Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5496af-af9e-4131-9a02-81ded47d661b/1/EwGwnAn9SmY1vVZffyEH8-45s28.roa
File: EwGwnAn9SmY1vVZffyEH8-45s28.roa (raw, json)
Hash identifier: Ox286HUGRo2lKg5eDfMuTCACvfsL3+L8FNUOKcUP8L0=
Subject key identifier: 13:01:B0:9C:09:FD:4A:66:35:BD:56:5F:7F:21:07:F3:EE:39:B3:6F
Certificate issuer: /CN=110b9341adb07cd51e959bf62207486f69adc44e
Certificate serial: 019F26CFD9A2F6D78E8AB15C9A402C215B86
Authority key identifier: 11:0B:93:41:AD:B0:7C:D5:1E:95:9B:F6:22:07:48:6F:69:AD:C4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQuTQa2wfNUelZv2IgdIb2mtxE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5496af-af9e-4131-9a02-81ded47d661b/1/EwGwnAn9SmY1vVZffyEH8-45s28.roa
Signing time: Fri 03 Jul 2026 07:09:43 +0000
ROA not before: Fri 03 Jul 2026 07:09:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209928
IP address blocks: 139.100.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5496af-af9e-4131-9a02-81ded47d661b/1/EQuTQa2wfNUelZv2IgdIb2mtxE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5496af-af9e-4131-9a02-81ded47d661b/1/EQuTQa2wfNUelZv2IgdIb2mtxE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQuTQa2wfNUelZv2IgdIb2mtxE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:cf:d9:a2:f6:d7:8e:8a:b1:5c:9a:40:2c:21:5b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110b9341adb07cd51e959bf62207486f69adc44e
Validity
Not Before: Jul 3 07:09:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1301b09c09fd4a6635bd565f7f2107f3ee39b36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:29:2d:c6:c2:f0:c2:30:42:4b:c5:87:e0:
5b:7b:4e:49:d1:a7:9a:4d:8e:40:15:70:e4:34:5e:
2a:77:26:31:1f:08:45:34:09:a4:ae:28:4f:9a:5f:
cb:d1:7a:55:59:47:d6:3f:25:7e:ff:a8:55:15:67:
57:ce:41:f6:91:6b:cd:24:75:53:33:b1:e7:87:07:
d0:42:86:ae:1a:36:9d:13:99:74:8f:2a:c4:ea:64:
93:cf:73:e3:8d:62:4e:6a:9a:e9:0b:72:e6:6e:35:
61:6b:e1:62:59:9a:c4:06:ba:9c:92:01:d2:d7:7d:
de:02:c9:e6:85:52:de:b9:85:c9:2d:22:22:6b:2a:
24:15:90:d9:5e:cf:0c:8e:d7:f9:fa:18:f5:4f:bd:
22:6d:df:ca:4f:6e:f5:38:cd:77:9f:88:63:bf:49:
70:78:c0:4f:f1:64:5f:69:47:c4:17:69:d3:71:40:
ba:0e:aa:cf:ad:1b:5a:4c:1c:2d:ec:fb:5d:92:2f:
8b:7f:8d:d7:1f:66:0b:d1:2c:5e:94:57:28:d5:f1:
60:3c:e7:5b:47:58:dc:29:ef:31:bb:3c:48:04:97:
50:d9:f2:83:2a:97:04:5d:af:1a:8c:c7:01:cc:9d:
4c:d5:33:e2:98:5f:a1:d7:0e:6e:a0:6b:69:ef:63:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:01:B0:9C:09:FD:4A:66:35:BD:56:5F:7F:21:07:F3:EE:39:B3:6F
X509v3 Authority Key Identifier:
keyid:11:0B:93:41:AD:B0:7C:D5:1E:95:9B:F6:22:07:48:6F:69:AD:C4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQuTQa2wfNUelZv2IgdIb2mtxE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5496af-af9e-4131-9a02-81ded47d661b/1/EwGwnAn9SmY1vVZffyEH8-45s28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5496af-af9e-4131-9a02-81ded47d661b/1/EQuTQa2wfNUelZv2IgdIb2mtxE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.100.8.0/21
Signature Algorithm: sha256WithRSAEncryption
21:92:9e:42:b7:93:ed:14:fb:7f:a3:0f:82:17:f8:e1:64:c0:
1a:39:cf:e5:ac:f5:04:88:9c:70:62:b2:f9:07:36:31:8e:22:
7b:56:3b:6d:d3:df:56:a8:07:4e:bf:ad:a8:8a:61:c6:78:22:
f1:4f:ec:5c:ea:82:5a:d7:1a:5e:6e:53:f5:0a:24:4e:8d:46:
5e:90:5d:d7:5d:32:b4:93:8e:9c:ac:76:1c:21:10:de:6d:19:
3d:a4:58:81:52:1a:c7:ef:65:f0:7f:e4:c0:03:8a:83:c4:1a:
44:1c:ac:1d:aa:b2:ff:6f:ed:9f:28:bb:9e:7f:88:63:6e:91:
15:02:40:09:94:06:9d:fa:4f:49:3b:d6:32:5c:88:8b:f7:a1:
7b:fa:08:17:51:cd:1c:e4:cf:b9:f5:b2:63:d7:4c:6e:ba:33:
de:31:fe:62:5b:2e:26:61:4e:a4:62:35:49:39:3a:22:87:a1:
7e:9f:f7:6d:e8:27:00:60:9a:f9:ff:43:57:e4:14:fa:50:bd:
56:bb:e0:eb:b9:5b:0f:07:ae:1a:0a:45:7c:69:5d:44:7e:05:
3f:8d:d1:e7:b0:39:2c:2c:ed:37:50:c3:3a:57:4c:f5:69:66:
2d:73:ec:15:b2:7f:06:1d:91:88:69:83:4b:66:52:74:63:59:
8a:45:77:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:43:40 2026 by rpki-client