Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/EPBqQkdx7GD5hYF24Z7UGR81Qo8.roa
File: EPBqQkdx7GD5hYF24Z7UGR81Qo8.roa (raw, json)
Hash identifier: d9xe8thzz0W/d4MTXJUjxHzBqyaFRNrSeI5OVZiP6OY=
Subject key identifier: 10:F0:6A:42:47:71:EC:60:F9:85:81:76:E1:9E:D4:19:1F:35:42:8F
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01A03F660E78C9F2003E7E6BBFA73B3079C9
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/EPBqQkdx7GD5hYF24Z7UGR81Qo8.roa
Signing time: Wed 26 Aug 2026 18:47:27 +0000
ROA not before: Wed 26 Aug 2026 18:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49556
IP address blocks: 185.3.200.0/24 maxlen: 24
188.212.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:66:0e:78:c9:f2:00:3e:7e:6b:bf:a7:3b:30:79:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Aug 26 18:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10f06a424771ec60f9858176e19ed4191f35428f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:04:49:32:ed:00:d1:db:ea:b9:3c:11:46:
9b:54:5e:e2:47:cd:df:6a:69:eb:fd:be:80:6c:e7:
47:a8:f8:93:fc:8d:4b:29:4f:1a:7a:d9:f6:2a:3c:
95:10:52:b7:8d:6c:1b:65:69:f6:e8:d9:2b:52:af:
0b:60:74:d9:88:e9:ff:1b:e0:9c:ac:39:8e:13:71:
62:f9:93:26:8d:65:c6:d5:4a:a9:50:a4:c8:80:24:
1e:a2:1f:2a:65:08:3f:f4:98:cf:ae:94:ca:10:2b:
2c:64:e4:d6:80:4e:f9:39:3f:f5:bd:75:7f:df:70:
9f:3f:47:79:a6:5f:bd:19:a8:7a:74:2d:53:76:0d:
66:a3:61:e4:02:ef:a8:0d:18:f7:5d:94:6e:70:2a:
08:5a:33:37:c7:1c:c3:2f:73:f5:d5:b1:58:9e:57:
b0:72:a8:e6:bb:94:c3:2b:14:83:64:b7:b5:43:ad:
da:51:01:f3:3c:34:ed:75:5c:d3:7f:9f:70:97:84:
7b:4d:33:81:f8:6f:22:1e:c1:6e:ad:8f:f1:fc:0f:
1b:f9:a5:26:72:78:9c:e5:0f:15:f5:d7:96:84:ab:
79:c0:87:bc:eb:f6:68:31:c2:bd:11:c6:09:74:ff:
a6:6b:e7:f2:2c:a0:80:15:4e:dc:fe:17:30:e5:50:
fe:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F0:6A:42:47:71:EC:60:F9:85:81:76:E1:9E:D4:19:1F:35:42:8F
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/EPBqQkdx7GD5hYF24Z7UGR81Qo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.200.0/24
188.212.98.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f9:3e:0c:23:79:00:dd:da:e0:b4:8f:7d:b6:cd:d4:95:bf:
11:2b:bf:7a:fb:63:b3:cc:dd:89:c4:65:12:1e:77:86:18:51:
d8:28:98:23:6d:c8:be:74:7b:17:df:7a:ee:a6:80:66:d3:3b:
aa:f4:33:bc:ab:7b:08:49:12:c0:99:35:cc:e2:ec:8b:5c:7b:
69:18:8b:6d:97:33:ee:de:a2:09:52:96:24:e6:fc:1d:24:0f:
36:0b:c3:d6:9c:03:ed:d8:4f:d2:f7:10:3f:6b:af:36:18:c2:
91:4a:5f:f6:86:b7:d8:ac:29:9f:31:a9:39:ca:ca:3b:6e:90:
81:43:7f:f2:89:1f:18:8a:9a:21:f5:be:ec:69:c9:90:6a:47:
b1:e4:8b:b8:e2:db:2c:99:d1:01:75:3b:64:68:5c:7c:ae:11:
40:09:fb:a8:de:19:91:9c:eb:a3:71:56:c7:a6:9e:4d:75:9d:
34:31:7f:ed:dd:be:c9:22:4b:55:d1:11:02:6e:07:5f:93:0d:
9a:77:66:0f:fd:62:8c:a3:63:cc:3e:36:cd:d6:91:71:db:fb:
2c:8b:3a:da:3a:e4:f2:1f:8d:19:ff:20:2f:97:2f:97:45:be:
94:c2:0d:45:3b:ee:ca:0a:84:6b:30:44:db:49:d3:8f:2f:ac:
8c:e6:25:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:24:57 2026 by rpki-client