Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Ec6pumLbFWm-2ggg4GTIyZ5WhHI.roa
File: Ec6pumLbFWm-2ggg4GTIyZ5WhHI.roa (raw, json)
Hash identifier: BAbSE9dO4T1GnCKBKv9HoFvZtw+ItuiuepY9geBARxM=
Subject key identifier: 11:CE:A9:BA:62:DB:15:69:BE:DA:08:20:E0:64:C8:C9:9E:56:84:72
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A07A83E932E912BED001BBC96B617A8918
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Ec6pumLbFWm-2ggg4GTIyZ5WhHI.roa
Signing time: Mon 07 Sep 2026 06:17:40 +0000
ROA not before: Mon 07 Sep 2026 06:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219075
IP address blocks: 194.233.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:83:e9:32:e9:12:be:d0:01:bb:c9:6b:61:7a:89:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 7 06:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11cea9ba62db1569beda0820e064c8c99e568472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b8:c4:a7:3a:2c:97:73:c5:a5:58:0b:63:6e:
0b:3e:66:22:11:62:0a:4f:f9:08:98:25:7e:d4:e1:
a8:6c:85:3d:c2:20:1d:76:bf:04:e5:b7:a2:b9:a8:
ac:cd:a9:01:9c:d8:10:19:e5:f8:6d:be:51:ee:97:
25:c5:f4:4b:6d:bd:76:6a:f9:ec:d7:d0:02:8f:8f:
70:3e:7a:99:a8:fe:a5:8d:1e:b1:4e:12:6d:2d:a6:
63:91:39:07:73:d3:d5:8c:a8:fb:8a:18:0a:88:4f:
11:ba:19:69:a3:47:ab:b3:07:00:b0:eb:b1:03:8a:
18:16:64:65:e3:f7:a0:86:d0:70:b6:68:29:f5:ad:
59:94:4d:82:7b:da:ea:c7:fb:f3:8e:8d:b3:0b:2c:
44:f0:ef:fb:03:5a:a9:18:38:d0:0e:07:41:9b:66:
37:a1:c3:38:0d:83:0c:7a:19:46:1d:6e:12:f8:2c:
14:51:a4:1c:d3:83:e6:6f:04:8e:34:cd:ca:46:1c:
fe:84:1c:c8:0f:5c:42:a7:13:56:f6:d5:ad:fa:64:
6d:1a:02:c0:43:b9:c7:15:c3:5b:6d:52:25:88:1b:
46:61:5d:c5:d0:b8:cf:31:34:1b:51:f5:2a:36:ce:
ea:d2:77:03:ea:dd:c8:7a:8d:07:0d:a7:b6:38:af:
21:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CE:A9:BA:62:DB:15:69:BE:DA:08:20:E0:64:C8:C9:9E:56:84:72
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Ec6pumLbFWm-2ggg4GTIyZ5WhHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.149.0/24
Signature Algorithm: sha256WithRSAEncryption
11:55:c8:d2:4a:52:fe:9a:45:38:5b:15:bd:b1:28:7b:41:88:
a7:71:d5:dc:62:c6:3a:a1:59:db:99:24:51:ba:73:d2:ca:33:
d3:a2:39:7d:21:4c:71:bc:b1:8c:85:31:6d:b3:75:42:3c:08:
c2:2f:e7:07:75:1a:c0:a9:e3:7c:4f:ee:e8:c7:25:97:f5:2d:
21:bc:cc:6e:e2:c7:03:0e:7d:a8:94:53:03:fd:11:ab:9f:59:
dd:ff:50:1d:36:51:68:91:a4:f0:57:db:86:ab:0a:47:d6:a5:
bc:5d:b4:1a:99:bd:02:ae:4a:65:e1:0e:62:b1:b0:12:a0:79:
c9:c0:b8:bd:f6:3d:a4:6d:7e:8c:70:a9:f6:80:bc:6b:61:2a:
98:54:4b:b5:76:d3:9b:dd:ba:7a:b2:0b:8b:c0:4e:96:bc:0d:
db:7d:23:e0:57:1d:79:4f:71:ca:53:30:1a:e0:05:6e:b4:99:
4e:92:9f:8a:08:75:2a:f7:82:91:ea:80:72:37:86:26:0a:00:
b7:20:77:a9:60:6d:ff:f7:9e:cd:6e:d8:fb:29:3a:5a:2f:3a:
34:d5:b3:8f:ef:ae:5e:31:61:b3:33:d3:a7:2a:00:01:78:2f:
fd:ec:d9:4f:e7:09:f2:f0:ca:45:4b:c3:7a:27:b2:87:8d:47:
a0:23:05:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaB6g+ky6RK+0AG7yWtheokYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjYwOTA3MDYxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWNlYTliYTYyZGIxNTY5YmVkYTA4MjBlMDY0YzhjOTllNTY4NDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA97jEpzosl3PFpVgLY24LPmYiEWIK
T/kImCV+1OGobIU9wiAddr8E5beiuaiszakBnNgQGeX4bb5R7pclxfRLbb12avns
19ACj49wPnqZqP6ljR6xThJtLaZjkTkHc9PVjKj7ihgKiE8Ruhlpo0erswcAsOux
A4oYFmRl4/eghtBwtmgp9a1ZlE2Ce9rqx/vzjo2zCyxE8O/7A1qpGDjQDgdBm2Y3
ocM4DYMMehlGHW4S+CwUUaQc04PmbwSONM3KRhz+hBzID1xCpxNW9tWt+mRtGgLA
Q7nHFcNbbVIliBtGYV3F0LjPMTQbUfUqNs7q0ncD6t3Ieo0HDae2OK8hNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBHOqbpi2xVpvtoIIOBkyMmeVoRyMB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvRWM2cHVtTGJGV20tMmdnZzRHVEl5WjVXaEhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwumVMA0G
CSqGSIb3DQEBCwUAA4IBAQARVcjSSlL+mkU4WxW9sSh7QYincdXcYsY6oVnbmSRR
unPSyjPTojl9IUxxvLGMhTFts3VCPAjCL+cHdRrAqeN8T+7oxyWX9S0hvMxu4scD
Dn2olFMD/RGrn1nd/1AdNlFokaTwV9uGqwpH1qW8XbQamb0Crkpl4Q5isbASoHnJ
wLi99j2kbX6McKn2gLxrYSqYVEu1dtOb3bp6sguLwE6WvA3bfSPgVx15T3HKUzAa
4AVutJlOkp+KCHUq94KR6oByN4YmCgC3IHepYG3/957Nbtj7KTpaLzo01bOP765e
MWGzM9OnKgABeC/97NlP5wny8MpFS8N6J7KHjUegIwUi
-----END CERTIFICATE-----
Generated at Tue Sep 8 18:28:32 2026 by rpki-client