Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/C-EukaWXr2kXZCbaHLOBLQ9m5U4.roa
File: C-EukaWXr2kXZCbaHLOBLQ9m5U4.roa (raw, json)
Hash identifier: 5oNWWP9JATtZbQ9s/+0aWJ+9EOmStquNZlSy9y4pgxk=
Subject key identifier: 0B:E1:2E:91:A5:97:AF:69:17:64:26:DA:1C:B3:81:2D:0F:66:E5:4E
Certificate issuer: /CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Certificate serial: 01A03CAB844A36C9EB335DB573D226C565C6
Authority key identifier: 11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/C-EukaWXr2kXZCbaHLOBLQ9m5U4.roa
Signing time: Wed 26 Aug 2026 06:04:28 +0000
ROA not before: Wed 26 Aug 2026 06:04:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210465
IP address blocks: 80.88.144.0/21 maxlen: 21
146.19.99.0/24 maxlen: 24
185.45.184.0/22 maxlen: 22
2a12:8900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:ab:84:4a:36:c9:eb:33:5d:b5:73:d2:26:c5:65:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Validity
Not Before: Aug 26 06:04:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0be12e91a597af69176426da1cb3812d0f66e54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:a4:a1:d5:5b:40:0c:00:e9:ac:d6:d2:31:
88:7a:d5:14:b0:db:a7:61:8f:27:e0:45:b0:22:9e:
ff:19:4b:a5:a5:e6:0f:c6:4f:03:ff:1f:3e:c4:36:
e3:e2:a9:df:47:bc:f4:66:29:67:63:7f:70:64:8d:
29:39:59:e0:6d:ba:f2:39:c8:05:f0:cc:06:4b:58:
29:f2:cf:00:f0:9d:c9:e6:f6:6d:e9:6f:48:ea:77:
f9:ae:ab:0e:02:67:a0:78:59:1d:dd:aa:d7:16:ba:
a0:8a:cb:f1:7f:11:9e:9e:d6:e6:7e:1c:e5:53:ce:
79:12:61:0f:7e:e5:4b:da:d3:4c:4d:15:44:b4:48:
75:cc:f6:5a:f6:a7:fc:a4:f1:49:4f:e7:49:b0:be:
9e:b1:12:6e:7d:70:11:60:71:af:23:29:1d:77:fa:
3b:30:41:ad:ff:ec:fd:c4:aa:57:ef:95:b9:03:e8:
bc:2a:d0:41:cc:56:91:aa:82:da:6c:92:b4:2b:21:
33:9e:d5:e1:1f:1e:f2:79:71:f1:02:2b:f5:27:4a:
6d:b9:20:e8:bf:59:31:ba:bf:f4:c5:5b:8b:0e:2a:
46:ef:14:13:0e:76:7e:fb:ec:bf:21:35:c6:28:c3:
04:b0:b8:b0:15:2c:be:3a:82:35:5b:ab:22:55:81:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E1:2E:91:A5:97:AF:69:17:64:26:DA:1C:B3:81:2D:0F:66:E5:4E
X509v3 Authority Key Identifier:
keyid:11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/C-EukaWXr2kXZCbaHLOBLQ9m5U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.88.144.0/21
146.19.99.0/24
185.45.184.0/22
IPv6:
2a12:8900::/29
Signature Algorithm: sha256WithRSAEncryption
3d:7e:c0:eb:e8:75:cd:3b:a9:d5:f9:c3:8c:ac:6e:79:2b:0a:
b9:b9:7d:37:d4:30:b3:a5:6f:c7:81:79:11:a9:ad:35:d1:67:
a5:9b:da:b7:b6:df:92:53:d0:12:e8:3e:fa:60:dc:a4:d8:f6:
28:18:4b:a2:3c:2d:27:ea:32:1e:92:a4:67:66:c1:27:10:19:
ee:ac:c6:fb:04:fc:ab:be:f0:68:d4:9f:40:66:73:d7:4a:33:
b5:ad:96:c6:2c:82:ea:54:cc:fa:d0:c5:6e:31:85:64:bc:be:
47:ec:b6:c6:cb:43:99:b3:71:b8:8f:67:1c:c0:0d:80:e1:2a:
14:8c:ec:b9:0a:49:5d:b5:e3:2c:9b:c3:83:fd:f8:11:b0:e5:
8a:d0:27:6e:9a:c6:98:8e:18:a8:0c:eb:21:a2:f8:3c:20:c5:
00:7c:f7:36:11:d2:58:d5:65:0e:b6:ec:b4:2e:1e:f3:07:f4:
8e:21:a2:ac:40:da:1d:77:a9:65:1d:e2:f6:50:f2:be:c0:5f:
5e:47:5c:68:80:34:91:5e:08:5c:f1:9a:77:a9:5c:99:30:c6:
b8:ef:0d:0a:f5:7d:91:aa:ed:8f:64:4a:9e:74:bc:48:84:9a:
eb:4a:70:76:8a:8e:08:37:f6:0e:73:5f:8b:5b:a5:55:9b:47:
a7:0c:dc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:03:28 2026 by rpki-client