Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/EqvqPCW5Ky65lZ54qBOyNwid5xw.roa
File: EqvqPCW5Ky65lZ54qBOyNwid5xw.roa (raw, json)
Hash identifier: 1c3iHkMEYFedczV+gaGVb+OMATiIDNixPdaJ8E952+Y=
Subject key identifier: 12:AB:EA:3C:25:B9:2B:2E:B9:95:9E:78:A8:13:B2:37:08:9D:E7:1C
Certificate issuer: /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial: 019F236891B5C487B9C73F4F6D0CB13CAC3E
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/EqvqPCW5Ky65lZ54qBOyNwid5xw.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200908
IP address blocks: 69.40.204.0/22 maxlen: 24
188.93.117.0/24 maxlen: 24
193.163.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:91:b5:c4:87:b9:c7:3f:4f:6d:0c:b1:3c:ac:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12abea3c25b92b2eb9959e78a813b237089de71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:99:b8:56:ac:cc:2e:34:f5:dd:6d:39:df:84:
72:23:ad:80:53:f4:05:e5:68:da:cc:e1:53:fb:90:
c3:1c:8f:09:4a:e4:57:c9:ae:70:d5:f5:11:51:c4:
d3:7f:54:7c:de:26:1e:36:70:92:7d:97:cd:e1:06:
78:de:0d:8b:ae:eb:d6:98:08:19:81:d0:9f:84:26:
23:f8:42:5e:ff:2c:2a:56:52:43:34:aa:86:0a:86:
79:b7:93:c1:1a:cd:98:78:f0:7e:c1:89:66:db:80:
5f:1b:3c:53:11:c6:89:40:cc:15:76:fe:be:9e:44:
2a:fe:dc:7f:5a:46:fd:a0:f5:d1:d5:ab:5b:66:f9:
40:5a:5c:a9:7b:4a:28:9f:05:b3:4a:d5:eb:bc:12:
0d:b4:1d:69:a6:f7:56:52:5b:26:8d:43:4c:a5:31:
f0:29:ca:aa:ac:5a:d9:7d:1e:89:fe:81:48:6b:2c:
78:98:c7:97:49:b7:8c:44:0c:29:28:13:88:2b:7b:
1f:6a:bd:18:bf:44:89:1e:b5:ef:80:35:22:87:af:
54:83:38:07:ab:9c:37:39:38:c3:76:14:fc:73:1d:
ce:01:86:1d:a9:02:74:76:e3:13:d7:0f:34:20:6f:
0b:ea:1c:a0:59:f2:dc:13:40:1f:b8:ba:d5:a9:00:
6e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AB:EA:3C:25:B9:2B:2E:B9:95:9E:78:A8:13:B2:37:08:9D:E7:1C
X509v3 Authority Key Identifier:
keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/EqvqPCW5Ky65lZ54qBOyNwid5xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.40.204.0/22
188.93.117.0/24
193.163.117.0/24
Signature Algorithm: sha256WithRSAEncryption
64:58:c5:d4:97:f2:cf:8c:72:17:04:ae:d4:22:96:11:c6:83:
60:31:4a:e5:25:4d:ba:23:fb:b9:9e:08:6d:e5:00:98:43:a8:
23:41:a3:27:78:ed:43:fa:e2:72:40:cc:3c:7e:53:37:7d:81:
99:c5:97:29:49:ee:ca:eb:78:4f:ba:5a:cf:58:b8:8f:99:a0:
2a:e9:61:b9:e7:7c:3f:b3:04:6b:eb:34:ea:14:4f:13:cd:53:
c0:e1:20:6b:73:65:49:dc:2d:6c:12:9c:d9:a5:a5:55:a7:8a:
ac:c6:b9:2e:e5:17:2c:52:a6:29:ee:a4:e1:40:82:17:92:83:
74:25:ca:47:0e:e4:18:87:af:71:98:a7:c8:40:21:36:32:9b:
34:5d:60:1e:ec:8b:aa:ee:e7:de:9e:09:ac:4d:09:ac:bc:16:
ec:20:3b:d4:68:78:64:34:1f:f3:3f:b9:43:f9:97:c2:9e:fa:
48:65:87:0a:60:13:f9:50:19:4b:c9:79:53:ad:f4:a5:1d:34:
7d:f9:52:1d:c4:0e:1b:57:4e:48:13:3a:a8:66:61:3b:33:4a:
6d:6c:98:c4:da:98:96:96:2d:0e:3b:ce:c7:c2:5e:c6:3a:44:
66:19:3f:82:b0:c0:05:e4:f4:9e:f5:ac:ce:b2:3c:b0:2a:e0:
4f:8a:9a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 08:45:56 2026 by rpki-client