Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/EkQkhKJ_sNE6YDY5_NSjttWqPLM.roa
File: EkQkhKJ_sNE6YDY5_NSjttWqPLM.roa (raw, json)
Hash identifier: URYU2DYQDNmo4pbokTTSpTSIUEpJYsAmLWcKC4aBuSM=
Subject key identifier: 12:44:24:84:A2:7F:B0:D1:3A:60:36:39:FC:D4:A3:B6:D5:AA:3C:B3
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 019E92C16C6070A1224E318D3A1F2EFD1F19
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/EkQkhKJ_sNE6YDY5_NSjttWqPLM.roa
Signing time: Thu 04 Jun 2026 13:10:10 +0000
ROA not before: Thu 04 Jun 2026 13:10:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49685
IP address blocks: 193.177.160.0/23 maxlen: 24
194.53.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:c1:6c:60:70:a1:22:4e:31:8d:3a:1f:2e:fd:1f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Jun 4 13:10:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12442484a27fb0d13a603639fcd4a3b6d5aa3cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:4a:e6:a9:2d:41:ed:be:0d:53:fa:99:a0:
e7:56:f2:7b:dc:6f:9f:c8:6f:6f:25:af:19:6a:78:
37:a9:83:6e:c7:2e:59:15:6b:99:38:e2:65:99:1a:
58:14:be:2b:33:46:4a:aa:81:be:f1:39:34:fe:fa:
57:9d:52:a4:5f:5c:f9:2b:24:d5:0d:70:6f:46:91:
b8:1f:4a:5c:10:dc:c9:10:7f:1d:2b:bc:00:a1:3c:
22:fb:bb:41:8e:ef:9d:7a:91:87:d2:22:49:2a:c7:
19:0c:1f:e2:5d:3e:ee:f5:7c:79:c4:0e:43:50:b4:
8f:09:56:09:b1:11:da:ce:f2:80:34:e2:34:28:79:
d1:93:22:56:82:82:19:64:19:69:6c:bc:ff:92:81:
88:6f:54:6f:64:23:0f:a0:d4:07:a7:17:f8:1e:93:
61:6f:b6:ae:cb:6e:94:95:7c:40:07:86:66:e1:86:
0e:9d:da:2c:a1:b6:15:6b:93:b7:62:c3:bd:10:7e:
9a:87:76:73:1f:c1:ae:53:73:10:8e:27:4a:8d:22:
ab:0c:f3:78:a8:31:cc:9e:85:01:73:cc:36:a6:ba:
9b:b9:17:a4:87:f7:49:2b:fb:c5:ad:c9:4c:18:44:
57:7b:64:d8:19:a5:de:dd:ac:31:9a:30:b3:66:c3:
d3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:44:24:84:A2:7F:B0:D1:3A:60:36:39:FC:D4:A3:B6:D5:AA:3C:B3
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/EkQkhKJ_sNE6YDY5_NSjttWqPLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.160.0/23
194.53.72.0/22
Signature Algorithm: sha256WithRSAEncryption
82:5c:44:fb:d2:40:a3:99:5e:d7:3c:0c:ff:91:e6:bc:94:a0:
ec:19:0b:cd:c9:c2:fd:7b:11:7f:3e:8d:7e:43:be:db:72:75:
d8:3a:f5:30:f5:f0:39:53:dc:7e:99:b3:5f:48:89:c3:26:d9:
66:0d:7f:3b:ea:70:62:87:41:e3:1f:26:1d:4d:42:90:db:4f:
2d:fa:50:51:2b:1b:2d:47:f2:30:47:92:f3:a2:56:79:06:34:
4e:61:6b:04:2c:6a:1f:53:f3:74:38:35:52:a1:0f:48:28:fa:
e5:1e:1c:5b:e9:00:83:67:d2:ca:e7:8e:59:23:d8:9c:a5:3e:
d0:b0:8b:3c:8c:ce:bb:9b:6d:97:bb:9b:1f:5c:73:de:3e:f3:
e7:af:79:c7:67:26:a3:6d:02:87:b4:95:68:66:98:5e:be:f8:
3c:2d:35:40:2b:7d:39:de:34:1f:c4:b7:7a:12:78:e8:b1:99:
2b:ca:d8:0a:7e:dc:07:fd:d1:74:bd:5c:43:2e:a9:51:a0:a6:
b2:40:6b:58:93:49:82:c2:ec:4a:c5:1c:b4:bf:f7:5c:91:63:
8a:b4:36:ae:d2:26:71:ea:2a:63:e1:86:10:c6:99:fd:c0:11:
bf:e1:d3:9a:5b:d8:a6:68:85:8e:87:e6:73:4a:c5:dd:a3:c6:
72:53:9c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:41:39 2026 by rpki-client