Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/EAu9PVFOc2HMIqwl2TAEKVMKjhM.roa
File: EAu9PVFOc2HMIqwl2TAEKVMKjhM.roa (raw, json)
Hash identifier: +RxDuulMgzt590ZJGALAr+G6BMF4rXunGyJvYgQw8JU=
Subject key identifier: 10:0B:BD:3D:51:4E:73:61:CC:22:AC:25:D9:30:04:29:53:0A:8E:13
Certificate issuer: /CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Certificate serial: 019F23686D2789172F00336792830E271F24
Authority key identifier: 94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/EAu9PVFOc2HMIqwl2TAEKVMKjhM.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204573
IP address blocks: 185.112.174.0/24 maxlen: 24
185.112.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6d:27:89:17:2f:00:33:67:92:83:0e:27:1f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=100bbd3d514e7361cc22ac25d9300429530a8e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:be:80:08:05:1a:bf:8a:d2:0f:a3:4c:ee:
b7:ff:27:54:0a:9d:34:71:fe:9d:d4:ef:77:3e:63:
3e:f0:da:b9:7c:46:d0:5a:6a:82:df:1a:3e:61:ba:
4c:55:ae:fc:2e:f0:82:06:96:bb:5f:f4:7c:fb:fc:
f7:70:4d:76:f0:17:f8:ba:64:f5:29:19:dd:32:ae:
6a:9e:7d:dd:5e:eb:87:54:66:7a:94:e3:03:79:7b:
c8:78:7b:34:58:ac:ba:79:52:7a:df:63:b5:f1:8f:
c0:04:92:92:12:b9:21:89:ab:c4:f2:f1:fa:77:91:
f8:dc:4e:bc:f1:2d:7f:6a:ac:54:d2:c7:bc:c7:0e:
4b:e8:68:53:fb:bd:e1:0e:61:d4:6d:7a:83:59:1f:
28:96:01:16:ed:2a:35:36:1d:1e:b0:82:b2:f8:d6:
8e:82:16:85:db:3c:47:30:40:a8:b0:df:9b:8b:b6:
d0:c9:67:c5:03:8a:1f:46:8f:07:39:32:fa:4a:f0:
5b:f4:82:39:7a:4c:58:84:d5:52:d8:2a:b1:ed:1c:
cd:97:c3:5a:d0:cf:5d:cc:2e:ef:fb:3f:db:93:42:
50:17:78:a3:15:c5:97:64:e8:e9:7d:9a:ee:cf:e4:
0c:3b:cb:8f:22:e0:14:2d:a7:07:33:31:37:b9:a1:
30:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0B:BD:3D:51:4E:73:61:CC:22:AC:25:D9:30:04:29:53:0A:8E:13
X509v3 Authority Key Identifier:
keyid:94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/EAu9PVFOc2HMIqwl2TAEKVMKjhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.174.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:47:d7:e8:73:61:d1:be:bd:ba:28:77:98:8d:d7:1f:bd:5f:
cf:c1:6b:74:50:34:63:34:c1:1e:9e:9d:d5:9d:8f:cc:25:d4:
88:20:5c:8b:44:c6:96:f1:b5:8e:40:e6:2f:a4:d1:3b:cd:96:
2e:8d:2d:d6:4d:c6:8a:94:51:9a:e4:ef:25:32:81:92:1a:5e:
08:06:c4:85:be:e1:b0:b0:e9:a0:13:71:ec:bd:e2:6c:f4:f2:
dc:fa:72:3e:43:3b:be:06:dc:28:ca:c6:20:6f:d8:de:9b:b3:
24:79:d8:fe:79:ac:b6:42:15:b0:ba:89:13:95:6b:4e:46:9e:
de:23:0b:07:6f:c4:a7:00:87:26:21:98:f0:d8:3c:a3:f5:7f:
74:32:a2:45:3e:d0:bd:90:65:86:ea:60:97:fe:71:74:d9:65:
8f:be:06:07:4b:e9:14:7a:1d:03:b9:f5:1e:30:83:31:59:e8:
e2:06:09:65:df:39:9f:e3:f9:12:4a:f5:73:cd:be:62:c8:fc:
80:c4:df:86:9b:29:a1:49:f5:34:d4:ce:62:8a:60:1e:32:a2:
54:80:47:3c:c0:2a:4b:d3:7a:67:23:92:86:f5:b3:10:d6:91:
07:92:a3:f4:34:f4:79:d0:96:49:a8:5f:88:9b:be:14:fa:c1:
ed:da:d2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:43 2026 by rpki-client