Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/EOYmWFU2P5zIUeHMuSlY6cnQqIw.roa
File: EOYmWFU2P5zIUeHMuSlY6cnQqIw.roa (raw, json)
Hash identifier: mQSUxp91QdwQKxr2rE4JmFGkd5x9nm55ITw2rDvsMrU=
Subject key identifier: 10:E6:26:58:55:36:3F:9C:C8:51:E1:CC:B9:29:58:E9:C9:D0:A8:8C
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368F17A9714C68657248461BF766B50
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/EOYmWFU2P5zIUeHMuSlY6cnQqIw.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49902
IP address blocks: 77.137.224.0/19 maxlen: 20
77.143.0.0/16 maxlen: 18
77.143.17.0/24 maxlen: 24
195.115.116.0/22 maxlen: 22
213.222.64.0/18 maxlen: 19
213.222.96.0/19 maxlen: 19
213.223.46.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f1:7a:97:14:c6:86:57:24:84:61:bf:76:6b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10e6265855363f9cc851e1ccb92958e9c9d0a88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5c:be:2d:f9:16:67:b2:86:11:72:5f:24:a2:
9c:47:7b:e3:e1:83:cf:e0:35:44:d1:72:45:b7:24:
41:02:18:7a:01:7f:20:88:7d:91:b8:a0:82:98:01:
05:2b:a0:f5:8a:b3:a9:9b:98:e1:9a:f5:6e:ed:ff:
86:4f:be:19:81:a7:7d:ca:c1:cc:eb:47:d0:fd:13:
d4:75:5c:e1:8e:cb:6f:28:bb:5c:70:02:35:2e:02:
7c:c6:70:95:ed:b6:b0:61:b5:90:3e:ab:92:e0:83:
5e:ba:55:24:f8:72:61:43:3b:5e:82:b5:04:b5:bd:
e4:35:d9:fe:07:d2:b7:6b:83:9a:4e:ea:88:e8:15:
ac:25:a7:dd:64:8b:f8:ad:96:4e:04:cb:2b:ed:c7:
bf:3c:fc:dd:14:99:95:ff:5e:a6:88:e3:fa:3a:51:
47:d0:c6:2c:fe:bb:54:43:25:bb:2f:74:f8:45:6d:
f3:b9:b3:9c:74:e8:9f:8c:d7:99:8e:98:0a:73:7a:
52:f3:8a:f4:82:ce:ad:39:84:29:3d:56:1d:1f:97:
6a:78:bf:6c:eb:82:5f:a4:01:68:37:4f:2e:4b:9f:
27:fc:e0:04:17:e8:f2:d5:c2:48:3d:9d:34:e5:12:
08:ff:09:c6:47:84:c2:f5:be:78:23:99:f7:d0:55:
6c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E6:26:58:55:36:3F:9C:C8:51:E1:CC:B9:29:58:E9:C9:D0:A8:8C
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/EOYmWFU2P5zIUeHMuSlY6cnQqIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.137.224.0/19
77.143.0.0/16
195.115.116.0/22
213.222.64.0/18
213.223.46.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:5b:c2:cd:2f:57:49:59:27:3e:e0:97:b1:ee:6b:2f:d9:35:
d4:77:b6:f3:75:11:a8:f1:3b:6b:c1:6e:ab:21:8b:6e:2f:86:
8c:bc:04:c6:66:f8:d8:cf:f4:7d:3e:57:17:54:46:6e:04:ce:
67:6f:86:cb:da:e7:e2:2d:55:e2:9d:32:9c:7c:51:2d:3f:a6:
ba:1c:c6:62:98:a7:7d:b6:81:76:e3:a0:74:5f:75:7c:66:8c:
6e:62:65:81:1b:b1:7d:6b:95:73:8e:a7:aa:48:01:3a:31:be:
6d:19:f0:6b:ac:bd:0b:2d:de:16:77:ac:89:9d:c0:9d:04:06:
db:8a:23:8e:14:1a:24:a5:2b:91:fd:ae:b6:41:cb:6d:c9:f7:
5e:9b:55:71:e8:8f:95:da:a5:a1:f7:5c:7f:fb:29:8a:4e:4c:
9e:e6:d1:54:09:48:dd:75:cc:dc:bd:24:1b:dc:9a:53:b2:8c:
6e:7f:68:8b:63:2a:ca:8a:47:1c:34:23:d6:c0:40:e5:be:95:
b6:c7:7a:84:b8:ea:40:3d:2b:54:b2:b7:68:8e:3f:73:82:57:
76:74:7d:ff:64:7e:2b:3c:56:8e:8e:3c:4a:75:eb:e8:75:e2:
e9:ca:4f:3e:cf:fc:8a:d6:64:c4:44:f7:50:51:4f:38:fd:d7:
f4:4a:7a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:33 2026 by rpki-client