Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Eiqk4xSVjcRTuuVmXJBeUsZDjNc.roa
File: Eiqk4xSVjcRTuuVmXJBeUsZDjNc.roa (raw, json)
Hash identifier: fMKBZRAkELrox6xHawYxU6QvQ53mp/eHKxDZT1eRprc=
Subject key identifier: 12:2A:A4:E3:14:95:8D:C4:53:BA:E5:66:5C:90:5E:52:C6:43:8C:D7
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A15984712130899A0424E78F5450A8F6F1
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Eiqk4xSVjcRTuuVmXJBeUsZDjNc.roa
Signing time: Tue 20 Oct 2026 13:33:34 +0000
ROA not before: Tue 20 Oct 2026 13:33:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11990
IP address blocks: 45.149.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:84:71:21:30:89:9a:04:24:e7:8f:54:50:a8:f6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 20 13:33:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=122aa4e314958dc453bae5665c905e52c6438cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8c:67:92:02:e5:ec:d8:89:cb:b6:79:c0:85:
d2:08:10:dc:ce:74:56:2b:95:6e:5e:ad:92:b0:49:
1a:2a:37:b1:4d:bb:5d:7c:16:8f:e1:70:a8:a5:95:
c0:b3:17:c6:4d:b1:56:4b:21:ec:7f:ce:84:39:87:
6a:79:02:5b:05:02:57:5c:84:b5:2e:9f:c0:b8:3f:
b8:9c:73:ae:20:8a:ca:5b:8e:e5:af:ee:76:ea:f8:
80:80:c1:8a:d5:8b:bc:1d:13:b9:ad:7b:b7:d8:78:
30:be:ea:42:1a:ad:a5:c3:27:1c:a5:5b:71:44:e3:
bf:af:32:70:e2:cb:ae:0b:70:a9:e3:da:7e:43:ac:
95:9f:fb:26:0f:2b:78:72:05:8b:27:4b:14:b6:12:
fc:f2:69:df:60:11:63:a5:5e:35:84:19:8c:02:17:
8f:12:27:7f:5b:d3:0d:ba:be:f9:3e:b9:8e:c7:87:
8c:7f:b5:b9:1b:3b:c0:ab:c9:bd:bd:89:84:8a:cc:
01:c6:3f:da:e8:21:ff:a3:f2:65:c3:4e:62:56:b2:
fe:ff:72:da:8e:63:96:c6:46:c5:35:9d:6e:d4:aa:
c2:0c:3d:33:d3:ff:c2:72:7d:6c:cc:45:ad:3e:e8:
b2:80:20:71:0e:dc:7d:68:1b:25:1a:9b:ec:ca:6e:
94:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2A:A4:E3:14:95:8D:C4:53:BA:E5:66:5C:90:5E:52:C6:43:8C:D7
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Eiqk4xSVjcRTuuVmXJBeUsZDjNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.25.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:11:17:80:8d:1c:71:55:b1:74:19:ae:b2:1b:5d:be:a7:e5:
74:d3:6f:8c:ee:16:ec:56:5d:80:27:41:dc:69:dc:28:e7:be:
81:80:e2:f1:c3:c0:1a:c4:ab:62:8d:86:e4:56:87:96:83:5d:
fa:36:26:ca:ae:8e:51:43:51:40:77:62:c7:a6:f6:12:9b:42:
ff:12:86:b3:2d:cd:72:9f:74:81:b3:f2:f8:6d:bc:e1:17:de:
6e:2d:f2:8e:01:a8:82:f4:a2:5b:97:1d:13:41:a0:05:2b:a0:
74:7a:15:3e:b3:00:30:af:20:85:47:9f:0c:b6:99:1a:0b:66:
0c:ff:a8:8d:30:df:4a:f5:ad:c8:cb:24:83:5e:50:90:57:e1:
28:85:f3:c2:6c:82:17:00:86:2b:0c:b1:fb:e1:9f:7f:fd:68:
a9:e0:9d:0d:9e:3f:8b:2a:d0:4b:1a:60:f8:22:6e:34:a2:21:
63:6b:86:a5:12:d6:43:80:d7:eb:6e:17:66:fd:9f:5e:a0:0a:
29:90:b0:f5:18:88:c3:c6:67:dc:58:f9:73:1b:3a:43:50:14:
49:66:27:11:bb:e8:7e:15:e4:ec:68:5d:48:3b:30:e5:68:e3:
59:cc:0c:f4:1b:f2:5e:a4:b9:bd:43:09:e5:73:f3:1a:3c:c4:
92:06:d6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:57:40 2026 by rpki-client