Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/EVJm44_qM79rFFxjaBYVRCtqVwc.roa
File: EVJm44_qM79rFFxjaBYVRCtqVwc.roa (raw, json)
Hash identifier: nQKe6AiCZP429Q5zEhReB+qr5inljkvblMvj0QyfEAw=
Subject key identifier: 11:52:66:E3:8F:EA:33:BF:6B:14:5C:63:68:16:15:44:2B:6A:57:07
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 019D4F21C23DFCC97B8F9863805DED13F1F6
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/EVJm44_qM79rFFxjaBYVRCtqVwc.roa
Signing time: Thu 02 Apr 2026 16:58:25 +0000
ROA not before: Thu 02 Apr 2026 16:58:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201097
IP address blocks: 209.131.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4f:21:c2:3d:fc:c9:7b:8f:98:63:80:5d:ed:13:f1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Apr 2 16:58:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=115266e38fea33bf6b145c63681615442b6a5707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:bc:4e:9d:22:b5:14:73:51:06:0d:99:e4:
13:70:a7:76:7a:9e:54:6f:91:fa:e4:d3:11:40:f1:
ff:1a:b9:59:4c:ab:f4:92:b9:24:79:c0:d3:4b:1d:
a0:c4:bd:8e:83:c3:6c:b8:ab:31:96:9c:17:af:ef:
84:21:a7:8c:72:0d:d9:47:04:d8:4c:33:6e:cf:ca:
f4:c6:32:8d:05:d5:e0:0d:e3:cf:a0:64:39:8b:96:
d3:97:47:20:48:00:62:11:7c:c8:e5:27:29:18:49:
03:0f:c7:5c:47:d6:24:7d:d2:29:e0:f5:54:4a:05:
0e:2e:d9:df:cc:cf:56:d4:34:f8:97:df:78:2e:11:
ec:6e:84:32:50:49:1f:a1:d5:09:ac:5f:88:56:d3:
29:5b:05:07:08:be:44:c9:67:1a:b5:d9:0c:b7:19:
e1:2c:5f:7f:92:14:45:59:43:c3:34:b1:15:90:34:
ea:3c:53:ed:2d:17:97:e6:97:2d:f2:9a:c6:92:93:
97:7c:46:82:00:8c:cd:9c:2f:e8:e4:b8:2e:6b:95:
3c:9e:b7:89:2a:c7:6a:d9:6b:ba:a1:ca:a6:db:43:
d9:65:6c:75:89:9c:6a:0c:31:e9:af:54:b9:97:22:
2b:00:d2:c9:15:a2:7e:b2:93:8c:90:c4:b3:63:fc:
c4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:52:66:E3:8F:EA:33:BF:6B:14:5C:63:68:16:15:44:2B:6A:57:07
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/EVJm44_qM79rFFxjaBYVRCtqVwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.131.69.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:01:19:15:37:02:81:55:d4:25:0e:c9:f0:09:f3:fb:d8:23:
e6:2e:68:b3:18:c3:be:6d:84:90:3a:e7:cc:4c:f3:e3:89:b5:
32:ca:87:1c:a8:cb:f5:ee:81:74:e0:58:f2:02:30:1d:92:7e:
fa:cf:db:cc:ae:5b:7a:75:51:a7:a4:07:e0:3c:8b:d3:5d:13:
c0:d3:a5:c7:cb:d2:dc:f6:50:73:b5:88:fd:03:b2:08:45:c1:
23:a8:ee:b8:80:c2:37:78:3a:9d:e0:75:4e:52:40:d8:b7:a4:
f2:c3:10:fc:64:45:d8:bc:4d:bd:b0:9c:8b:63:63:22:f1:6d:
dd:b7:9b:de:19:0b:01:6c:f6:0c:b9:d5:60:7e:0d:cf:e9:4d:
e1:fa:ea:40:74:37:0e:19:d1:64:c0:f7:79:bf:ed:f7:b3:88:
5c:0a:2f:cb:8e:e5:fe:4c:ad:97:2b:0b:5f:30:71:6d:96:aa:
36:88:bc:23:27:5e:ab:b2:6f:8d:13:b1:c8:b6:05:24:b0:35:
66:72:ed:79:0b:d0:0c:6d:ae:49:ab:4b:af:57:7c:62:91:ae:
b7:38:e8:92:ad:76:79:5f:e9:df:dc:7b:e2:98:85:ea:c4:e4:
84:9b:f7:16:e0:47:2d:02:fb:6c:f7:4a:3e:3b:92:a8:80:9b:
23:32:d6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 12:03:31 2026 by rpki-client