Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ekzOqt3czUs7Mi7O02eCqgUuxFM.roa
File: ekzOqt3czUs7Mi7O02eCqgUuxFM.roa (raw, json)
Hash identifier: vKijkLHD9I3QgOkLK59eBNEwCmJEZDSCnEGFMDeFAwQ=
Subject key identifier: 7A:4C:CE:AA:DD:DC:CD:4B:3B:32:2E:CE:D3:67:82:AA:05:2E:C4:53
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01A11BD417606D94ABEB3B22406BB81DA153
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ekzOqt3czUs7Mi7O02eCqgUuxFM.roa
Signing time: Thu 08 Oct 2026 14:04:06 +0000
ROA not before: Thu 08 Oct 2026 14:04:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201021
IP address blocks: 212.16.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:d4:17:60:6d:94:ab:eb:3b:22:40:6b:b8:1d:a1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Oct 8 14:04:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a4cceaadddccd4b3b322eced36782aa052ec453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:77:85:1c:34:32:55:ef:33:a6:95:23:43:
88:c0:8a:b7:ff:f3:41:81:98:d5:ef:f0:54:07:8a:
b6:53:74:ad:e7:b6:38:fb:74:54:2d:74:4c:54:40:
5b:58:ab:66:3d:be:ed:7e:4e:35:de:22:9c:00:bc:
ad:69:b6:c4:d5:5f:30:c4:5e:c7:b8:c7:18:99:68:
f5:67:1a:3b:db:fb:15:de:04:1e:14:53:a2:ee:a5:
67:1b:1f:a1:05:cc:97:bf:f7:0d:e3:28:79:7a:d4:
66:27:80:58:41:8a:a9:78:f2:6b:d0:85:46:ac:45:
13:73:e4:e4:cc:6c:00:99:e3:26:94:03:fd:c6:b7:
08:8a:f1:23:91:0a:d7:ef:25:51:59:4d:a1:cb:c2:
b1:9a:db:1c:cb:92:91:a0:b1:0b:85:88:b4:7a:cd:
4e:e5:02:d8:58:22:f3:ac:07:d0:07:c4:9e:85:2a:
c3:19:65:95:77:81:35:ba:49:3f:64:40:3e:bd:12:
51:92:6c:4f:eb:39:8c:a9:f2:dc:17:57:0a:8e:23:
bf:8c:2f:60:9d:26:f3:ef:67:79:93:e1:73:8a:76:
7c:3e:7c:eb:fe:97:eb:7e:7d:e9:d9:7e:06:76:12:
f9:1b:1b:ae:ef:02:8c:38:83:3b:0e:42:63:f0:4c:
0a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4C:CE:AA:DD:DC:CD:4B:3B:32:2E:CE:D3:67:82:AA:05:2E:C4:53
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ekzOqt3czUs7Mi7O02eCqgUuxFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.85.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e1:ca:8e:cb:47:2d:10:74:d7:29:fa:02:6f:1d:26:fe:80:
a1:9e:b8:c2:ee:45:47:06:15:bd:54:c7:0b:b2:27:c0:d4:b0:
46:35:63:ea:a1:a7:76:28:b0:4b:50:af:32:8f:31:01:96:78:
75:02:7e:31:71:36:c8:52:be:7e:87:20:35:06:e6:30:6c:d7:
dd:95:26:b2:c6:6e:0b:cb:db:54:76:f7:24:bd:e6:76:8e:53:
d5:a9:73:f2:26:18:68:a0:6c:d5:07:3c:33:60:fd:9c:b2:d1:
83:d2:40:12:7e:79:9c:89:a2:87:d4:5e:fa:96:25:eb:60:9d:
3e:02:73:e4:85:f1:62:31:af:32:7b:24:96:ea:55:38:41:4f:
e9:ca:5f:d7:26:7b:38:f9:a7:7d:6c:cb:19:a8:3a:aa:03:6b:
8f:10:b4:3d:ac:df:94:7c:d2:52:66:88:11:84:3f:5a:23:af:
39:ec:84:fe:f4:94:d0:46:7e:18:91:e3:87:dd:db:7d:9d:6d:
8c:c0:90:79:16:58:fa:6d:2a:b6:42:40:56:07:0f:1f:94:ff:
fc:62:d5:21:bd:89:39:eb:66:24:53:e2:92:2f:81:b3:67:c7:
99:72:ef:31:f8:d0:1f:58:c2:84:71:e6:a0:86:48:7f:7e:60:
a6:29:16:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:16:38 2026 by rpki-client