Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/eoiSFeFECKtcnFf4YtHRnwCPW10.roa
File: eoiSFeFECKtcnFf4YtHRnwCPW10.roa (raw, json)
Hash identifier: IbPy1Qz2w58diZKLRaNbFHOydlFSH5+9VYYyTRLP2cA=
Subject key identifier: 7A:88:92:15:E1:44:08:AB:5C:9C:57:F8:62:D1:D1:9F:00:8F:5B:5D
Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial: 01A10B45587DBA8CEA0321A0DD20B053351C
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/eoiSFeFECKtcnFf4YtHRnwCPW10.roa
Signing time: Mon 05 Oct 2026 08:54:16 +0000
ROA not before: Mon 05 Oct 2026 08:54:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 164.18.96.0/21 maxlen: 21
164.19.0.0/16 maxlen: 16
2a07:b982:c000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:45:58:7d:ba:8c:ea:03:21:a0:dd:20:b0:53:35:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597a01de87e011803f890ae17749020f995f140c
Validity
Not Before: Oct 5 08:54:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a889215e14408ab5c9c57f862d1d19f008f5b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:76:bf:f5:2e:60:44:dc:c1:a6:c4:37:28:
71:f8:a3:b1:e6:97:1c:31:e8:f6:b5:3d:15:4d:95:
e1:7a:5e:b1:01:1e:95:68:ea:24:48:78:bd:97:2f:
19:e7:8e:d9:57:0e:e5:e5:00:d6:d6:fb:31:5e:60:
b5:f8:65:64:06:c3:05:29:64:56:45:bc:bb:e4:f4:
4e:66:6c:94:5a:70:02:86:94:cb:8f:ce:04:0f:b7:
62:ad:0c:87:c5:b2:53:48:d6:c0:58:7b:bd:22:9e:
27:5c:a1:cd:8f:47:bb:0c:05:5a:be:b0:c8:4f:48:
ea:57:ff:c0:1f:53:fe:e8:af:a8:df:11:ad:b8:10:
b5:36:b2:0d:9a:ff:29:d9:59:c5:6a:58:83:80:cf:
7d:54:97:94:72:98:38:df:b0:a7:75:c3:eb:1c:48:
c4:bb:7f:44:ab:2d:9b:91:a3:b8:f3:68:ed:ee:a4:
44:04:8e:b1:54:b2:bf:67:57:f0:e7:c9:8b:3b:14:
25:46:c6:9d:01:ee:b9:ad:b6:38:1f:e0:b8:b9:03:
30:1a:d9:5a:e4:71:c9:a2:b6:6f:bb:5b:e2:d3:12:
a7:c6:68:0f:ff:95:ce:05:53:e8:f0:63:ab:e8:10:
96:5e:1a:f3:78:61:ae:40:8c:df:4c:a3:03:9d:ff:
6c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:88:92:15:E1:44:08:AB:5C:9C:57:F8:62:D1:D1:9F:00:8F:5B:5D
X509v3 Authority Key Identifier:
keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/eoiSFeFECKtcnFf4YtHRnwCPW10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.18.96.0/21
164.19.0.0/16
IPv6:
2a07:b982:c000::/48
Signature Algorithm: sha256WithRSAEncryption
31:0d:18:c8:46:e1:23:5f:43:08:f7:f3:62:13:15:72:08:84:
26:c3:d1:e3:a9:e3:b1:de:d6:82:28:3d:63:97:a0:10:de:cd:
77:72:ec:14:97:0d:72:f0:2d:29:02:34:d3:4c:c7:15:21:a8:
09:15:1d:08:ed:6b:5d:3c:f9:30:f9:00:6a:f7:0d:fd:b7:60:
38:ce:03:1d:dc:7e:09:be:1b:7c:8b:44:1f:27:32:2f:3e:c2:
91:de:ed:f3:0f:da:ee:62:03:78:be:51:24:ee:2d:bc:81:07:
4e:ec:23:b1:e3:d6:fb:2c:bf:b9:d4:5f:2f:c5:89:06:c2:0e:
39:e1:be:eb:dd:4f:57:91:72:e1:cd:b4:6a:b2:23:ef:67:d9:
e9:d1:21:b0:79:1f:2e:d5:2c:97:21:79:17:ce:71:a7:d2:96:
a8:f6:6e:7c:08:2d:45:b6:f1:6f:4d:d4:c7:aa:59:ba:b2:41:
68:88:f9:22:c3:10:6f:9c:b7:78:cc:07:5d:3e:dc:b2:3c:03:
6b:a4:69:19:df:a7:85:a8:b0:73:0d:22:b4:e1:b8:16:24:fd:
c6:f2:eb:81:20:00:7c:63:c6:0e:f5:28:02:af:ec:97:eb:3f:
bd:87:15:e0:18:38:20:6d:d4:c8:f3:ba:cf:37:12:b2:9a:01:
15:de:2c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:04:59 2026 by rpki-client