Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/EUPj5bmAJuEhBkqMwbZBXTF5FqQ.roa
File: EUPj5bmAJuEhBkqMwbZBXTF5FqQ.roa (raw, json)
Hash identifier: HSkwKnW4fw6PClAhvpC6D1dSKqF/IabHKfDKvq4j/1c=
Subject key identifier: 11:43:E3:E5:B9:80:26:E1:21:06:4A:8C:C1:B6:41:5D:31:79:16:A4
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F6A144C36C4DB893BDF3084B2DE19F54
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/EUPj5bmAJuEhBkqMwbZBXTF5FqQ.roa
Signing time: Thu 01 Oct 2026 08:42:38 +0000
ROA not before: Thu 01 Oct 2026 08:42:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34262
IP address blocks: 82.141.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:a1:44:c3:6c:4d:b8:93:bd:f3:08:4b:2d:e1:9f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:42:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1143e3e5b98026e121064a8cc1b6415d317916a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:14:ca:95:30:4d:ec:7c:48:a9:78:34:d4:
90:93:94:a0:a0:ac:36:ca:23:4d:9f:59:2f:e2:6f:
42:49:57:f5:7f:d7:eb:1b:de:ea:d0:52:03:41:26:
9b:7e:43:b1:ff:68:65:14:31:1c:a7:4c:4d:1e:d9:
da:4a:3c:0f:7f:42:2f:71:98:6e:89:00:2a:28:9b:
5e:c1:90:d2:33:47:85:75:cb:3d:8d:01:39:c2:bf:
0b:31:c6:bd:71:fc:50:a1:45:bf:51:1a:cb:52:ac:
5f:67:71:e6:9a:bc:3f:86:71:6f:7e:db:47:49:49:
e6:e3:ca:9c:98:dd:36:f5:3f:f1:29:00:b2:ad:f6:
38:8c:48:88:79:fd:84:7c:5b:91:73:51:32:d1:9e:
ba:47:f8:c7:15:cc:2a:d0:23:6f:a2:f4:5e:8c:a6:
92:47:76:30:b3:2f:3f:fe:ea:0b:6b:e0:d6:89:73:
33:c6:78:7e:9c:bd:15:f9:0f:5d:09:d4:dd:be:37:
7f:53:e0:d6:16:8d:68:29:2d:13:17:ff:ce:72:8d:
53:62:f9:3d:5e:e2:7f:3b:04:b2:48:93:93:71:01:
20:14:05:d9:35:d7:e6:bb:b8:02:4a:78:23:54:98:
69:d8:b2:9a:d5:2c:87:4b:09:cc:c8:6f:b5:5b:76:
d4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:43:E3:E5:B9:80:26:E1:21:06:4A:8C:C1:B6:41:5D:31:79:16:A4
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/EUPj5bmAJuEhBkqMwbZBXTF5FqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.141.154.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:86:ac:9d:a9:72:e4:bf:b8:1c:60:e4:72:57:8c:68:5f:46:
67:36:68:15:41:10:93:f7:39:dd:01:2f:cd:fe:8a:36:d0:f2:
69:cf:45:ec:28:76:7c:85:cf:02:3f:a7:15:5b:e5:88:36:7b:
e6:4e:24:c6:72:7c:3e:c3:98:a6:25:79:4d:6a:8a:69:99:bc:
f7:2d:1c:2c:1a:09:c4:1b:83:28:2f:98:e3:86:a0:35:27:8b:
71:ff:0d:94:29:b8:11:16:ac:d2:b8:35:d2:10:c0:bc:92:16:
d7:34:06:49:80:08:d2:9f:1c:40:4a:86:bf:d0:49:aa:a0:38:
26:84:b4:7c:27:41:09:98:73:b4:62:1d:b0:65:20:a9:90:63:
37:63:6d:3e:73:fd:00:47:60:2d:e4:e3:9a:f8:be:42:f1:1c:
fe:8f:f5:5a:97:b5:c8:a9:d0:3c:09:96:e1:f4:e8:b6:2b:4b:
4d:2b:2c:fd:be:ae:4f:f3:69:ff:41:30:a9:8e:4a:b6:18:2d:
4b:67:fe:1e:bf:90:29:8e:b9:bf:2a:06:0d:07:a7:d9:16:52:
f7:07:07:57:80:0d:a3:36:17:e3:cf:65:8c:a1:ca:ed:4f:c7:
6c:88:cd:f5:ff:cb:f6:99:2c:95:f8:c1:4b:6e:7d:73:69:0a:
e2:6a:a6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:59 2026 by rpki-client