Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/EcWr-W81psfgufDVyILeXTABMYU.roa
File: EcWr-W81psfgufDVyILeXTABMYU.roa (raw, json)
Hash identifier: Q7ZojWjLU3NYmmRMRKMJpTREhBfsFuLKwES406c+itM=
Subject key identifier: 11:C5:AB:F9:6F:35:A6:C7:E0:B9:F0:D5:C8:82:DE:5D:30:01:31:85
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FB34BC7146CA4C1702995D840B38D8026
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/EcWr-W81psfgufDVyILeXTABMYU.roa
Signing time: Thu 30 Jul 2026 13:51:55 +0000
ROA not before: Thu 30 Jul 2026 13:51:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146813
IP address blocks: 185.196.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 20:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:4b:c7:14:6c:a4:c1:70:29:95:d8:40:b3:8d:80:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jul 30 13:51:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11c5abf96f35a6c7e0b9f0d5c882de5d30013185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b4:25:09:4e:30:84:2d:3a:56:b8:cd:18:43:
c8:94:2b:dc:17:e8:fb:d7:8e:49:06:37:ac:18:17:
05:57:97:6f:13:b8:7b:c9:5c:79:64:b3:a7:9f:2d:
de:0e:9a:ff:5a:52:14:6e:26:b8:de:2a:b8:11:63:
a6:7c:62:d5:44:a9:61:36:33:fb:62:69:35:a5:c3:
88:18:93:3f:2b:85:1d:d9:a4:5c:da:d8:6a:2f:b6:
f6:6b:4c:2b:e9:b0:ed:1a:76:cb:fe:46:93:ac:02:
06:2c:6c:db:1b:8a:0f:85:a9:4e:a3:d5:65:de:7b:
c8:5c:53:b5:90:a1:32:0b:32:4c:98:bc:ff:24:b5:
de:66:43:4f:84:91:1e:5b:b4:07:e7:67:d3:f7:75:
ff:ec:cb:f3:ea:08:25:b9:1d:54:c6:f0:82:e8:5e:
dd:da:2b:3d:ae:86:a3:b6:cd:0d:59:15:73:41:e0:
22:c4:83:c9:8d:11:78:34:64:55:d6:86:22:fb:6a:
b7:df:58:10:d8:b3:56:29:82:16:fb:de:d0:f2:89:
fe:6e:c4:00:70:95:a6:27:be:40:2d:6b:23:36:bb:
b6:f8:2c:88:37:84:86:af:2f:98:e1:ff:fe:b0:69:
6e:c4:28:ed:c0:7c:ec:dd:32:b4:6f:46:2e:65:05:
01:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C5:AB:F9:6F:35:A6:C7:E0:B9:F0:D5:C8:82:DE:5D:30:01:31:85
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/EcWr-W81psfgufDVyILeXTABMYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.25.0/24
Signature Algorithm: sha256WithRSAEncryption
73:78:df:c5:d3:80:27:e8:5a:9b:2f:49:7d:32:5c:bb:a0:c4:
d1:1e:29:6d:1a:db:a4:40:b7:0a:5b:54:5c:6c:7c:2a:5e:53:
98:31:84:bb:b1:14:a1:ae:6d:a8:bc:4a:50:ec:61:bc:a6:ca:
34:dc:df:9f:16:5a:b5:37:bd:5e:df:b9:92:f4:f4:42:5d:a5:
6f:1a:db:45:05:86:ba:22:06:fb:83:bf:ae:aa:b6:c1:76:54:
49:d2:19:13:0d:03:21:21:e7:0d:79:48:39:27:34:ce:ad:20:
d4:ee:ac:ce:ff:07:04:9b:ca:80:6a:c6:47:21:b8:b9:88:39:
17:d0:0c:44:e3:9d:82:70:31:f7:d3:e0:88:6a:e1:ab:f4:d2:
46:6c:e5:38:b0:16:80:68:f2:4b:84:a6:e9:f7:3c:34:5e:25:
4a:7b:02:4c:c3:48:a7:ed:03:4a:55:c9:4e:77:29:6c:f8:45:
c3:f1:f7:a6:de:c2:4d:15:e1:5f:cf:c5:ae:0e:7e:bb:f4:47:
10:39:9c:67:bf:4c:e1:27:d7:cd:38:28:b8:7b:99:b8:03:d2:
db:30:04:11:02:36:a4:6e:ef:2c:67:b7:cd:f9:36:db:11:d9:
5a:2c:17:62:fd:16:69:b9:fa:e6:25:37:d3:6e:19:c8:1f:16:
b1:2a:ff:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+zS8cUbKTBcCmV2ECzjYAmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz
ZTIwZWEwHhcNMjYwNzMwMTM1MTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWM1YWJmOTZmMzVhNmM3ZTBiOWYwZDVjODgyZGU1ZDMwMDEzMTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rQlCU4whC06VrjNGEPIlCvcF+j7
145JBjesGBcFV5dvE7h7yVx5ZLOnny3eDpr/WlIUbia43iq4EWOmfGLVRKlhNjP7
Ymk1pcOIGJM/K4Ud2aRc2thqL7b2a0wr6bDtGnbL/kaTrAIGLGzbG4oPhalOo9Vl
3nvIXFO1kKEyCzJMmLz/JLXeZkNPhJEeW7QH52fT93X/7Mvz6ggluR1UxvCC6F7d
2is9roajts0NWRVzQeAixIPJjRF4NGRV1oYi+2q331gQ2LNWKYIW+97Q8on+bsQA
cJWmJ75ALWsjNru2+CyIN4SGry+Y4f/+sGluxCjtwHzs3TK0b0YuZQUBRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBHFq/lvNabH4Lnw1ciC3l0wATGFMB8GA1UdIwQY
MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt
NTU2MDhiNjk0NDU2LzEvRWNXci1XODFwc2ZndWZEVnlJTGVYVEFCTVlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2
LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucQZMA0G
CSqGSIb3DQEBCwUAA4IBAQBzeN/F04An6FqbL0l9Mly7oMTRHiltGtukQLcKW1Rc
bHwqXlOYMYS7sRShrm2ovEpQ7GG8pso03N+fFlq1N71e37mS9PRCXaVvGttFBYa6
Igb7g7+uqrbBdlRJ0hkTDQMhIecNeUg5JzTOrSDU7qzO/wcEm8qAasZHIbi5iDkX
0AxE452CcDH30+CIauGr9NJGbOU4sBaAaPJLhKbp9zw0XiVKewJMw0in7QNKVclO
dyls+EXD8fem3sJNFeFfz8WuDn679EcQOZxnv0zhJ9fNOCi4e5m4A9LbMAQRAjak
bu8sZ7fN+TbbEdlaLBdi/RZpufrmJTfTbhnIHxaxKv++
-----END CERTIFICATE-----
Generated at Thu Aug 13 02:26:31 2026 by rpki-client