Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/EINTPFiH9hO52T81csEkoYXu-gA.roa
File: EINTPFiH9hO52T81csEkoYXu-gA.roa (raw, json)
Hash identifier: Maarh53AWUTTKwtSup9/ObFOBcsX6zJiX1LfzwmG8uA=
Subject key identifier: 10:83:53:3C:58:87:F6:13:B9:D9:3F:35:72:C1:24:A1:85:EE:FA:00
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 019E56141316A99E1949150B635CEC6DD5B4
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/EINTPFiH9hO52T81csEkoYXu-gA.roa
Signing time: Sat 23 May 2026 18:23:36 +0000
ROA not before: Sat 23 May 2026 18:23:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400951
IP address blocks: 64.178.112.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:56:14:13:16:a9:9e:19:49:15:0b:63:5c:ec:6d:d5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: May 23 18:23:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1083533c5887f613b9d93f3572c124a185eefa00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:79:41:a0:e1:ca:7c:85:08:43:3a:26:da:
89:b8:e9:e3:1f:36:fd:a1:fd:ca:bd:92:db:8c:de:
11:f6:2e:cb:80:8c:68:80:ba:d9:de:ef:65:31:90:
ad:af:35:1e:49:89:d7:40:95:76:26:a1:5f:bc:41:
94:06:87:03:08:09:4b:ad:93:be:64:bc:2f:68:36:
d4:ad:ea:13:aa:3c:18:af:4f:0f:ab:3e:29:7f:71:
ad:d1:c5:3a:88:5a:b4:e7:da:62:13:98:4e:7a:17:
89:07:54:71:b9:56:04:dc:75:05:d4:d7:c3:a0:5d:
14:91:aa:99:72:80:49:d0:c6:bc:3d:8a:03:5e:f6:
24:57:d2:a3:8c:71:9a:76:64:68:3b:f9:1b:0c:e1:
5a:e2:a9:98:5c:c2:5e:8a:7d:08:53:8a:20:e2:66:
2c:46:c0:ea:b9:c5:8f:dd:47:b8:35:8d:4e:0a:9d:
c0:af:98:fe:50:bd:6c:db:0d:ef:40:f6:9f:0e:53:
82:9b:c7:e3:fe:b0:c9:06:49:f6:d7:ac:cb:f1:c8:
32:9e:5b:79:5d:08:fe:c8:8c:a1:93:e8:ad:42:54:
eb:ac:9d:08:40:db:21:f5:d6:3d:d7:6a:83:ac:22:
6d:b4:8f:df:da:6f:f4:ff:31:8f:46:03:bf:d9:18:
6a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:83:53:3C:58:87:F6:13:B9:D9:3F:35:72:C1:24:A1:85:EE:FA:00
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/EINTPFiH9hO52T81csEkoYXu-gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.178.112.0/23
Signature Algorithm: sha256WithRSAEncryption
27:00:be:5f:3b:20:c5:86:16:c9:a1:4c:fc:a7:b1:b1:1e:45:
fc:e3:23:bb:34:94:b6:cc:80:c4:19:83:d5:93:13:43:d7:19:
43:38:5c:b4:48:ba:e2:d1:51:4b:6b:52:98:7e:f3:a5:0a:a5:
00:72:4c:47:92:17:71:b2:16:17:6c:a0:b5:0a:ed:52:6f:27:
7b:ed:4b:e2:31:91:d1:d8:83:8d:b8:c3:c9:5d:73:3b:70:d2:
d0:6f:4e:54:1f:a7:16:d7:98:be:39:ce:76:85:10:36:53:53:
89:d9:87:71:57:4f:e3:d7:0a:37:b5:3b:b9:e9:e3:b1:e3:d7:
2b:40:77:1a:0d:d9:7a:cf:4b:21:cc:3e:ea:dc:ec:c6:49:c9:
4f:b2:7e:ff:31:d1:c0:4a:2c:82:0a:19:1f:e0:31:4f:d0:58:
81:fe:ca:6d:f1:24:82:6e:4e:22:d4:25:6b:93:2f:fb:43:30:
f8:7e:00:8f:da:37:57:33:ce:52:a6:e2:09:74:e5:1a:24:70:
59:00:86:bb:3a:89:b8:07:66:23:9a:62:14:02:b9:e1:81:f7:
cc:6f:58:98:45:2b:2f:b5:a7:27:51:3a:40:55:77:ce:58:38:
a7:ea:b4:da:31:0c:35:5f:46:07:cb:1a:f2:c0:72:ce:76:37:
ab:fe:30:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:14:31 2026 by rpki-client