Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/EZuv_MDmG_Udx3XRGCGwWGJatgc.roa
File: EZuv_MDmG_Udx3XRGCGwWGJatgc.roa (raw, json)
Hash identifier: BQbigxwemUUOWCvwLUfqDoXWY9tRChxrrNbJyMZKPRU=
Subject key identifier: 11:9B:AF:FC:C0:E6:1B:F5:1D:C7:75:D1:18:21:B0:58:62:5A:B6:07
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A03F852F76224C4E9B65DA66FDBBDA9BE3
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/EZuv_MDmG_Udx3XRGCGwWGJatgc.roa
Signing time: Wed 26 Aug 2026 19:21:28 +0000
ROA not before: Wed 26 Aug 2026 19:21:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39640
IP address blocks: 94.125.137.0/24 maxlen: 24
167.160.31.0/24 maxlen: 24
178.19.32.0/23 maxlen: 23
185.216.131.0/24 maxlen: 24
201.49.188.0/22 maxlen: 22
206.203.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:85:2f:76:22:4c:4e:9b:65:da:66:fd:bb:da:9b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 26 19:21:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=119baffcc0e61bf51dc775d11821b058625ab607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:63:a7:8d:95:42:92:b5:a2:35:a8:54:3c:38:
8b:e1:c8:dc:f5:8f:ed:c4:c3:87:fe:dc:e1:12:64:
aa:44:de:f7:b0:a6:9e:b2:31:0b:7d:4e:ae:9a:a7:
5f:78:e5:51:ca:f3:f6:94:34:35:04:e9:dd:78:f6:
f0:99:67:de:01:d8:09:3b:23:95:1d:0b:73:ce:5a:
d0:12:51:a7:ae:59:0d:14:d0:12:4a:bf:42:cb:7b:
9e:ad:fe:da:6a:0d:d2:b6:b1:34:1d:7c:6c:b1:7a:
a0:0b:52:63:f9:1e:30:93:86:d7:43:4f:fc:a9:30:
98:af:6d:5a:a4:50:6c:54:aa:ea:67:ad:0a:81:07:
21:79:3e:4d:19:81:8c:df:67:6b:24:99:bd:af:a0:
8f:64:49:fc:5a:ef:33:d5:fb:43:3f:85:0d:64:e4:
6b:e7:8f:2f:fc:44:c9:6d:7e:ca:e5:fb:7d:f3:fa:
e6:ba:40:5a:01:ce:da:26:0d:c3:e4:b5:80:46:36:
d2:03:ee:8e:37:c8:cd:5b:c1:5c:e0:f6:51:2a:51:
74:3b:c0:46:2a:15:ab:cb:b9:cd:92:29:93:77:46:
9f:50:a4:02:e8:5b:14:9f:3f:96:eb:1a:9e:48:da:
a8:db:ca:a7:9a:6b:1b:26:64:ad:ec:a3:af:ab:30:
e1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9B:AF:FC:C0:E6:1B:F5:1D:C7:75:D1:18:21:B0:58:62:5A:B6:07
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/EZuv_MDmG_Udx3XRGCGwWGJatgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.137.0/24
167.160.31.0/24
178.19.32.0/23
185.216.131.0/24
201.49.188.0/22
206.203.0.0/18
Signature Algorithm: sha256WithRSAEncryption
c4:ab:f4:11:e7:fa:ce:18:25:a0:30:48:f9:b8:8e:ac:af:e1:
11:ce:42:0e:2e:c7:32:c0:de:c2:73:26:56:b9:82:ad:ae:3c:
25:f2:53:65:30:d8:a9:c4:63:6e:31:ba:02:20:36:73:44:83:
b1:66:67:42:b2:7d:7f:29:b7:bb:81:a0:36:4f:a5:02:0c:67:
f3:db:94:ca:2f:ed:de:28:c9:7b:7c:8a:6b:28:69:54:24:16:
71:1d:31:06:54:18:6e:31:7a:38:5e:8f:0c:e3:75:87:a9:e0:
fd:73:89:8a:be:71:4a:2b:97:a8:35:4c:22:29:83:2b:53:ae:
30:fa:0e:d9:d4:0a:52:17:75:b6:69:cc:f8:7e:25:99:1b:42:
67:cc:24:d2:73:ff:d5:a5:06:f3:c8:f2:30:2d:03:ce:82:4c:
de:fe:49:d8:a0:45:16:f8:a1:73:9f:f4:d2:be:6d:e1:fa:40:
85:b3:d5:78:62:39:ef:2a:34:0b:05:d9:91:ae:0d:b8:de:1a:
8b:28:5c:bc:bd:26:6c:fc:ec:e5:6a:6c:e7:7b:ac:ac:b6:7d:
42:d3:0b:f3:bc:7a:9c:5d:96:a0:15:3a:d4:a4:da:25:32:4e:
7a:fe:63:7f:ab:e1:6d:f9:4b:3a:33:65:e1:7e:d9:3b:c6:db:
51:a5:e9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 14:27:02 2026 by rpki-client