Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/EqBbnwzazRkspxZHdC8Hbot9P2A.roa
File: EqBbnwzazRkspxZHdC8Hbot9P2A.roa (raw, json)
Hash identifier: 1jfFZNVPWjEwB7Zwc1Vj8Dp8jY+cv4lfoCn4ztY4cCE=
Subject key identifier: 12:A0:5B:9F:0C:DA:CD:19:2C:A7:16:47:74:2F:07:6E:8B:7D:3F:60
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A047BEAB5DA899B1BA3F363AC01B401D52
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/EqBbnwzazRkspxZHdC8Hbot9P2A.roa
Signing time: Fri 28 Aug 2026 09:41:12 +0000
ROA not before: Fri 28 Aug 2026 09:41:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 148996
IP address blocks: 92.71.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:be:ab:5d:a8:99:b1:ba:3f:36:3a:c0:1b:40:1d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 28 09:41:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12a05b9f0cdacd192ca71647742f076e8b7d3f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:84:51:3a:b7:b8:77:11:9d:60:3f:71:8d:c2:
5a:c1:90:59:fe:e6:c1:86:fc:65:5d:83:3f:8f:91:
54:52:62:09:e6:3c:0e:89:ad:70:8c:2a:89:d3:b0:
15:a2:6d:82:18:ef:0f:b8:2e:7b:ee:14:8a:4a:05:
22:3b:af:b4:42:55:97:27:22:0b:f6:cd:94:83:96:
ad:6c:53:86:4d:dc:7e:42:21:49:ed:75:c8:e0:a4:
b1:4a:f2:a7:b0:72:8e:f7:a9:ee:63:75:c0:cf:84:
57:70:5e:04:84:23:4f:21:0a:5e:49:b6:da:c8:8c:
bd:9d:c7:64:0e:e8:c5:89:53:d8:b1:65:90:55:f7:
51:d7:da:b7:cd:55:28:34:20:ab:dc:fa:37:59:40:
77:39:52:9d:c8:10:ac:5f:32:e9:c9:85:3f:e1:b2:
b6:aa:59:f5:60:67:76:f6:43:2a:af:8c:b2:11:1f:
14:9c:22:cc:81:7a:c4:24:a3:63:9b:1a:42:d6:1a:
dc:82:3f:b0:2b:1f:f5:37:6e:4f:db:57:e8:a4:8b:
63:3c:f4:a3:d9:3f:50:ea:c0:51:c8:99:7a:49:ee:
c1:de:e2:09:80:3a:d1:cf:95:8c:ac:59:39:91:f9:
d7:94:1f:17:d9:fe:96:d2:17:e8:37:a6:ad:d1:63:
45:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A0:5B:9F:0C:DA:CD:19:2C:A7:16:47:74:2F:07:6E:8B:7D:3F:60
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/EqBbnwzazRkspxZHdC8Hbot9P2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.71.160.0/19
Signature Algorithm: sha256WithRSAEncryption
9c:d8:7b:6d:72:30:5a:3c:b1:ff:b2:ac:67:de:c7:d9:f0:a4:
63:d3:ad:b6:1a:23:b1:89:ed:17:f9:55:b7:b2:fe:54:2e:c7:
cc:73:45:4d:e7:66:f7:33:86:3c:7c:87:18:5c:4c:b6:42:2e:
39:8c:96:00:b3:25:28:13:6a:ff:58:0e:49:01:7c:0e:6c:d2:
44:fd:f8:48:ec:ca:9c:ec:f6:04:44:23:c6:91:81:05:32:42:
c1:f7:6c:54:d0:aa:78:b6:a4:d5:4d:cf:93:5e:1a:d4:7d:d2:
7b:b5:d0:5e:d3:95:36:3d:86:9a:07:12:40:4e:6d:06:d7:4c:
46:dc:6f:62:5f:5d:6d:fe:80:3b:d3:fe:03:4f:cb:25:75:5a:
2a:72:88:19:a5:75:ae:4d:83:a0:1c:39:f3:5d:92:9a:ba:f8:
a2:5f:e4:3f:70:0e:14:eb:de:ae:8d:3d:c3:90:0c:01:77:3a:
5f:ed:be:df:82:b4:aa:77:92:b5:75:ae:d2:2b:da:f0:3d:bf:
7e:c3:56:1a:7c:38:aa:3a:d1:12:95:57:f4:a5:e2:44:d6:ae:
3d:d3:b6:b7:a3:a1:97:35:e3:07:5b:c8:bb:f7:74:5d:ba:25:
a4:06:2a:49:02:c0:72:73:04:c2:88:2e:ef:05:34:3e:27:7a:
79:4f:d5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:17:13 2026 by rpki-client