Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EBGtTbxRTLeIwHow5QFCxPLmLa0.roa
File: EBGtTbxRTLeIwHow5QFCxPLmLa0.roa (raw, json)
Hash identifier: AN78wVQKYfWu5qX9yxR1kgVaX+OzhIyZJpXUoQ0dzLw=
Subject key identifier: 10:11:AD:4D:BC:51:4C:B7:88:C0:7A:30:E5:01:42:C4:F2:E6:2D:AD
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019DDDF3B84B3C188BD6D28055EBF065092C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EBGtTbxRTLeIwHow5QFCxPLmLa0.roa
Signing time: Thu 30 Apr 2026 10:33:50 +0000
ROA not before: Thu 30 Apr 2026 10:33:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198487
IP address blocks: 82.153.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:f3:b8:4b:3c:18:8b:d6:d2:80:55:eb:f0:65:09:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 30 10:33:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1011ad4dbc514cb788c07a30e50142c4f2e62dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:99:af:fa:28:b1:a7:21:a8:49:f8:a1:32:
fa:18:0e:cd:48:21:b5:8c:d0:a5:8f:1e:d5:78:1f:
5e:5b:02:4d:af:ad:2e:ab:87:6c:d9:9f:fc:54:d2:
10:88:ae:05:09:4d:ff:74:ba:73:85:8d:67:ca:9b:
3a:85:62:0b:9c:6d:af:27:2a:cd:e0:77:b0:01:bd:
98:5c:bf:63:a5:bf:0b:1d:04:9f:d8:da:ee:d5:6c:
74:dd:fb:6b:35:81:66:8e:a2:8d:6b:f5:b8:20:1c:
aa:a7:ef:bc:ef:6a:10:a3:80:b2:0f:84:87:3f:36:
d7:b7:5e:4c:d6:35:f6:71:a6:a9:32:59:4f:09:ca:
34:98:06:6a:38:f3:f7:36:c9:c9:bc:2c:20:99:ba:
ad:30:e1:22:8e:50:a6:b0:cf:ac:f9:2a:3d:ba:35:
54:ce:2a:05:64:71:fe:04:df:08:ff:24:5c:d8:49:
33:e3:83:ef:49:f2:20:14:83:d3:88:38:de:0c:ad:
03:72:2c:5d:4e:35:7a:4e:d2:d1:ca:77:e8:7a:3a:
97:c6:34:12:06:87:3c:a3:6e:f8:65:5c:20:1e:4f:
6b:69:34:6d:3b:41:ec:3e:8b:54:71:85:68:77:0a:
4f:2a:dc:4f:02:d8:ec:4a:d4:7f:5c:52:04:64:ef:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:11:AD:4D:BC:51:4C:B7:88:C0:7A:30:E5:01:42:C4:F2:E6:2D:AD
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EBGtTbxRTLeIwHow5QFCxPLmLa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.157.0/24
Signature Algorithm: sha256WithRSAEncryption
75:4e:09:44:2c:b7:30:d6:a8:8a:df:5b:b2:46:0d:bd:86:ae:
ae:19:ae:04:cf:8e:42:51:c4:f5:7f:e1:b0:73:56:9d:bd:9f:
b5:67:30:74:ac:3e:f6:9d:ef:b6:89:7b:09:b5:36:ea:98:76:
6a:03:10:63:85:02:da:25:66:8b:a3:64:2e:57:5d:6f:0c:16:
89:40:9e:7c:40:02:db:ba:c3:56:92:e5:dd:4c:05:41:08:c9:
2a:b3:d4:66:1e:94:ae:78:ce:26:7f:bc:f6:05:e2:84:56:ee:
54:7b:dc:81:b8:20:79:37:2f:e0:54:7c:09:e8:3f:1b:a9:ff:
c8:ba:a8:0a:4b:99:a0:d3:b4:a8:bd:a7:87:d4:ce:8d:c2:9b:
e1:f8:51:b2:ff:9f:d4:e4:88:52:d4:57:6f:41:25:05:38:f1:
99:df:30:3f:ba:0a:1d:ea:4d:6a:b0:8d:cd:9a:83:bf:cf:e6:
bc:54:eb:4a:7f:91:bf:00:b1:06:0c:82:d1:0c:ac:97:7f:cd:
cf:3d:e1:58:a8:f8:29:b6:f8:f1:b0:c8:f4:dd:17:e4:6d:a3:
0d:60:e6:5f:21:70:6e:b7:08:31:a5:55:2f:6a:6a:c9:d1:64:
7c:10:cd:94:26:2a:ba:41:f0:b4:5b:ec:b4:09:aa:39:27:5c:
8c:6d:5e:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3d87hLPBiL1tKAVevwZQksMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwNDMwMTAzMzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDExYWQ0ZGJjNTE0Y2I3ODhjMDdhMzBlNTAxNDJjNGYyZTYyZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjaZr/oosachqEn4oTL6GA7NSCG1
jNCljx7VeB9eWwJNr60uq4ds2Z/8VNIQiK4FCU3/dLpzhY1nyps6hWILnG2vJyrN
4HewAb2YXL9jpb8LHQSf2Nru1Wx03ftrNYFmjqKNa/W4IByqp++872oQo4CyD4SH
PzbXt15M1jX2caapMllPCco0mAZqOPP3NsnJvCwgmbqtMOEijlCmsM+s+So9ujVU
zioFZHH+BN8I/yRc2Ekz44PvSfIgFIPTiDjeDK0DcixdTjV6TtLRynfoejqXxjQS
Boc8o274ZVwgHk9raTRtO0HsPotUcYVodwpPKtxPAtjsStR/XFIEZO+sUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBARrU28UUy3iMB6MOUBQsTy5i2tMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvRUJHdFRieFJUTGVJd0hvdzVRRkN4UExtTGEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpmdMA0G
CSqGSIb3DQEBCwUAA4IBAQB1TglELLcw1qiK31uyRg29hq6uGa4Ez45CUcT1f+Gw
c1advZ+1ZzB0rD72ne+2iXsJtTbqmHZqAxBjhQLaJWaLo2QuV11vDBaJQJ58QALb
usNWkuXdTAVBCMkqs9RmHpSueM4mf7z2BeKEVu5Ue9yBuCB5Ny/gVHwJ6D8bqf/I
uqgKS5mg07SovaeH1M6Nwpvh+FGy/5/U5IhS1FdvQSUFOPGZ3zA/ugod6k1qsI3N
moO/z+a8VOtKf5G/ALEGDILRDKyXf83PPeFYqPgptvjxsMj03RfkbaMNYOZfIXBu
twgxpVUvamrJ0WR8EM2UJiq6QfC0W+y0Cao5J1yMbV78
-----END CERTIFICATE-----
Generated at Thu May 7 05:37:38 2026 by rpki-client