Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/eU8knBrv6CtLdOkcXTIWld4bJdM.roa
File: eU8knBrv6CtLdOkcXTIWld4bJdM.roa (raw, json)
Hash identifier: 0xT4vRgU22+4fjdxxogH0BmoN4al/lT/KsPmMpP6+5s=
Subject key identifier: 79:4F:24:9C:1A:EF:E8:2B:4B:74:E9:1C:5D:32:16:95:DE:1B:25:D3
Certificate issuer: /CN=2cd9983169f960a0ec411df174059bdcfbec8132
Certificate serial: 019FEAABBBF1F040F12DC9E1E3A17D5B9E3D
Authority key identifier: 2C:D9:98:31:69:F9:60:A0:EC:41:1D:F1:74:05:9B:DC:FB:EC:81:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNmYMWn5YKDsQR3xdAWb3PvsgTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/eU8knBrv6CtLdOkcXTIWld4bJdM.roa
Signing time: Mon 10 Aug 2026 07:55:51 +0000
ROA not before: Mon 10 Aug 2026 07:55:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201121
IP address blocks: 5.158.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/LNmYMWn5YKDsQR3xdAWb3PvsgTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/LNmYMWn5YKDsQR3xdAWb3PvsgTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNmYMWn5YKDsQR3xdAWb3PvsgTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:ab:bb:f1:f0:40:f1:2d:c9:e1:e3:a1:7d:5b:9e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd9983169f960a0ec411df174059bdcfbec8132
Validity
Not Before: Aug 10 07:55:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=794f249c1aefe82b4b74e91c5d321695de1b25d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:f1:c7:bf:43:10:f6:79:83:2e:2a:68:dc:
cb:1f:51:f5:49:8f:cf:38:39:74:f2:b7:99:96:50:
5a:9c:83:4c:24:bc:98:5e:5b:a6:ef:71:90:f7:a5:
1e:b0:9b:3f:d8:4c:f7:eb:4b:77:41:a7:62:5a:a8:
31:8f:e5:00:f7:89:08:63:b4:06:25:fc:6d:41:c3:
38:36:23:7b:70:d1:2e:ce:a1:93:64:ee:a0:dd:2a:
ac:f8:a0:11:77:76:0d:1a:2f:b0:2d:26:af:72:86:
16:53:8f:b2:a1:f3:c3:2a:11:e6:46:cb:72:dc:ee:
83:89:94:dd:af:ce:2a:5c:72:1d:f6:28:61:d9:87:
96:54:32:3a:e0:f7:99:3c:7e:9f:91:f8:cf:41:11:
1f:19:c9:fd:dd:82:ed:d5:a0:ea:b5:00:b3:7e:08:
81:9e:fb:4f:50:39:d5:f6:a3:f3:36:ab:b9:d0:5c:
cf:45:39:18:c3:1d:d7:5f:a9:f1:39:46:4d:e8:0a:
a5:d7:b5:e3:e9:d5:9d:f8:fb:64:d4:be:13:60:fb:
a1:4a:2f:93:97:9e:d6:ab:2d:b7:a0:26:46:72:59:
33:13:ab:b4:20:22:0a:f1:af:70:77:f0:9a:d0:7a:
fd:f5:5b:db:29:37:91:1e:eb:b5:d7:f3:e5:41:a2:
da:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4F:24:9C:1A:EF:E8:2B:4B:74:E9:1C:5D:32:16:95:DE:1B:25:D3
X509v3 Authority Key Identifier:
keyid:2C:D9:98:31:69:F9:60:A0:EC:41:1D:F1:74:05:9B:DC:FB:EC:81:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNmYMWn5YKDsQR3xdAWb3PvsgTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/eU8knBrv6CtLdOkcXTIWld4bJdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/182547-d386-433d-ac2a-3cf0256583c6/1/LNmYMWn5YKDsQR3xdAWb3PvsgTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.87.0/24
Signature Algorithm: sha256WithRSAEncryption
87:76:c7:ee:01:f6:8c:78:c9:4b:18:22:a2:cd:bd:35:1b:ed:
f3:de:a5:7b:b4:fa:bf:c0:7a:eb:ee:99:c0:ab:58:40:8a:97:
6a:24:b5:89:a8:ee:69:8d:00:bc:8e:aa:ef:5d:84:36:48:7d:
c5:f4:5c:fb:39:60:9a:e1:1d:90:13:7d:b2:76:1f:3f:61:24:
b9:e8:a9:93:a4:1c:ff:2d:33:d0:89:3d:36:94:00:63:1c:40:
69:56:5b:d0:aa:49:2a:e1:50:62:d4:bc:fb:68:24:36:17:c5:
89:f9:28:d2:93:79:cf:2a:b9:d2:9b:75:44:24:44:5f:d3:2c:
e9:80:ed:e4:6b:3a:89:ad:88:08:66:98:ef:72:44:47:ce:b1:
c5:de:6d:a2:f0:91:61:61:aa:30:f6:b0:fb:ef:4c:8f:22:e1:
fc:b5:d7:3d:24:31:c9:e0:49:9f:c7:77:1f:40:96:7f:40:d9:
e6:d5:d0:00:bc:e1:4a:11:08:72:15:44:00:af:20:4b:d6:0b:
2e:df:42:f5:01:a2:50:d6:43:ad:5e:6e:65:38:bd:20:26:59:
10:f3:a7:d3:97:42:eb:94:d5:02:8f:5e:4e:10:d8:e3:53:28:
9a:b3:c0:2c:e1:1c:d0:4f:9c:69:01:14:99:84:4b:64:dc:71:
25:82:4a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:24:14 2026 by rpki-client