ad:a2:b1:16:b2:e1:
a6:58:03:86
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ/MHnQnfIYPayE/nmOQqIsxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YmQyNmRjZTQ4MTYxYzdmYmY5ZmY2N2I5MDdmMWU2MDVj
MjVhNjYwHhcNMjYwODA0MDkzMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTA5M2RlMWMxZWY5YzRhZTdhMjI3YmJiYmNlMzgwZjdiMTUwOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOABichMFYwtrcb0Knq0EZaQh2De
hHCn1KAlxgeAkMlbeMh3MwNuk0cI7IFFESETv+RgYOZaau33BKepqgRR+mqA/8jd
PSwXdqnHPJqFkUDiiVlgS8OMqq4rOoqpZ2hHA5OHYca/DnqK8YnCHywAH5Odyieh
ZeWtb2dm6WNt5BFTDy+2DfwwdwpqxDICzYrJ/G5LnopYdC0c8eZeoicyp+F/DU7F
OIVsyOIMc9v/SaQAkZoFxKpjSHMk2uC0ZfNMhLT00htepeZDDVo+pbvPXxMBLwSu
Ck7xJXCbNCw1/jR2susZlaLTyVjLXvy6sNlgpriUcd2USydHdvplRXkcMQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBEJPeHB75xK56Inu7vOOA97FQlqMB8GA1UdIwQY
MBaAFOi9JtzkgWHH+/n/Z7kH8eYFwlpmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkwwbTNPU0JZY2Y3LWY5bnVRZng1Z1hDV21ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iZDljYTgtMTc5Yi00MzIyLWEwOTQt
NTBkZDNhNTgxNTRiLzEvRVFrOTRjSHZuRXJub2llN3U4NDREM3NWQ1dvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iZDljYTgtMTc5Yi00MzIyLWEwOTQtNTBkZDNhNTgxNTRi
LzEvNkwwbTNPU0JZY2Y3LWY5bnVRZng1Z1hDV21ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQATUlyAwQA
2RJfMA0EAgACMAcDBQMqB1UAMA0GCSqGSIb3DQEBCwUAA4IBAQBPMpZE0rukProp
t5pBPM+8CmfKzbhL+Wbrx8a3rjA4vaBnrVf5WJg5PIRJrCnEhaGPG/SPWwKAUHWt
S6HnyxylrmdqrPxPGvTeho3HBH793gWj2m2/Sop9SVdJrhIf8u7urRayjmbqiEgj
tFimLOzvBmGr6xQP1M5Wom4u/jrW7gqG8q0nIJjpLo67kLiOtc/o2T5VlNuWHiY2
xCcNXq1kEKfTCiAhUdMx6lgW6/iD8db0dRbgOSdFDM0PqK8xfozoslqGqlErSDcv
RJMmp2YupHV+7wLSQDJl2y4J5KBkTTxHrh0aswdkQ++3Eg7dSkV3KIzuX9atorEW
suGmWAOG
-----END CERTIFICATE-----
Generated at Fri Aug 14 04:49:20 2026 by rpki-client