Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/EJ3x2IdwfHH3UH5syh_4ZfSWYxA.roa
File: EJ3x2IdwfHH3UH5syh_4ZfSWYxA.roa (raw, json)
Hash identifier: MlUbpIDVvfA4UHQUJSKo2vmPPZS7Hen8jUTVtn35kQ8=
Subject key identifier: 10:9D:F1:D8:87:70:7C:71:F7:50:7E:6C:CA:1F:F8:65:F4:96:63:10
Certificate issuer: /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Certificate serial: 019E3B02730ABE708A6E0100D42777FF65EE
Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/EJ3x2IdwfHH3UH5syh_4ZfSWYxA.roa
Signing time: Mon 18 May 2026 12:14:36 +0000
ROA not before: Mon 18 May 2026 12:14:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198793
IP address blocks: 193.141.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3b:02:73:0a:be:70:8a:6e:01:00:d4:27:77:ff:65:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Validity
Not Before: May 18 12:14:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=109df1d887707c71f7507e6cca1ff865f4966310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8b:f8:63:7a:2c:a5:00:2f:db:a9:52:ec:21:
1b:bd:49:3e:2e:0c:03:de:cc:02:68:34:20:8a:44:
d8:06:0d:e5:38:43:b3:84:28:b6:e2:30:fe:84:89:
f9:e3:7c:81:da:5e:19:77:1d:d5:29:ee:3b:e5:99:
d1:40:5d:58:87:ce:98:e5:ba:77:96:eb:00:0c:d8:
ac:07:e3:c2:11:5c:e9:40:09:4f:c1:a2:8e:60:c8:
05:26:a4:70:60:e5:69:26:84:31:54:75:61:e9:73:
3a:55:d9:cc:5a:24:53:0e:09:f5:ad:53:d9:e2:17:
57:a1:dc:23:a2:03:19:4e:a8:52:ec:08:f1:1b:c5:
67:c2:c6:a5:e3:db:4e:a7:b6:af:7c:26:6b:99:94:
e4:77:1b:a5:9c:1a:9d:c8:30:1f:5a:24:b4:3d:d1:
ee:c6:a9:19:51:ac:6b:d1:d6:f9:1d:2b:1d:f0:8c:
f0:e8:d5:c3:5d:3c:3d:21:d0:c1:30:b2:58:16:13:
6f:66:c2:5d:20:5a:b0:04:de:87:05:d1:c3:0c:c5:
f2:aa:c1:4e:ab:97:54:e0:fb:c7:f6:f4:33:4f:0e:
36:ed:ce:f9:b0:68:fc:a3:ea:b3:70:a4:9c:3e:68:
d7:29:57:57:20:b7:54:38:51:e3:5e:64:8c:de:50:
9e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9D:F1:D8:87:70:7C:71:F7:50:7E:6C:CA:1F:F8:65:F4:96:63:10
X509v3 Authority Key Identifier:
keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/EJ3x2IdwfHH3UH5syh_4ZfSWYxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.53.0/24
Signature Algorithm: sha256WithRSAEncryption
09:f5:a3:38:1b:b6:ff:80:a7:95:96:8e:cc:c6:d3:12:04:76:
75:d7:d6:71:8c:57:9d:29:05:1a:8f:40:92:1a:96:c2:b9:e1:
ea:f4:68:fc:89:72:f9:fb:b5:40:0e:7d:fd:13:a9:d4:40:df:
4c:4a:5f:b2:2c:ec:89:5b:46:62:38:a2:6f:6e:81:62:53:34:
6f:9c:1e:cf:f5:54:ab:00:80:60:a7:bb:15:89:76:c4:5e:5a:
1f:59:7c:41:ce:b0:ca:42:de:f6:8a:9b:43:9a:4f:11:ec:bf:
4f:f6:ea:64:55:11:25:4a:14:e0:7d:ef:ec:4c:dc:76:b0:20:
5c:25:22:b9:e3:78:82:57:7a:89:49:fa:36:59:c0:da:1b:25:
05:f9:fb:34:b7:73:bc:b7:1e:4e:91:98:46:71:b6:a0:59:e3:
a7:68:58:72:bb:60:ae:73:73:db:71:c8:33:b7:be:ab:73:33:
6a:12:7d:29:7d:fe:38:56:20:1e:cf:0a:e8:50:cc:35:62:9e:
da:17:51:ca:49:8d:78:dd:06:31:1b:c7:d4:c3:f2:6f:a0:c6:
b2:c0:ba:8b:21:d0:0f:ae:7d:fe:5f:dc:95:48:b9:db:2b:74:
80:c0:42:35:e4:d2:43:cb:eb:39:00:55:29:1e:ad:50:7f:7f:
a1:26:6d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 17:16:37 2026 by rpki-client