Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/EiM_-KBfKF7Pg1oViQzQvqKNhtc.roa
File: EiM_-KBfKF7Pg1oViQzQvqKNhtc.roa (raw, json)
Hash identifier: 5YReDoPUwdhIADqyUF4wNUOze1MzTC4l2E3bDeY5mNI=
Subject key identifier: 12:23:3F:F8:A0:5F:28:5E:CF:83:5A:15:89:0C:D0:BE:A2:8D:86:D7
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F69F6F2835B1F319ED54175AADFB26DE
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/EiM_-KBfKF7Pg1oViQzQvqKNhtc.roa
Signing time: Thu 01 Oct 2026 08:40:38 +0000
ROA not before: Thu 01 Oct 2026 08:40:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19551
IP address blocks: 213.253.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:9f:6f:28:35:b1:f3:19:ed:54:17:5a:ad:fb:26:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:40:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12233ff8a05f285ecf835a15890cd0bea28d86d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4b:9f:ef:29:58:0e:29:2d:32:7d:d0:07:ae:
62:31:4c:de:8a:32:d2:23:8e:24:79:68:b1:ee:d6:
5d:8e:60:a1:13:8f:5b:b4:2f:40:96:e0:85:5d:0c:
6c:ee:7e:ef:b3:16:b0:bb:06:25:79:a3:6c:81:b5:
4a:34:eb:67:78:40:ef:f5:cf:80:6a:64:0a:6a:89:
c0:4a:9c:14:bc:c2:b7:bd:e3:f2:52:e4:37:11:01:
4c:7d:1c:8e:7a:f5:d1:3d:26:35:c2:e2:7f:65:01:
c9:6f:c4:36:df:12:1f:41:2a:18:84:fb:56:3c:78:
0d:e8:2c:e5:a0:b3:01:dc:ac:7b:6d:00:be:b9:0c:
76:6f:ef:dc:97:d7:1d:e6:2f:1d:c8:22:05:5d:27:
b8:9b:65:71:02:78:83:89:ee:57:08:0b:1c:74:5f:
18:07:7e:cb:91:f6:4d:41:da:ef:56:5c:60:31:be:
c9:1e:a4:41:33:c2:a7:2e:63:66:14:bc:e0:1e:d2:
d0:ef:83:e7:d8:e9:ae:f6:d1:cf:f6:bd:ca:4a:4f:
2a:c7:1c:20:67:70:1c:13:ac:33:6b:ee:2e:db:be:
66:3a:8a:78:aa:27:59:db:8b:bd:0d:45:4d:4b:d3:
a3:e4:71:08:59:a4:ca:22:b9:e1:ce:b5:1b:56:27:
62:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:23:3F:F8:A0:5F:28:5E:CF:83:5A:15:89:0C:D0:BE:A2:8D:86:D7
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/EiM_-KBfKF7Pg1oViQzQvqKNhtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.253.215.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:91:de:cf:a9:5c:72:12:35:fa:84:3d:27:6f:ca:c2:d7:58:
fe:7e:57:04:78:74:f8:c9:a7:8d:ee:1c:9b:b2:20:71:0f:78:
a6:2a:5b:a3:30:5e:50:f4:3b:f5:d4:31:d5:6a:d9:e0:f4:2e:
0c:dd:40:98:fd:56:1d:fc:1f:d7:6e:df:8b:15:4a:5d:17:7e:
31:ff:37:c3:79:07:26:eb:4f:ce:28:3e:1d:f4:48:aa:8b:b3:
b5:b7:e0:b9:3d:8f:06:45:ca:79:5b:b2:64:02:ef:ed:cc:db:
65:d0:c0:e1:d4:4a:e4:a4:17:f2:97:fd:17:29:ce:6a:0b:e0:
a9:ad:71:4f:ff:78:78:b9:f6:ba:67:3e:8a:82:5d:1d:2e:2b:
88:89:8b:d0:d1:72:48:5d:51:0d:03:0e:55:f4:6c:be:fb:8b:
09:fb:ce:27:bd:a6:0e:1f:71:0c:0c:ec:92:96:f3:6a:48:22:
85:80:ff:85:3e:82:7c:67:4a:4f:53:73:3b:97:b5:6e:a7:ea:
b6:c7:91:d4:c6:13:9c:0e:73:0b:24:63:c0:43:0c:0c:24:4d:
eb:c4:1d:f5:2e:38:58:6f:2a:08:58:2a:87:bf:e8:fd:07:c6:
d7:1c:ab:a5:26:14:21:ca:89:d0:c1:75:3b:f3:32:81:bd:42:
6e:2c:5c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:44:37 2026 by rpki-client