Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/EgUddJnQyW-DZo-6cboASv4IDkM.roa
File: EgUddJnQyW-DZo-6cboASv4IDkM.roa (raw, json)
Hash identifier: E6KKUo7CLQIRbYpxq6kq88AYxp+VGIoTBpmzfke9TAA=
Subject key identifier: 12:05:1D:74:99:D0:C9:6F:83:66:8F:BA:71:BA:00:4A:FE:08:0E:43
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 019F0EA759780E94F5E65F76B9C4594DA7B2
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/EgUddJnQyW-DZo-6cboASv4IDkM.roa
Signing time: Sun 28 Jun 2026 14:34:36 +0000
ROA not before: Sun 28 Jun 2026 14:34:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396856
IP address blocks: 189.24.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0e:a7:59:78:0e:94:f5:e6:5f:76:b9:c4:59:4d:a7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Jun 28 14:34:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12051d7499d0c96f83668fba71ba004afe080e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:60:56:1c:93:94:74:0c:88:55:51:70:2c:be:
7f:46:12:03:ca:8c:f2:1c:18:61:b6:ce:f4:36:c0:
8e:b2:43:62:64:69:79:91:10:86:0f:cf:26:d7:33:
d5:b2:89:d1:75:38:a3:b5:ab:58:80:8f:5b:ea:ec:
f4:fd:02:d0:6f:cb:be:d7:36:0f:bc:0a:67:4c:76:
02:75:ce:34:fa:0d:f7:75:96:11:36:a1:78:39:ef:
72:46:de:fb:ea:68:b4:ec:da:d0:69:3c:d6:c8:b8:
f2:cb:9f:28:4f:db:cc:22:4f:8f:40:3a:69:b8:ed:
63:60:b2:ca:62:38:ce:fd:d1:5b:6b:c9:54:fa:4f:
81:bf:91:63:89:ec:75:ff:cb:af:05:11:51:cf:f5:
8f:d3:01:b5:fd:71:45:2d:c2:1d:ce:3f:a7:a2:2e:
75:5c:f4:ee:9b:85:87:69:e2:53:40:a1:e2:a6:4d:
dd:1d:b7:d8:36:74:09:7c:d3:10:ee:e4:d1:00:35:
a1:ec:57:18:f3:e2:5d:b3:56:32:d8:84:ba:b4:0d:
94:e2:18:d9:22:53:9b:28:1c:d7:f0:ac:ed:42:0f:
ff:26:68:ea:e1:25:9f:a2:ec:94:b7:b2:84:eb:be:
b1:a1:88:5d:34:5d:16:1a:12:af:d1:7d:c4:df:99:
13:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:05:1D:74:99:D0:C9:6F:83:66:8F:BA:71:BA:00:4A:FE:08:0E:43
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/EgUddJnQyW-DZo-6cboASv4IDkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.24.124.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:85:3e:e2:ba:72:c9:ca:d4:c9:d7:59:4b:54:9b:8e:cb:ac:
75:f5:63:fc:26:ed:bd:14:76:4a:9f:fa:38:f4:87:f0:b7:b8:
90:66:cc:82:4b:e4:34:6e:00:39:b1:bc:25:a4:d5:52:e7:ee:
1b:72:3a:96:1a:80:ae:8b:b7:d7:fc:e9:9f:82:55:64:f6:56:
44:1f:18:72:e8:ad:c4:39:bf:da:31:00:7a:29:2c:31:dd:38:
a1:11:1b:44:69:9f:d7:ba:f6:b3:55:21:0b:98:17:ac:ca:76:
c1:9b:d8:21:2a:8b:f8:db:37:05:b5:c1:2d:d2:1a:0e:f3:3a:
81:0c:0c:09:09:57:5c:2d:1a:70:b4:ee:4b:8e:90:2e:d4:0a:
f5:54:bd:33:11:81:29:71:16:da:ab:00:5c:ab:11:f4:7a:4b:
12:88:76:71:c6:67:54:00:5c:93:fd:07:5b:d7:59:81:70:73:
56:e5:b4:db:06:4c:95:dd:50:15:53:54:d7:a3:61:70:47:af:
17:5d:72:96:37:4f:b2:5a:72:b6:a3:19:8c:2c:98:e8:6e:7e:
1e:95:c6:01:8e:c9:ee:48:2c:d7:9e:32:f3:db:d3:5e:09:bb:
b5:85:b3:fb:00:76:3e:05:f2:fb:bf:10:cb:66:7a:5f:5f:fb:
6f:25:38:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:54 2026 by rpki-client