Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/EZeSNrP0MK30ejCuYgIhM6caA70.roa
File: EZeSNrP0MK30ejCuYgIhM6caA70.roa (raw, json)
Hash identifier: flHaHqDCTcC1cqHG8lWK1yfFrTANkG3VRX/1cQ2TR98=
Subject key identifier: 11:97:92:36:B3:F4:30:AD:F4:7A:30:AE:62:02:21:33:A7:1A:03:BD
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A12FFE53505C3D903FC258D7D7A5777DA5
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/EZeSNrP0MK30ejCuYgIhM6caA70.roa
Signing time: Mon 12 Oct 2026 12:02:38 +0000
ROA not before: Mon 12 Oct 2026 12:02:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213871
IP address blocks: 185.220.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:fe:53:50:5c:3d:90:3f:c2:58:d7:d7:a5:77:7d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Oct 12 12:02:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11979236b3f430adf47a30ae62022133a71a03bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:b8:a6:7a:4d:1f:33:b2:48:9d:b0:22:46:
a6:0e:b6:73:3c:7e:1c:02:84:de:fd:68:be:91:5e:
e1:e0:f6:7e:6d:75:5d:8a:b8:f2:cc:69:00:3e:b7:
60:c2:28:20:f1:41:51:2b:7c:cd:9a:10:d6:72:82:
25:6a:b9:8f:66:02:6e:b9:19:1a:5c:3f:46:6e:8d:
a7:9a:93:49:5f:b0:5e:b3:2b:07:0b:04:67:bb:16:
3d:29:8d:c7:40:f5:ac:75:2c:fd:ba:4a:4a:cc:5c:
89:87:7e:e3:c5:6c:84:b7:08:f0:72:15:59:96:cf:
29:97:aa:90:1f:dd:bf:76:9b:cf:f6:81:17:48:6d:
35:79:65:ae:cd:8f:18:f4:0b:4c:b6:0e:08:95:23:
59:c7:14:9c:ad:85:18:62:a4:ae:84:19:67:73:cb:
2f:17:f4:e9:47:c9:09:56:e2:d6:ea:5f:30:e6:d6:
0f:d1:80:7a:0f:aa:0f:95:da:04:d0:e4:42:38:07:
22:68:c5:06:92:14:30:7e:6a:4f:6f:c4:1f:f3:46:
10:f7:6b:97:78:06:33:64:cd:44:bb:a3:dc:9f:be:
25:f3:9e:64:4d:c9:8a:9f:68:d5:ab:21:dc:93:8a:
8e:34:b6:4e:29:74:8d:cc:10:e7:88:df:ac:82:60:
09:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:97:92:36:B3:F4:30:AD:F4:7A:30:AE:62:02:21:33:A7:1A:03:BD
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/EZeSNrP0MK30ejCuYgIhM6caA70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.199.0/24
Signature Algorithm: sha256WithRSAEncryption
21:60:1b:4b:ab:df:d0:ce:62:8d:92:dc:33:41:90:7c:29:1a:
30:5c:53:02:55:b9:fd:2c:74:19:2e:58:82:ad:f2:4b:4a:a4:
8d:84:ab:3f:31:b9:e6:c6:a4:24:8e:e2:77:bd:c8:01:78:aa:
11:84:5b:26:f2:16:3d:86:01:b3:37:e0:a2:2c:7a:12:6e:20:
c0:14:7a:f0:5c:00:b9:2d:39:9e:a4:61:e6:05:9f:56:eb:e1:
16:dd:1e:06:ed:1f:8b:c6:4b:89:92:9b:4b:ca:17:5e:50:d9:
d0:fd:f1:4b:df:bf:ce:46:51:33:81:13:86:80:04:15:ec:6a:
21:17:05:9f:b0:84:5b:f7:e0:2a:98:08:21:dd:af:13:82:6a:
29:aa:90:1b:83:6c:f2:b5:87:96:03:60:0e:b5:b7:3a:41:d6:
9c:64:20:67:2c:6b:c9:a6:22:04:40:83:47:e7:f5:a6:9b:12:
35:71:cf:0b:89:cd:5e:4d:e9:65:d3:3e:fc:1e:4b:51:2f:88:
ce:a6:79:47:d5:55:71:bb:7a:d4:95:ee:ad:ea:5d:cc:36:c2:
53:91:4c:c8:ab:fa:61:0f:ac:e6:83:7e:3f:51:bf:be:08:e9:
8b:4f:2a:a8:86:84:c3:01:e8:3b:69:9c:c2:5b:b0:8f:5f:68:
d3:b9:0d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:53:17 2026 by rpki-client