Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/EOQ5V0kDXyQ1FQ6B9-AVHGPqlCs.roa
File: EOQ5V0kDXyQ1FQ6B9-AVHGPqlCs.roa (raw, json)
Hash identifier: yS629cFjQWViH4uxLDi0K/sJNglxdC9RFtjY2YesInI=
Subject key identifier: 10:E4:39:57:49:03:5F:24:35:15:0E:81:F7:E0:15:1C:63:EA:94:2B
Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial: 019F722328168AC9ED057695E2D9F05283BD
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/EOQ5V0kDXyQ1FQ6B9-AVHGPqlCs.roa
Signing time: Fri 17 Jul 2026 22:12:14 +0000
ROA not before: Fri 17 Jul 2026 22:12:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 217.78.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 22:16:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:72:23:28:16:8a:c9:ed:05:76:95:e2:d9:f0:52:83:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Validity
Not Before: Jul 17 22:12:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10e4395749035f2435150e81f7e0151c63ea942b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:7b:64:6e:ca:22:38:9d:d1:80:3e:b4:74:
6b:8f:98:46:8f:55:bc:9e:db:86:67:6f:ff:83:67:
ae:71:33:fe:5c:93:65:f5:6a:ac:1e:5f:32:c8:ff:
d9:83:e7:62:3c:5d:0b:4f:76:23:83:16:30:01:cb:
2b:a1:8c:24:bc:3b:7c:52:b9:07:a1:68:ef:60:6e:
b9:89:e6:60:6f:fc:1e:d9:3f:4c:22:c0:0b:23:b3:
23:2b:a0:c2:2e:63:1e:6b:47:d5:a3:53:4e:8f:1b:
5b:84:8c:e4:51:35:92:be:80:b9:dc:4e:a3:45:c5:
b7:06:3f:f2:f0:1e:cf:84:a3:8b:3a:49:4d:e6:9e:
05:15:2b:09:b8:a5:73:de:79:12:ba:02:2a:43:59:
59:92:2c:fa:08:4a:90:78:a2:85:da:a0:3a:b1:f0:
4b:44:5d:92:e8:bd:21:e8:e7:67:38:cd:6f:c0:49:
73:7d:54:fe:ff:16:f5:2b:15:82:dc:aa:47:0c:ff:
de:12:82:62:52:15:08:8e:cf:ce:63:11:ad:97:68:
0c:b6:eb:58:24:0b:49:25:75:59:fb:b0:32:2b:3c:
cc:34:0a:80:36:b4:f7:df:49:ee:80:87:0e:ea:50:
58:f3:89:e7:2c:82:96:bd:5b:ad:5f:d2:a8:b9:96:
7e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E4:39:57:49:03:5F:24:35:15:0E:81:F7:E0:15:1C:63:EA:94:2B
X509v3 Authority Key Identifier:
keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/EOQ5V0kDXyQ1FQ6B9-AVHGPqlCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.78.32.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:c7:c2:f5:69:5c:c2:16:89:be:fe:a5:3e:a4:19:13:c7:2d:
e9:6f:74:e3:26:96:e1:27:fa:b0:db:7e:e2:bd:c6:fa:58:6f:
21:14:06:09:24:15:f1:76:53:ed:5c:e9:9f:0d:1e:7a:56:7d:
b2:1b:60:c0:f2:2c:4b:5a:9c:29:14:49:36:1a:5e:37:14:14:
10:d8:22:7f:82:20:92:44:19:a7:56:1d:7a:40:80:70:b8:7d:
93:c6:4b:ab:93:02:f4:62:2e:bf:bb:ff:da:14:47:52:e4:5d:
5e:26:bb:f3:ec:2b:87:ac:0a:52:7c:57:cd:b0:f1:05:b4:b1:
92:e3:46:1b:b0:d7:71:5b:e2:93:6d:7c:d1:df:99:78:68:04:
a6:1b:f6:90:02:47:e3:86:26:bf:5f:11:9a:a2:e2:ba:44:c2:
0b:6d:04:d1:53:e1:d8:ec:45:6c:cc:1b:1a:5c:f4:85:07:d8:
7a:9e:3d:81:87:8b:fe:fa:bf:f5:05:86:8d:ae:6d:ff:7d:e6:
4a:c1:f1:10:20:79:cf:58:b8:64:fe:86:23:fc:b0:08:13:eb:
7a:55:a4:cd:b7:cc:94:9d:75:15:b0:22:d8:4e:d1:69:7f:3b:
c6:ab:37:04:af:c1:12:c4:0d:df:47:a6:9f:47:d8:55:bc:68:
9a:fa:69:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:28:58 2026 by rpki-client