Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/eKYO0fBZL2Ci_BHAL1YDc9MfBrw.roa
File: eKYO0fBZL2Ci_BHAL1YDc9MfBrw.roa (raw, json)
Hash identifier: 3ZSnjJdUYO6qxn9wSHwRnL6f1dEkVEZETTOzAVn9AKI=
Subject key identifier: 78:A6:0E:D1:F0:59:2F:60:A2:FC:11:C0:2F:56:03:73:D3:1F:06:BC
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019FDD462D36968FAD6B8650C8C7E6BCA2D4
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/eKYO0fBZL2Ci_BHAL1YDc9MfBrw.roa
Signing time: Fri 07 Aug 2026 17:29:51 +0000
ROA not before: Fri 07 Aug 2026 17:29:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219027
IP address blocks: 170.168.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:46:2d:36:96:8f:ad:6b:86:50:c8:c7:e6:bc:a2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Aug 7 17:29:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78a60ed1f0592f60a2fc11c02f560373d31f06bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:ec:89:c4:7a:f0:4b:0e:b1:b7:d7:4f:31:
3e:4d:04:95:44:41:b0:12:df:c5:4e:4b:04:49:e3:
37:6c:04:1c:8d:16:0a:50:c1:10:6d:af:b2:58:4b:
0f:14:a2:aa:5b:be:dc:a9:a0:07:de:ef:52:0b:20:
61:13:72:07:d3:36:04:26:eb:35:1f:7a:af:8c:40:
56:6c:2e:00:ab:3c:d4:15:a3:da:e8:57:6e:b5:26:
08:4f:90:29:be:65:70:fc:67:4d:0e:b5:5b:26:a2:
5c:e3:77:7e:d2:e8:7e:b7:e6:08:d3:22:7a:fd:86:
de:e3:97:e1:4d:a5:0c:67:64:f5:8c:6f:ba:2a:67:
b1:36:cd:11:fd:74:c2:52:09:29:8f:dc:65:d4:e2:
35:52:c6:d7:e7:5d:8d:08:40:05:b0:a6:38:50:e9:
f4:a8:4d:65:c1:ea:13:c5:09:b9:7b:39:49:e3:30:
af:f6:55:18:1c:48:d6:e5:53:a8:c8:19:68:4d:5d:
65:66:0e:a7:c5:dd:38:be:63:d8:7c:d1:6c:8d:24:
a3:bd:08:48:67:94:52:0f:71:4a:4d:68:aa:d3:f0:
81:0e:c4:7f:6e:a4:4f:14:d4:4a:0b:d4:42:5e:c0:
e8:aa:ee:31:1c:73:39:e4:32:da:ac:c2:50:c4:52:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A6:0E:D1:F0:59:2F:60:A2:FC:11:C0:2F:56:03:73:D3:1F:06:BC
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/eKYO0fBZL2Ci_BHAL1YDc9MfBrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.49.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:5b:23:d9:ae:8a:09:18:55:8f:21:6a:4b:a2:e3:b3:6e:f1:
12:ad:1d:cc:2d:45:1d:98:f8:07:b8:2c:69:bb:4b:d0:66:5d:
14:fe:88:93:a3:09:46:4e:8b:03:51:16:29:ed:b7:d4:de:3f:
e0:1d:dc:ea:74:e8:89:32:64:de:2c:1b:a6:43:2c:7c:3c:01:
5f:b4:9b:b4:d8:67:54:9f:a3:cb:aa:6e:d9:55:02:b9:45:c6:
bd:4b:51:ea:f2:6c:da:4b:9d:8c:ea:34:cb:d4:56:8f:b2:08:
1c:95:59:50:21:cd:0a:4f:aa:8e:44:19:95:85:d5:db:b8:98:
af:b9:06:d6:1b:82:30:f5:9e:8d:2f:9d:95:95:53:df:41:02:
7a:13:74:06:34:c5:87:2f:19:29:6e:61:6f:10:76:44:10:5e:
4c:4f:56:f0:a0:b9:01:5a:de:0f:52:e7:57:cf:66:91:73:da:
cf:4a:c1:ba:79:bf:47:7a:69:79:6b:d3:56:53:3e:ad:c4:7a:
ef:8a:9e:f7:88:ec:d1:81:75:88:f3:06:db:13:83:f3:f5:75:
d9:f3:32:84:b0:1c:1a:6b:ba:22:76:19:86:ad:ad:fc:37:64:
02:bb:fd:e9:b3:eb:11:c1:80:08:c6:1c:ac:2c:61:10:e4:d9:
d9:d1:21:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:10:28 2026 by rpki-client